{"report_id":"1a9dd039-02ba-480d-836b-22730bdfa7b8","version":6,"status":"done","tags":["pdf"],"date":"2026-01-07T04:17:00Z","url":{"schema":"http","addr":"www.bluemeginvests.getfar-express.com/","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":0,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"title":"BLUEMEG INVEST :-: Home","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-06T08:41:22.462876Z","times_seen":1035575,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.bluemeginvests.getfar-express.com/","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":0,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T04:17:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widget-sheriff.tradingview-widget.com","ip":{"addr":"52.84.50.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-06-05","domain_rank":206730,"first_seen":"2024-02-01T14:12:53Z","last_seen":"2026-01-06T06:25:17.144999Z","alert_count":0,"request_count":1,"received_data":594,"sent_data":593,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-01-05T04:43:37.683204Z","alert_count":0,"request_count":2,"received_data":81886,"sent_data":1048,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-01-05T04:11:12.757499Z","alert_count":0,"request_count":3,"received_data":372570,"sent_data":1902,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"87.242.88.149","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":346139,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2026-01-06T12:38:44.044888Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":538,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-5.jivosite.com","ip":{"addr":"130.193.53.144","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1947235,"first_seen":"2023-01-18T15:13:00Z","last_seen":"2026-01-02T20:31:25.109817Z","alert_count":0,"request_count":1,"received_data":828,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widgetdata.tradingview.com","ip":{"addr":"93.123.102.197","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"United Kingdom","country_code":"GB"},"domain_registered":"2010-03-20","domain_rank":179381,"first_seen":"2015-02-20T09:47:36Z","last_seen":"2026-01-01T13:14:44.575836Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":742,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":14665,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.bluemeginvests.getfar-express.com","ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"domain_registered":"2025-06-23","domain_rank":0,"first_seen":"2026-01-07T04:17:06.473076Z","last_seen":"2026-01-07T04:17:06.473076Z","alert_count":153,"request_count":51,"received_data":38526143,"sent_data":29594,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-01-05T13:13:35.16135Z","alert_count":0,"request_count":8,"received_data":1724958,"sent_data":4165,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s3-symbol-logo.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":110931,"first_seen":"2020-11-23T08:22:37Z","last_seen":"2026-01-06T13:39:11.288433Z","alert_count":0,"request_count":10,"received_data":15471,"sent_data":5401,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.tradingview-widget.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-05","domain_rank":196495,"first_seen":"2021-04-08T06:14:48Z","last_seen":"2026-01-06T16:19:35.347786Z","alert_count":0,"request_count":28,"received_data":522830,"sent_data":15443,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-04T22:24:22.284555Z","alert_count":0,"request_count":4,"received_data":27339,"sent_data":2349,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":5,"received_data":203429,"sent_data":2919,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"0195db53e178d3b4c082f8d777f6354f","sha1":"0d17072d4a10ca6a218eea21b376f55ef0bdb5ed","sha256":"c7cadb2056803ba2c8c9ea8f8b1725c73198d9e6165a2650fb8eacfe01a679f1","sha512":"6c27280d0c73af4f1e11804a9e45acbe32080ac718a933fe75321c8139c4c9afcae3557e95f915e30f233b2798a59d1103b04d833f3510ea2e10dbfedb2fb848","magic":"PDF document, version 1.3, 8 page(s)","size":470895,"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/cert.pdf","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":[{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/cert.pdf","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"md5":"0195db53e178d3b4c082f8d777f6354f","sha1":"0d17072d4a10ca6a218eea21b376f55ef0bdb5ed","sha256":"c7cadb2056803ba2c8c9ea8f8b1725c73198d9e6165a2650fb8eacfe01a679f1","sha512":"6c27280d0c73af4f1e11804a9e45acbe32080ac718a933fe75321c8139c4c9afcae3557e95f915e30f233b2798a59d1103b04d833f3510ea2e10dbfedb2fb848","magic":"PDF document, version 1.3, 8 page(s)","size":470895,"meta":{"version":"1.4","author":"","title":"cert","subject":"","producer":"macOS Version 13.6.3 (Build 22G436) Quartz PDFContext","creator":"Word","page_count":11},"extracted_urls":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}]}}],"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/parallax-scroll.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"828dcce2481fddde9a12986a11d2d6cb","sha1":"679ed2045cd16e4ba35bab23e122a1e8cfb91db4","sha256":"323be7d67a7d9d4af3348a1083bf41006ef084b740714c4db04e061102d97b3c","sha512":"55bbf62578b5bcde797387bf051bf9a544dc1dd34d43acef5a56e234b081ffc6754afe8db0468184864b1cc5150a306b2c5fd4f5d69951e62184c17cda71951b","ssdeep":"192:3tlmESxgCsueqki3bixigrlg+67PLUKqBl6:THSxiueqkiG7iPp","tlshash":"5602fd04e4930522e5e771358f5e029fb72eb5079269d9287b0ddacd4f8093493e8fe6","size":8854,"data":"","first_seen":"2023-03-10T05:21:35Z","last_seen":"2026-07-27T13:32:19.638457Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/meanmenu.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1a78e15b45e0497c3299992222d138b","sha1":"a30da9f858a3ce2ab3edcf07706337d2ca32d9f5","sha256":"4594db563a574092ecd91c9f357af5a366bebf76ddb9d1f4e680d63eca02795b","sha512":"a4051d48db93666b1e84261b6f5c4503f9093e926ceefb8a8f3409647e004622796a8765cdc8f15bc133c636b0d8a16166aeaec908cc4e4106855880006eba11","ssdeep":"192:QIsVd+89x+N3UXr3/5gSvB93q2I6ktrquz8Ikb:QrVd+8iN3UXr51JGpu","tlshash":"ca3285e0f37c11ae95761464b02702fe34bf823af449aa167c79dd79309096912e6fe8","size":11264,"data":"","first_seen":"2023-03-08T02:15:23Z","last_seen":"2026-08-06T02:23:46.207424Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/ajax-form.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0f861f8abedad636336a36a50811a18","sha1":"d65d863be5fa01525fe15e705c2f0f204567bc7d","sha256":"e13725f905d372373a415fee5097e37e3dbb95c23bdcff4f11e11377300458ec","sha512":"f0a2d1f419b271568cbc02c38f73d898d95f0af85d582906360137c703349bbfb85c25f7247f534c97f6e074d5c94c3d12a54f89773cf210deb03d9d86024885","ssdeep":"","tlshash":"67218e00ae7c0b6e2226214536ed33cdbb2c55628647742a9fa9147a16841dc16c27eb","size":1261,"data":"","first_seen":"2025-05-05T00:39:50.143146Z","last_seen":"2026-07-27T13:32:19.596084Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/0a66b6c/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"897fed932ad2b76e84601658b3d8a48a","sha1":"41f7753eb9a4b80b44dff68307f01033505510c3","sha256":"9c49a60ebb03f3afd92d644fbe72263f6f94129b049c5b62805f53cfc33a9411","sha512":"10e6724fb93d4b1555cf42028d21e7c7aa0f076a80fb0a3946e65d146f926cd51eb459dc9e3b2d20204a0e4788ce4cdc6f4a1d712d326f242059a08ebbe3332d","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLei1JK:C7H7ObdFkOIphZ8wjFCifK","tlshash":"1522d71ee7017f360fa623c3744f7b53b6a480d592646cb5d88c826953b9bcab21778c","size":10543,"data":"","first_seen":"2025-12-18T13:47:04.025917Z","last_seen":"2026-01-27T20:22:23.176416Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"57e890eea9e12c24a93b4ce67dc1d792","sha1":"f5aa308eec8f53097e979489d112882df33807bc","sha256":"cc972c0abdb18f4ef45427941d1352223f151530a066985241914a20a4f79b36","sha512":"0d94d983acc58fc1044168108eb96d5c848877440c18a32000ad4d1c0844e3972d34ca029a33e372ca6575a4791fc96b0b26c86e5a6c2d3274e04f753ec2d193","ssdeep":"","tlshash":"7b90020eb8210201206830c4fe8236426c9104a04f099c100101e81061c910bc8556df","size":49,"data":"","first_seen":"2023-03-07T01:41:55Z","last_seen":"2026-06-07T07:20:53.910936Z","times_seen":10126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/nice-select.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-06T06:08:29.450928Z","times_seen":10474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9b52bf23b27ac9cd7ac5f2ebfd2c7e5","sha1":"fed8543c68c7a4f3ce6d449900df0d9637a07a2c","sha256":"fdcc1290ac5611d7f7b4ef9bb81f502ad8548a6bae5f3d13d8d2740280fc64ad","sha512":"556d6fa636fc82ee89a2bc768c86ad30050c6a7b3c4d7adb4fbcb81392b5dfc27c2aa2d324be827e6e69d1c807652e9bf8aae45a75d39eda8d54938af347c564","ssdeep":"","tlshash":"39e0cd4781248410b2d69c48e13939f23504b596e6030ae1f220bf0cb1577f394d5dfd","size":321,"data":"","first_seen":"2026-01-06T10:31:31.759421Z","last_seen":"2026-01-07T10:08:39.102793Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/runtime-embed_ticker_tape_widget.50da50004d745b8cb181.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd1a1aeff365f9e1b96ac5c01a1f96e4","sha1":"1bc38bd253f599e9a4695084a8387a4a91e7491d","sha256":"7c01f7609b7d86295ef0e85436cf971791f909bb7965a39fb647af80e3461de3","sha512":"f7bd9d51d5f46d30d12e5cda943602d53518cf70b2821d104b9d0a6f92c069b08472236f1811edac5194521bb1420d20f9dc8eb338ca2131446065544ddb4e11","ssdeep":"192:PaDxfdpJcRgj9urH3qGwR0vM8qykfESWO3jXa27vkv15vXW13kZJdD:PaDj/cRgdYM8zkv5jXa27vkvzo3CJ5","tlshash":"e0220aed120c98b525f9045298bda462f20832bbae0fe4a05357fcfcac1dee47662d55","size":9990,"data":"","first_seen":"2026-01-06T10:31:31.632063Z","last_seen":"2026-01-08T05:15:55.558451Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"0294872d0f6aca0cc9b8d0ebb1ef14ec","sha1":"fa56ab26d3525c286d41d9e25c76ed1d6575d80b","sha256":"330dc74720aa3505f674f03d157dd46ae5fa5507d7876dabeede336b276b98ef","sha512":"44be652ce0cddd886731553716af8b2e5f86e5fbb65a83eec9f5de0bfcfa4f30c7cf65c884181ac442212db54e3b146205b72530a59ce8dc82e6c3fcb120bdc3","ssdeep":"384:MGIgm5obczwzm/J59OrylkTuNKCwP5IIeJ:MGINCczwFusCwP5YJ","tlshash":"e1522240a226584a33ab804628316103b33554942b16516cfa6daefff77dbc771e3bf6","size":13748,"data":"","first_seen":"2025-04-24T11:10:13.455391Z","last_seen":"2026-01-15T19:35:13.686478Z","times_seen":4155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/tradingview-copyright-data-impl.f335cceb8ae5b4ddc0f4.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d3a53b01bb53f478ab17a3851ad6998","sha1":"422d13aef7a996dc6cde97e8e8d3317079b741ea","sha256":"243a3d88948f26aae10617746a6a28fb86cebdf1be261902ecfd411a49d8ea47","sha512":"0a2d946d1585ed3f010fb2a84de75401c231afe905b2f33f75ce4cd9b7ae7e8bc265d604f2c36948c45dcd1f9f230cde0b00b1c6dae88c9bc6cc7a0d686c1d19","ssdeep":"","tlshash":"a4817497164158cc2152d8b8dc3b01e5631fa5ed768f53e4faa3df30a0932e5a851d6c","size":3988,"data":"","first_seen":"2025-12-11T13:20:38.364978Z","last_seen":"2026-01-15T19:35:13.675398Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f0ad6b49844bc559047c494a71a9f3","sha1":"bdd067ac3bf3f5ffbdcc4336adcede6ef79f5a59","sha256":"400b8dd2aa9b443386a899719b0d1d76137d6e55644c8137ff84cce71e931226","sha512":"940f2798058a8277dae71509f0bf70e42dd4ea3f91fd65350e6e8184ec551a26c5b958b302b80b004d0024acea315164035e9ddbed479bfeb711924a70a2e61d","ssdeep":"24576:YFLLv+yoNl0ldc8kW8u8B18HrLWJcYJeqf+sJkw3nlzSxw5fH6u6Fg:YxLM0s8kW8u8sX+cYYqf+sJkw3nlqw5T","tlshash":"ce655cd1b2c5f4a607d701e6943b1002a33a1c1a740da458fbbcdcdbaa5a58e6337f79","size":1507129,"data":"","first_seen":"2025-12-18T13:47:04.108024Z","last_seen":"2026-01-28T05:35:47.450292Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/83701.a7899734f1c34f6fcc23.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"619457598ef021e1b093e508050c25bb","sha1":"389e173024eeb7e89ae1c78f40d88e65fc40a843","sha256":"62a1bcdf91e82cad4504201d37492d49532f57eef207c7d0483aca9f5688711a","sha512":"985cf5d66ff2c7583caea1d471b8319e8f51449b006ee94ab035409858069ad64e54b7034e1554454f8d2d63ca285ca4a1e7bce88678e8dc1aeff2f55bb21fb3","ssdeep":"96:fEe0ZIput7XybRUh7PE8NiA5wVqhvcELErhb/mMPH1i0+0XFCW6sbP:fEzOY78ks8NiDVqhvtObu640XM/4","tlshash":"78e1c6c972f0f0ea93d334e480ab5906e135ae5a588e6076a34562d32c34ec681fffd5","size":7308,"data":"","first_seen":"2025-12-09T14:25:28.491571Z","last_seen":"2026-01-23T06:29:33.961801Z","times_seen":1456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/embed_ticker_tape_widget.c54c6d784ea940c1a531.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"20118328ff35bbf956e8e363b9ccd649","sha1":"f00970910ce645363506c276c038315caaf84729","sha256":"054a7e05ec6a3599f08bec0a6ff3d725b2eea1568817a53db0ac2c79a6c095a1","sha512":"d2809b3770fc9dce90fffb6d395904c3ef79038e845e23d8d4957e817bdb97dd87345b98fbfccbe77195db4c9fc906f8a0c0c7e1403fc8f5eec90d246c73ac9a","ssdeep":"384:CCQMtOweB555WeaadK9+BY0022wFYLZML4euzDE4JmkSl8drkuOCWZAfBYG59zJD:BQBweBn5Weaawf22wFYLZML4eu//mkay","tlshash":"1f82e7133394147a80fb459b91fd4647b6220888f6428818b96c8dde276ddc935fbf7d","size":18934,"data":"","first_seen":"2026-01-06T10:31:31.721241Z","last_seen":"2026-01-15T19:35:13.659838Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/bootstrap.bundle.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7ef46c92e06742f9f2eba8bc943f81d","sha1":"bf4ea1f0e399d05d307992f247d9376f8aa1eef5","sha256":"0d739c3c2b3e17d073a65f1381e8467fd731b6375a3e9e7bc494846df5fb3262","sha512":"e5aa9131d8cf3997ae12f8731fca7d70ed92064450b3bb0800552e023ff58c367bad2aaa09f871ac4217fb03429bf45d07c8183857ae647bde30d15233c0501f","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kE:b4Fj8GPwRM3CiI9BtP","tlshash":"7f73c6593244b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc867277f7c","size":80371,"data":"","first_seen":"2023-05-25T14:28:35Z","last_seen":"2026-08-06T00:46:24.703353Z","times_seen":2031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.pYUD-jQE6Xg.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfoVmHC-xxbJ2bx9isCWHeR-u0_Hxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"454652414686d41a95f5ba76c1f67ffd","sha1":"91b2d0c50fb1296b1dcfb5e50e7fd8bd95da778a","sha256":"74a3e091545a7ec2c346399af43f186ce09666dc176dce27e1b5d87f29362196","sha512":"25dd288be586f7b48a80f451d6cea94489531d78fd2b28c37f0fd40bf595ea4519127414373fc8da05836ba83d9e30203ff8a8870da355e45e6e22f020a5ea95","ssdeep":"3072:cNOP/qRijmbFPW11PmLRaisun+EQaCRVK+DTx1oSFJdu6IVquPUSyHyil3Y2qMPJ:2yJpuQipQHxDFmBLtC3Y2c3N13UP","tlshash":"2974d9c9b26634539262f8a1d06f0087b93ead57b4484c6cb24decea5df084941b7f7b","size":370591,"data":"","first_seen":"2026-01-06T21:31:33.071196Z","last_seen":"2026-01-08T22:42:08.693743Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/76901.2d64b239e6ec8b4f4dd2.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaf8a678a11c3dbc76dda8d11f2e7d15","sha1":"c31ffe09915f15e0bb62b9ef475703866d209ebf","sha256":"40f86475d0d370cb02deb112b9048a62421335fc67ccba2673eef55912c2830e","sha512":"b7eb3979ca255b1de68428eefdb5b823ba7e3ecfca4ab36b749265b6b916ca17784ae60b332b31647ac1c2a070790ed1d9f85a7ee8184767ac855c88260689b7","ssdeep":"1536:20j/XOe7Zi41kxGC0hsh36Uni78ldtJOzoJ4emIwxKrRP7Xwz4xQ+4:2c/XOW/1kxJLhRPY4xU","tlshash":"1c432b66a9279db35ee947dad8772501c5fc0126b44128687afc8cdd0f8cbc47063aee","size":57618,"data":"","first_seen":"2026-01-06T10:31:31.679808Z","last_seen":"2026-01-14T02:17:55.05947Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a018a4bdebf54dea96549c6057e0a7c","sha1":"59901fb1f223f68a3b5f4f29cab742908d2a9130","sha256":"6edc98135b7997b8bef9c50192a5bb5f5f32b04ee5755f8caea09c6ae6f3ef2a","sha512":"3954c28d695e817a5119928d3ea4170f0fc4db904e61967925693c58757ad93d6e4782566bbbc4d2f32a9b4c3b9a5002bd035a5e24e30eba3a91dd1bef36a1d2","ssdeep":"384:0bcUDsWwWpljpxr0owCs1gzJccpoHcmcEj6rSPZ/Mb3G:xU7ljpxwL14puPZ/Mb3G","tlshash":"4e722167c94da72ac459dd26bc7bb641fc2e071945b52a647aacc82c00c7d13e30fabd","size":16735,"data":"","first_seen":"2026-01-06T10:31:31.761883Z","last_seen":"2026-01-08T05:15:55.687529Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.37132.0d5ab883342d9eeaad87.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a573ca75d248b33fc26c619cb38697","sha1":"e09714ae774c28c6ec2a8057f552ab92ba6bde93","sha256":"df43804e223650f28861a3945c0d89efd9dd9a0913af85f9057f35e650f8ae6a","sha512":"d2bad7bd0be68ef1eb5413e665cb83dff3a66e95b5170a671d18236e56f6d161fbd481e2f0095db61351f177d37e1b85fab3c654266feaac16e26428ba70bb2f","ssdeep":"","tlshash":"2a516287d1e055e52fb2c7487b96ded67ad071a04072d4e92b4d2f96c2c7ce0c0f8a84","size":2699,"data":"","first_seen":"2025-04-23T12:47:37.64052Z","last_seen":"2026-06-08T05:21:46.568424Z","times_seen":3029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"efdad7b848c5e81aa630efdd58a609e7","sha1":"4a7504401719425f23cdf686ddfdb5efa2130d8e","sha256":"d40f295dd5cbe42880cc12e101670212e9079e8d7028a5164fa8b58e15ddcbcf","sha512":"65c72465a87dcdd17f82b64251e8ef92f2d547484c32e788e5a848ba8954b91ca545206c906de3298721e78e97476d4490475b41ee06fb685d83c98d6429d652","ssdeep":"","tlshash":"cef0a2b95055e8b3007a0495e675d6d09317156aebd80da366904ac2120db7b51b2be1","size":587,"data":"","first_seen":"2025-10-15T10:32:17.029225Z","last_seen":"2026-05-20T20:22:55.79127Z","times_seen":7731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/62204.435a90aa1ac8f816fe50.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f2942cdae2bc52f923260ea44026008","sha1":"57c68c6c09bd03c08f5b4f6382fe9067b8ef9aeb","sha256":"29d68d4cdaa22576e053eec7ca17ebf2ec8de0eed61e6beb95ed25626e8052b8","sha512":"18ded9dc11e384ea6db0db10e1901756a406ee46f0fc32a99e89b7775eb3d64cd937df4008c9d8054ce53512864b0e3daa9ad8cc17950ce4a58a707d3450b6f0","ssdeep":"1536:RSbkYZQ27JJP8utD0fSQRRFGzANRrlZMJ+a3v5c1W0U9z51qKrDGV5jFtFjzoN9b:RSbkYZQ27PaaQxz/Ml84","tlshash":"6c43c43df1909413b1eb80ff4ab5e1179929a482b6665bedb538c9cd124dc8b3123f39","size":56143,"data":"","first_seen":"2026-01-06T10:31:31.624964Z","last_seen":"2026-01-15T19:35:13.655818Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/main.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2500da12b6f355fb4bbaa2b7b06a324","sha1":"25940a3c06d1514e5933bebe503d4cbda4696290","sha256":"5de50e052c51305f711d2346bbd73c3d27da63e7a6d1b0ee34b98109ac3812af","sha512":"aa9847e258b9403cea3470c18f724e2bb63aca57a40dc1dca3575b963f25170677d30d791f01cc3d8ff7307f671d0a735da05f9d84e5fbf6db16e4d7c3e758b8","ssdeep":"384:+s+srTV0IFymBFlBFAVI1Ggr7ItRuMAWithUCkA8ACAdHhA:b+srTV0IzORIH1NTdW","tlshash":"e1a2b746a460107a257ba33f2d2e9304f6a2236b81c59eb379fc05581f3635462d9ffe","size":21492,"data":"","first_seen":"2025-05-05T00:39:50.120308Z","last_seen":"2026-07-27T07:20:00.576809Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fa03917ba6ebe178e11c3c09154482f","sha1":"b4af0864b0a345401e6b9dc5de656f591549c19a","sha256":"8e7499825a65a1de6b095b413bc98a240d700e4652513c4056922064728e76fa","sha512":"a8827c157f0958765934ade2781f4abec0b682d44c66a7eeda0c85ba2e14d82770d1f84197ada8210f1206b1ef36c7f9cd37e274718c5a1350663335b8bba3b9","ssdeep":"","tlshash":"e0119a0a0135042a7ae04164b63a2ff5362c3adc4f43caec5b857d0872b36768d50bfd","size":999,"data":"","first_seen":"2024-12-11T19:59:19.773699Z","last_seen":"2026-03-19T05:08:17.510041Z","times_seen":5821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"507762f882c62fe4cfc7f83478b19d41","sha1":"aa284c5342fe4a52ab4aab9d2f3c67696c9cddad","sha256":"77d4573a9a4ac4c85c891f0311f6d0e34c52595b02aa54a280efbf374c18adad","sha512":"097f93a1acc7174cfb17bfffc763ae16f33f6be956ecb05eb0b67b23c67df0a69fb05290de684b5ad8b3fc61cdcf69f4737ec0821ca7e41433139f417a1d252c","ssdeep":"","tlshash":"8a2122f1a02264760ad705d822f6c7da3f333a95f1c72851887cc54621a6dc614b7eed","size":1442,"data":"","first_seen":"2025-07-09T16:57:52.353567Z","last_seen":"2026-06-07T07:20:53.969354Z","times_seen":9194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/waypoints.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","size":9028,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-08-06T08:27:25.850452Z","times_seen":18352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/14334.7c9f729c81085c34deca.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"03649cd177d587a17c0d764dcde3b1f9","sha1":"ad51338a0455b6cbadece4e862e52f371b3a0006","sha256":"edeb5ad25d0118fff62cf38407bbcd7cab84ca6fd218ceafc6259781bf0692e9","sha512":"98fce26a98219ed51d34a928d29b8ec69cc2cf3559e33d00eb4c4f6dab0f7c4c57861a2fe3be381f70a24beda8791f07b99b6eda6d402b399333ade77b5b25ab","ssdeep":"384:ZTLa1noFlC+ADlWeTduyItUTIeacQZPZ8HYrUEjBEqCLzSrWmv8aEONoK+yu1iqT:JKonC+6WewyItUEeacQZPZEYrUk6qCLJ","tlshash":"3f92d8da32c270b502a605db443ea240e6350994b549c4b0b978acd72a1ddddb6f7fbc","size":20717,"data":"","first_seen":"2026-01-06T10:31:31.731654Z","last_seen":"2026-01-15T19:35:13.636266Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/90309.27ddfb358e9fdbf60438.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"94e3eb79095b74cb9c84088715821726","sha1":"335dfe9041054df8533b2c9b50733a079a370ef0","sha256":"68b9556701c5818f48fbe70ff12d32c6b86cce2a04f6d4b489fa4503d0611382","sha512":"fdcf9d4d013ca5921fb8e44bb5b9ad86a278858421632e7c9772ae20810398bdde8fe528c4aee14352254a12b35cdaeba19c447925727068598dd211395c3c32","ssdeep":"192:WsIqc4ZAWunSxETu3v/KB2q3fxi9nulKzjUeqgVbHkDtHd:WLQ4nSxETu//3UxKNjUe3pHct9","tlshash":"9b32e8f6b2677117c3a09097d4b69043732c2590b8498c74ba702dee39d8c9af5beb74","size":11830,"data":"","first_seen":"2025-12-25T15:29:26.825584Z","last_seen":"2026-01-30T10:36:29.405973Z","times_seen":835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/bootstrap.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0794583ec020a7852f0fc04d5cefc52","sha1":"847dff899b5bcf8ee434e389e2a910ba1dbad76f","sha256":"9bcd4d0f29dc6556ebeeff44eaa0965f0c7f7308ee58394708cce2f698cca1b0","sha512":"d7f46f6537020c452363f0b2a62333fa2aaab5aa107c021398d489635eccca9e0cb3999dc4f4b9515ee239f759a3170687315b3a6eac9ed4ca269a63bee860e2","ssdeep":"768:pZYN+vOLQ11ObgUDZa8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnlcGpPX21b0:pKQjXht8xmeY8ssH2nvt","tlshash":"0543a5563254b8330ade85a78136434bf7295c98b547806cb5bc6cde2b7dc863272bb8","size":60404,"data":"","first_seen":"2023-03-09T13:23:05Z","last_seen":"2026-08-06T08:04:32.219562Z","times_seen":2217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/_/translate_http/_/js/k=translate_http.tr.no.pYUD-jQE6Xg.O/am=AAQD/d=1/rs=AN8SPfrq9H_88XA-OpCvskgTW1qimZ4ewQ/m=el_conf","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0735dd4cca36c6f764ba1606c8be18bd","sha1":"ac88d83f78678aec793e4f055a82d519f2c1f8ed","sha256":"5af5126bbe1469578190d7ca949527a9f2727676b0bac94e87af5d24bfa7f893","sha512":"fa0b5cb2761e8b1bd102d5fe95a5ef3dc4620a76b17684340861feeb1049668d1ca94813242aba945aad4b31d634cbe193da8b6e66928ab7df400f2cee38cc98","ssdeep":"1536:XNHiUZ8ZXbmgU1l4C0KGYbMfhyKucbR7ChiawNWdg:XG7C0KGJehiCg","tlshash":"c073b7ccb6a675618263f5b5513f000fb27b599af8084cadb288d8e1adb494c413bf7d","size":79552,"data":"","first_seen":"2026-01-07T04:17:18.872594Z","last_seen":"2026-01-07T04:17:30.385338Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/swiper.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffd18ff8f4da5aeecf3dd57c398a2766","sha1":"3d1745ac173468de087e562f52d677ef02914adb","sha256":"9efe2d2587200bd246ee89a15cf483d84d66ee600c621db4d07962eb06b426df","sha512":"79ba08f8106d9e17fcecbbac0367f142b03264602eb21294a6eebc5004d89e1956de7fa2da1c4b627209935d0b01fa07749b2d1259f04f75caa549fe93e3c640","ssdeep":"3072:tJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGKJM9/EfrNK/YvD:tJLC4dkEUYnafpl9v8cIWybV4y+oGIMy","tlshash":"ffe3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143700,"data":"","first_seen":"2025-05-05T00:39:50.093558Z","last_seen":"2026-07-27T13:32:19.642924Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/61997.9b223907748904842eec.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e499c0113cf5665fbdb37448b0e40b17","sha1":"09092b4005242c72d7c71f691fd3441b70261b4b","sha256":"5e2915ec7ac02c2cf5b983f0136b12b664d65f580492ad542b7d643f30d58b26","sha512":"09c4a229573c16e0d31ebcaad90d1abe1a7009fc4b134e072b4bced26209cb23807a8f6f35fd80616e9a9bed2b5b453c1052a886f83b91e6d2287c2758895c49","ssdeep":"","tlshash":"ad61e1cd3386b42423e6e7a7b4af120be23e5999602c4418b355d4e17d269de8137f78","size":3184,"data":"","first_seen":"2025-03-12T13:46:44.579198Z","last_seen":"2026-06-08T05:21:46.526267Z","times_seen":2559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/counterup.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1dd0da23384c3be56812d06e71fdeb0","sha1":"b10f96b231f2adcf2c86cc2f23b203e21110ae1c","sha256":"49e8ee00b6e88276e064c080bbea603d4561bbd772540dc552892aafd1f3f142","sha512":"58b80955ff10324b7d457da1a3ab2c1838395a2025c5eeabe33503e53bb27a71445d79d35fc46628f98870b104a53bbc5e296f17ce58b3fbaa9dacbcac2b5b19","ssdeep":"48:Jx199PmLhva0V6DpHZMSUriQ4OqwQmNxQXMiXyNdkiasFAkLMEyOdffzm8:JxFPAhKJGSUr2qN682aKi3Ak4Ey6fb/","tlshash":"56a1ca49686728991e33f16e7b9f72545324a52b0405ec0e78dd92804fc293de7e6ff8","size":4751,"data":"","first_seen":"2025-01-30T04:14:07.591462Z","last_seen":"2026-07-27T13:32:19.602858Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/61688.d5bb59fbee8f0a8fdae0.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"030a798e247d99e7d835966ca1f47ef2","sha1":"2498b5863f9a72ff0beac58ceb812bd7ff65e782","sha256":"9f9e95b5f0290933d37b778ff3643ee5de18c1da77b1006f3b6c2518755ea1b4","sha512":"c25134d2a7da85c6d93f9049ce45cd05f49b07e75e404d1616f2b2ece8a4de8cefa7b9245dce53f4880541aae720e5abf7f4a7cb0f9552fd22622b3de751d67d","ssdeep":"768:C+Rr91tLXZ9vMhmhDeCFVK72P0UpPJIJD8jspR2DLQW3yoY7j7YX6BsWmSElWg4I:tvM0hTCn2z3C/NZo2+/Vn/3","tlshash":"85c2db6b31e3257503e604eed43e3641a6351154b04740f0b5abdad929aec4e63b7dfc","size":27245,"data":"","first_seen":"2025-12-16T10:47:27.287556Z","last_seen":"2026-01-15T19:35:13.641638Z","times_seen":745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/slick.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-06T08:44:04.042136Z","times_seen":110359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/B4HAXlte4h","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbd96dd326c2a5d25cee0038f3288bec","sha1":"d0f2bc4be45bc2e7a054bab170e21b4412ef7a91","sha256":"d95411e817031304101360d4319db31b280f5a705d80e9b3685c7218f1033182","sha512":"34342f64d66d25f2beeabf20ad33fbb3d93896481e128a1f5c075609348cfe62bc763d2dc39643cc322317745c4154b730a0902263fba34e1316a26844ba9c66","ssdeep":"384:boU4JkQamum0400rAN8OX7HMiqJISOVJBz8U08wYWcPY4:RtMVAfX7WO8UFWcPY4","tlshash":"84822b6e7959b97743b208f9606f6209733549ebd404c920a401ea4d7db8ade813fef8","size":18065,"data":"","first_seen":"2025-12-18T13:26:00.120545Z","last_seen":"2026-02-18T15:22:47.278487Z","times_seen":932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#242","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-06T02:21:22.689793Z","times_seen":37106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1766064608","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b580ed8f7debd21bb215d01efc9c6ec0","sha1":"d795d04a67639864b101c90a45c348c8f8c7b7d8","sha256":"60be37be524eaf7e50867bb55cee863e478e06f225cace090d6cc3b71ec27881","sha512":"c4d8a557ef4e2bfc7c0620bf1e2c76a5855f0f1202e093b235d576e156559d8fee3d62b47714e602f19deee9616719bb0cf5833966d2c4e43afa55efd6bc0e55","ssdeep":"24576:j/hLnS6Ulw3nfy8iEKMQZiyIf9CQ/E0zOVch1meapEuo2Mdomrt7ktAgPgef7mtZ:jJLl368iEKMpyGP/E0ueapEuo2Mdomrl","tlshash":"be656bc5b2c5f46203d355e6a03b2005b33a2859340da068bbbcdcdbe95a58e6377f79","size":1539379,"data":"","first_seen":"2025-12-18T13:47:04.104729Z","last_seen":"2026-01-28T05:35:47.439915Z","times_seen":593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"16d3eb6aa41e68a8291f8cd28fbe3e5c","sha1":"a9212556eae3b9b5afe5264ff921069b0638bc0e","sha256":"cc59d4baf992e08abf84fe478990207a0135d8022e20b8a2d05a3003e34fc053","sha512":"cf4e3e2a6475833601f3d149e68907f28d5c8a8a19098468efcbfcf45f3756996f24c2188231b205abf0243caab0e07eaa2490c2ff8b712cfb87c5c019f3076d","ssdeep":"","tlshash":"aad0a754212b612234dc3054da2ee6d1f5151a922fd310ebd7993018b665893e9547ee","size":248,"data":"","first_seen":"2025-01-15T04:31:23.610495Z","last_seen":"2026-06-07T07:20:53.996054Z","times_seen":9715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.56316.5d781abcca49a77088cf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"05afc18c522666950c93749f9b26baf6","sha1":"6e8ecee8b21ad49f25fa9b9f1d0178104b28d10c","sha256":"0bfc8a17e105fea7a39eaee2ecab439bba68431d7d9d1ca2ed595fbbd776e7ab","sha512":"f6d49bd798b982e354d9a2474a877b2329e47dd63503044f726f3fe6e73a97becc63ff0f3899c416b8de0312fdf9433a127049f50f05f3e1ddd7426b401562ad","ssdeep":"384:e+x0EMPsBRgXD2PTmdN2/5dQ1tHSJm/BtU:e7E2NJuJmI","tlshash":"bfc2c007cd96b099f3f6e24e0ef4d50c2cb453495270d702be868e289ae5ee69d2f315","size":27627,"data":"","first_seen":"2024-12-25T16:51:40.939371Z","last_seen":"2026-06-08T05:21:46.543678Z","times_seen":4644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/type.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"497ebc8ef71e0997ba5fda09be7ef211","sha1":"77855aa2dfb40817b07d80d2f3e121afcdc8f427","sha256":"d20866ac54b17d2205264f37b531fbb71b6a6425d124f551bd4c97a949dd43bf","sha512":"12b50618d086df01d11e6d45f2a7fc97b93e2c62fc668d140a2f5fc9c6cb66451aecba1e4ce682ba26a1fb258294c5f1788dff451f3842d7cde5161cfafc6d8c","ssdeep":"96:gIPU+nZ1yrTn0Y8PKYTy8nO9nYPvySnFknzNjn6M2NhcnB0z/M:7fZ1ij3yTR+YPvXFizd6LO0M","tlshash":"e5b16194fb7869ae4bbf0dba167e90cab67c30335545863b7de64226166029c3313ccd","size":5532,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-06T02:21:22.667308Z","times_seen":1181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/35087.6f688c623d7d2c1c1806.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"207f3a1075794f53a68a36d9b735e1c7","sha1":"6db549a66138fd50e697d1096e97db362f84ac63","sha256":"5fddefccf48b2a27423de9a72a7336c282806bbf0d82e02207786d2183afc322","sha512":"43353494013859c76f086d45cf5d86b624f4697f7c9a3bfa24e300fe1ca0714e1e64bb530b7f5e4c8e89a2fa72fda27c0c401c7843909b10204252a76f2bbf07","ssdeep":"768:qvSV+GRDx4OvUr3NeyzMfm9jCK1u9PexxGXKb5VI4+xU7HAMlbFy9M+Vc+BNkLFN:q2/3DUbIf6e5I5qxYYM+Vc+BNkLFktXK","tlshash":"58130a87f1a7b456a3e7805ae4370107a338184139098cadfa7c9dde2a3e5417663f7d","size":41851,"data":"","first_seen":"2026-01-06T10:31:31.669502Z","last_seen":"2026-01-15T19:35:13.632431Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/jquery-3.6.0.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-06T08:47:32.286749Z","times_seen":496536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/magnific-popup.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcabf2e2d85324d09429dde6484e4105","sha1":"0977652d7f946a8c532d535c75c0e19fdc5c3d45","sha256":"084a17681a83386f6c551844a31519482b905b512019c767e162e65e0b52ae85","sha512":"474eef11a74cf81f0af78e54ab1a39ae05993f32717ed7689a6afd94a14fc5d665233403332fb6559ba11ca48a40d0e9a1f76c278c2a1e1b69bceb3154e19917","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/j6l8aZwHwztLCpmst:lPBIt8I5h571qkOLCMst","tlshash":"a7921894f2b2b21383a735b8686f70093a729952ed06c855b55d94d87efcec89027f3c","size":20210,"data":"","first_seen":"2023-03-10T14:49:25Z","last_seen":"2026-08-05T06:07:05.102008Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/jquery-ui.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0835cb4bf7759d11d32c3b58ecad21a","sha1":"71235de197a8d6c17dbcdc2bdf03642900766234","sha256":"dc5152d39a5e618489a49efcd4c513166359bce33dee387f252c7560c7a1615d","sha512":"b339704a0a3b0356aab65425aea357f5c666d6c46dbe5533bc0f0dca586d8f84d17dc49300f8ca25024c9b2564b02d6b0c0d72462bc1bc3721f6fd0d584e6428","ssdeep":"3072:aDa8LPLGI9fB8NnODpEujVHUc9koNRppuzGvvFCAvuBFak8J3:YLjv9u4VxvLd1","tlshash":"5244f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255069,"data":"","first_seen":"2025-05-05T00:39:50.08507Z","last_seen":"2026-07-27T13:32:19.533642Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"974a11b35472bb5aa868c1a5e59c5687","sha1":"43b996092048fe9ce4b15f9178895802d7e225ce","sha256":"2f01d047ddbd2b132a5bfce12b680bcab8b1e4eeb4a86f1b4cee2027c012dca2","sha512":"d8c8e24c8fe619cf2a1f8a48b4586b27ae735c1225f39167ca348c296ce0cb6a8c7bacab5feb0281d02eaec2f46b8c301d25b1363e03994fd76dd907175b3056","ssdeep":"","tlshash":"88c08c0bb071114b0087f009d38a08883124810b01390d28368c608a3fb3f8c034e6ac","size":170,"data":"","first_seen":"2023-03-09T23:59:08Z","last_seen":"2026-05-24T06:51:14.338159Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/12558.a5cbea53361f89efdc98.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"babe5dba32ac0bdd044ed5d1c6132b35","sha1":"feb646fa66b967c88ea7b7654ae4108b26683a2e","sha256":"afe70fe69dc8482f3e6f1ee7272866ca4af48bc331370cf894d30d9f29fa069a","sha512":"62ea6ecc058bc5130460626fa5cbd17f9454b70a2bb1f2547baed9b0e75ba3ba9dfcf94bc8b04d0346ca8ae37402a450ea8c1a5d9c57690046fac0ae6ce887ad","ssdeep":"96:buvQHXY4UubdYDFKIX1ysh4RsiF7kCTsFOFEtzIdCsHLJyJJU6XbBAqQ6LUDCYb3:tHXYRuhYZKyynRJ7kCTELULJuU6XbBjC","tlshash":"d1a163e033de706863f508e268791486f72919043a0f85d8f3d4d4faad5794fa27383a","size":5066,"data":"","first_seen":"2025-12-09T19:49:20.883672Z","last_seen":"2026-01-30T10:36:29.390047Z","times_seen":1197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/75440.7570e3038454e92a7c37.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"02f41b54ef883b424f7b9b35d6993f80","sha1":"05ada298e5ccf5b1adffac1d9672d960541e0542","sha256":"317031dd7dd79f47c408dbe0bd5eaf997678d4730e20e68a87ece65c29dcb3d8","sha512":"6f69d695d58703ebb54b02e52075b6885c32f304a30dfab4b7c345bbaefa7dd0749e6924e302a604519a8dbeca640b241bef45849dd3581096722fee6aa32091","ssdeep":"96:zcpMMHFeHojARuZi0DWs3dYbYiWWD+WRdiaEBymSS0qRIv0maWvW1HN6AG0szEel:IpMMlIeARmLWs3dYbJWWD+WRd8ymSS0D","tlshash":"14a1fc87b5c1f0a06396aca4913f054ae63e6c1c710af4e8f3e5e5d29c7b20b5112f36","size":4855,"data":"","first_seen":"2025-09-11T15:27:27.447913Z","last_seen":"2026-01-30T10:36:29.374161Z","times_seen":3440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/wow.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"a26a117ff59c944bbb654bf506f69786","sha1":"237c90127c99e91347536835096276b0add6d018","sha256":"cfa1739ee346d63a3d3cfdff8c18cbe8fdedbcb32d4b0895028c193ce828e7a5","sha512":"11a93fdbd393a5bdfa2cba36af8ec8a55ccf04b5e700c3c0572a5b499899e1091ff29ffb4bf5d11b9c69ece2963cf61f253ea67ad23e20e4644791bc17dd34fa","ssdeep":"96:irZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:iry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"04f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","size":8182,"data":"","first_seen":"2023-03-07T01:10:38Z","last_seen":"2026-08-06T08:43:32.696878Z","times_seen":8279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/99201.f2a56b47ee088a948586.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2e30c17db05253fab0554528943cd21","sha1":"c2283c177060a0a7bf20a4aa105c64725e79fe65","sha256":"50fe753cef898c8e36f7deb195924724c6e63d55cb4c56deb850ef2b6d521694","sha512":"87f69b9cca5e83c75a9868243b5c78ef79718620f3e8f0133464e57753f2f43dc3702fce3e86eb644ca77b5144e810bfe8610ee777b509c2c173d041c07435bd","ssdeep":"384:ou8NTRJCURKRGehPowQ7a2ATRW5TNDta/UDRAtmSJSTLkeYcOH24KPKe+srIRyzq:ou0TTCURKwehPtQ7a2ATk5TNDta/UDmn","tlshash":"6492de8578d2f0a863955cc4c4bb4446f02a1d3c704db8e4e7e5c8d2dabb54ee436bba","size":20665,"data":"","first_seen":"2025-10-09T12:56:47.518234Z","last_seen":"2026-01-30T10:36:29.421297Z","times_seen":1773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"919ee8b45f77439d50c5c8f8a575bd25","sha1":"465ac574dce0587cd310ced6aa314fc67cbd8faf","sha256":"6eb2eceab606c163728981e8e2d793a9b9b2e803cd1514006f73f5fd198f056f","sha512":"fd1bad3f15ef92ed63f39e665433c744da5420b6910b47dcd1b1542f9cee0a3a17850cdac3f769dd91e0237fb62a5d0a82b5ca51cbfd5257995b8eac0fa6fbd9","ssdeep":"","tlshash":"a3512fa1605ca01b9513c5d1f8a23eeef4de0058c77269d07e1c29efdbda877049715d","size":3010,"data":"","first_seen":"2025-12-12T04:07:51.28497Z","last_seen":"2026-02-02T05:16:12.652796Z","times_seen":498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/banner/banner-02.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/banner/banner-02.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 121588\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 361 x 723, 8-bit/color RGBA, non-interlaced","md5":"6001e08f247cdc717a16e92af3ffa6da","sha1":"ab63294457f91cd4863a0ddb655b7910eb80db17","sha256":"1c37431a0bc4a41514d2e4f0d95dd5ecb81ea92bfe24294c66e8d6806512dc51","sha512":"e574666c7ce2c87b3a3c53e65c4b0fa1e302b320486d53d9afba6ba7c49abb5ef702de2a9957e1fc8f826363e77c00d69a53132a415b7243bba20f5d45f5d7e1","ssdeep":"3072:vYTLL/AxS8dYf47LHYwPJPo+r6EYMIMagM9InZ9+:Q/LYACY+tJPdE/MD5Zo","tlshash":"b2c3129a50f495c1903e03f18e2ee9fc1829212d5fe49949eeadda2c147e39f3c958f1","first_seen":"2025-08-06T05:48:03.371501Z","last_seen":"2026-07-07T08:10:43.315273Z","times_seen":4,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/banner/banner-05.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/banner/banner-05.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 115180\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":115180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 517 x 729, 8-bit/color RGBA, non-interlaced","md5":"4c41ffa03ebeb2a2db1195b49a6b19df","sha1":"1753e6e0fa5605a2ae4c21e793b1829fc49099cb","sha256":"a5f52a107b1bae3306e4af0b678c0e571cb2e3e0de6221499f9350dcbd53c5f4","sha512":"ddf077c3f3a1579a7e752637e77747a14d409b31807637b7357b7c603017a7e8f86621818aaa40d2d9b15e616f4947626d4de691de00b178d77eb63c1674e944","ssdeep":"3072:3SGpVTLkkVCT3CxqO9nYjvpZVa6WH36dnS:CGkGC2xqSYjvHfQ6dnS","tlshash":"73b312b0f42331a50dfd99b76af82d178c19b7d919c0484aa72536eb3274c8c5f232e6","first_seen":"2025-08-06T05:48:03.413484Z","last_seen":"2026-07-27T13:32:19.603752Z","times_seen":6,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/B4HAXlte4h","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/B4HAXlte4h HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6199\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69428756-1837\"\r\nexpires: Wed, 07 Jan 2026 06:16:35 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc41\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18065,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18065), with no line terminators","md5":"fbd96dd326c2a5d25cee0038f3288bec","sha1":"d0f2bc4be45bc2e7a054bab170e21b4412ef7a91","sha256":"d95411e817031304101360d4319db31b280f5a705d80e9b3685c7218f1033182","sha512":"34342f64d66d25f2beeabf20ad33fbb3d93896481e128a1f5c075609348cfe62bc763d2dc39643cc322317745c4154b730a0902263fba34e1316a26844ba9c66","ssdeep":"384:boU4JkQamum0400rAN8OX7HMiqJISOVJBz8U08wYWcPY4:RtMVAfX7WO8UFWcPY4","tlshash":"84822b6e7959b97743b208f9606f6209733549ebd404c920a401ea4d7db8ade813fef8","first_seen":"2025-12-18T13:26:00.120545Z","last_seen":"2026-02-18T15:22:47.278487Z","times_seen":932,"resource_available":true,"data":null}},"time_used":1357,"timings":{"blocked":600,"dns":45,"connect":97,"send":0,"wait":105,"receive":2,"ssl":501},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto-total-market-cap.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto-total-market-cap.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"40155a2b19db16691a2cb6047a9cce9b\"\r\nlast-modified: Tue, 01 Mar 2022 07:09:54 GMT\r\ncdn-cachedat: 08/14/2025 09:10:03\r\nx-amz-id-2: ZF2wIEEDnhsercbRhg3bDfAAnqv3B6rlk54EqtuL49tFiP4nW17EPlo7Z7uvV1P6ujbdKgbUKCc=\r\nx-amz-request-id: PQRJY866HWFXR3HR\r\nx-amz-meta-hash: 40155a2b19db16691a2cb6047a9cce9b\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ea88ca3103b8a258bf988c3fdbd30f26\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (528), with no line terminators","md5":"40155a2b19db16691a2cb6047a9cce9b","sha1":"e1882de86325d400b93b9eeef3a33a8a2cb0a75a","sha256":"c74efbe348f35c5fd27b162d8fe640ebb3131001687d83c8fa57d27804dc66d6","sha512":"29b57296255bf9de9ac384198f7d7019bda50b213694f45014633dc693a29f754ce5918efdb752ce0619b52121ef635248a898a089ce39ca3f5159c1d48f525f","ssdeep":"","tlshash":"d3f0b4bc832c805d2613d678a73a1066331f61bab25581f5bc8e963551971dbec93828","first_seen":"2023-06-18T17:30:26Z","last_seen":"2026-07-23T09:21:38.402799Z","times_seen":37,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/vid2.mp4","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /vid2.mp4 HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\ncontent-range: bytes 0-26071790/26071791\r\ncontent-length: 26071791\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26071791,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5b6a1ba7b6fa3e0dcb5b1057f10d0393","sha1":"8d5db73ef099af9dc06e8702d98106db896c6c72","sha256":"7ca0a31a88140c235c35800f3a1043f6c94741f34f09970e39be0f25b213211b","sha512":"726b87829c62b4e21c99d2914bf3c2704ca8c734585c4ce34284bb7e8c02cbbcc47de11a5d52c07e8ce2b38052d664f9f342022bd9e50d3934c385602202cf42","ssdeep":"24576:TYjxWdbdhN8TuQsr77rxZ10tlJ0xg/bXA:TY1EIp47/b+ogTXA","tlshash":"d6251240bbe12746dea543b828c90391bb30e5a1675b43ef738d967cafc23a34c566c4","first_seen":"2026-01-07T04:17:18.745808Z","last_seen":"2026-01-07T04:17:18.745808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":4939,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/pl6.gif","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/pl6.gif HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 899898\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":899898,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 360 x 360","md5":"34b1c747a032ea5156c921ba9b3ee81e","sha1":"ee6fa30461b6b1c9244c25838028894382fd1c38","sha256":"c9ac24285de4a2682514f43401246f2267c31f00dfe161df2a644af27107803e","sha512":"88a07da939ba547f1857ae337cf06bded93f5653a0c18ae641395674b51c9279b3bb857b0b6c1606cdceb85b30ea836a032c7fdcb782d1e7d5450183dabfd61a","ssdeep":"24576:N78VFGvuKMrDotO+W5996c2pvlS3yiVRKzp5C:BEF+Mr0AJ9P2p9SiM6p5C","tlshash":"551523826275c742ed9708787a016f26cddc101828e3bf5769631882a5dbf7a1dfc47b","first_seen":"2026-01-07T04:17:18.748533Z","last_seen":"2026-01-07T04:17:18.748533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":638,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/css/vendor/bootstrap.min.css","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/css/vendor/bootstrap.min.css HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29201\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":306606,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"880f3f255999abc0d4b8a9d79e008c47","sha1":"29da9469d887be83f8927230b165c78600dfe3ae","sha256":"627419a6a8330db97d1b6bf560193b1b12e7fdb981a341daae90eea49ecf77de","sha512":"77bfe467546c012c93329184e2aee656be66351050d84cc7caead712a2da0bc023a9d7fe01a3dc03aa0925caf5821cdf365154c1fc51382caff97bf3f2927c58","ssdeep":"1536:Ox8Up844RtCxgHggyf8+lb0iOur3IjNbPZa:OxO44RGOur3IjNbPZa","tlshash":"7564106af9e1251c3427895867da7ff97b7c80438609edb578d32224cf877c188e26c9","first_seen":"2025-08-06T05:48:03.420673Z","last_seen":"2026-07-27T13:32:19.5388Z","times_seen":6,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/pl3.gif","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/pl3.gif HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 774400\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":774400,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 360 x 360","md5":"23decb3911847d7d48ec1dc4b0be1312","sha1":"9d2c492c6caad6bb2ee658c73af09655385442ca","sha256":"a5ff543d1668fb5cb147ca86750f2a2196477462aeece0b0946d0a3f26b9c780","sha512":"060914b4e590b96fbe487f23aa239a241406aa68590570db8243a645390ca0d61bacc9d26d6edf1e713481270b7ed78ebe66b7903bbce900bf28b4d1dfd4ea08","ssdeep":"12288:e+kZqBBHtKmh/J2iHmUT2bx5qz78cqtWXrYaz3DsHmLoIrVamAOGyPm98hYdQWkq:eNs7tNuI7McXrYaz3gfIQmAOJPm98uSm","tlshash":"cef41287a769c1c5efa2083c729817259cc4106d08b6ff37e3b1395216cb776a9ed42b","first_seen":"2026-01-07T04:17:18.753231Z","last_seen":"2026-01-07T04:17:18.753231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/pl4.gif","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/pl4.gif HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 815619\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":815619,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 360 x 360","md5":"ae3ddde07f3b22b793c02cb672e602e8","sha1":"ba5089af186e97da373f3d7a108924b7271affec","sha256":"5de95ca16a564836187bd58587ade83bd4c5bffa396b61c5020aa63fc599df83","sha512":"ee7ca1926cecdb578a59979b48b4ef5a91ac9d19f81d1efb0ae3db78b1a31b1012fad15a1148d7eab3440b640cdefedd1b42c3f42ec826bfdddd0af8baccd7dc","ssdeep":"12288:JbOAtr8Hec3qTWE7874DRo9ewHTzciIijQyda4+08aUydvDtEgxsxcsQP6nKFs:Jii8H8TWE4qodPdj5rbdhEmg","tlshash":"590522d7533cc7a7ddbb08bd3e144a768dc060a864e6ff3ba82564a1154362a6cec463","first_seen":"2026-01-07T04:17:18.755435Z","last_seen":"2026-01-07T04:17:18.755435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/44850.0ebe36b95f80e21ab50c.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/44850.0ebe36b95f80e21ab50c.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65ac-19e1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:16 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:27:11\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7ddc5783f142216908469005de15bc11\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6625,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6625), with no line terminators","md5":"d7dd4abb372650d87db7c70e5d03f5ff","sha1":"0caad128207d2332a468a4270ca74bab8765191b","sha256":"6784c3c55af75e4c499b8cff3e9621ded286543b8e8050d6e68f82dc98f99758","sha512":"7923727fad42323aa76706e52252301d0a289e2526aef3b2a4257d93e9b86a3f81f915b7e28644bf93998a1d0fdc3c721d2d1fc871a071a719b6c05c746d3d4f","ssdeep":"96:DuUVLZjinjBLC0HwIJ+T/6koM7fvyvqK/VmTqX:3LA00HnJ+b6koM7fvsqK/VmTc","tlshash":"c7d12512532ea0ff1177aa299bdc4f0f4e25d99197a2760c93183b940b8f7fc47e560a","first_seen":"2025-10-14T13:25:50.534572Z","last_seen":"2026-02-05T05:06:03.264838Z","times_seen":1569,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/fonts/fa-solid-900.woff2","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:35.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/assets/css/vendor/fontawesome-pro.css\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:35 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 303544\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":303544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 303544, version 768.256","md5":"78863e0f6e65fbe6175866e6d5b6f18a","sha1":"8cda0fc2a701bd6dcfaa94261178fa78df1d15de","sha256":"82877c6d33c5d786db4815f756437c3e853e08bf8c6c267fd246760d2a96d029","sha512":"c28bb3ee26ba58f4fc27cd29ac1daa858c34d6b4768cd1d23836c81f3c62d8aa0d63f34aee682be251dbdadbbfefad9ef8bf212a92a9986e946269831487b644","ssdeep":"6144:KTzLBqpLbENUL2vcSb4gb1RbkH17zCHoV3467yRwOBy6xneKfa6Y4JNTAYvTouwk:KTzwFuiSUgx98vhV3467y9/HfNLouw5C","tlshash":"465423290192e53f1be321decccbc1797006ed6b876663508b51a6cf4bd06acd22b693","first_seen":"2023-04-27T20:28:34Z","last_seen":"2026-08-05T07:01:16.299407Z","times_seen":1553,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/tesla.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /tesla.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"3b7c34c4a74ed2a5415d26d40df1b84a\"\r\nlast-modified: Wed, 08 Sep 2021 09:01:16 GMT\r\ncdn-cachedat: 08/14/2025 09:10:17\r\nx-amz-id-2: UIwBvm1c/Mb+zZaoMFlkRFwM+mv2ZXfCDCwlldArz0RHGk1lQ4ssl3wfraMWzOzzeRuwbWFQOLD8HmAmiKZZvRoILRdReIedncPSneBUozc=\r\nx-amz-request-id: 0TM3K28YSV3FBQW2\r\nx-amz-meta-hash: 3b7c34c4a74ed2a5415d26d40df1b84a\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ef8bf016990448b9de4b5be27f126f35\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":508,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (508), with no line terminators","md5":"3b7c34c4a74ed2a5415d26d40df1b84a","sha1":"e069a067efe5513c212569aaeeb30338b69cdd1c","sha256":"338db12bc3e137ec430f9ba84de55c1a85c3185b98025de7ec213b042813238d","sha512":"6758c8eca631c14574a2fcd2902b5588144ddb5e5126eabae0fff25a3c97a1ca602173863d3e14a21908e16596398637eae256c9863db6f512848d968529c1ce","ssdeep":"","tlshash":"40f005dc7375604c5507c724bf751434511570e9f66a05d6e0090348f7444dff817e0c","first_seen":"2023-05-18T16:17:48Z","last_seen":"2026-08-01T04:38:09.899671Z","times_seen":879,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/nice-select.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/plugins/nice-select.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-06T06:08:29.450928Z","times_seen":10474,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/77737.e5796e6a100b1b7b3e42.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/77737.e5796e6a100b1b7b3e42.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"695caa5e-193de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 06 Jan 2026 06:23:26 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/06/2026 10:15:45\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 78862fa59002f265de0d3ef7458b8893\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":103390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fbac66781f0c125e381da1db16bd64c2","sha1":"fca46923d9a2d6f49235206ce679ce78dec2a4a2","sha256":"6b26d008e477877762e70fc94fc76518e94d316924f0e9c7a2bafb6f9fd03ccf","sha512":"c9011397fad3288a7dfda70c21c3b22195079bfeea6a60f3c2d11325ffdd8130647fe55441fd277de50a1ed8074b19959da3656f13197367ee5590d6eb49d1a8","ssdeep":"768:awlwokCcAfM0x/2bSVfYmUK6oj3Y0F/FGIqvZIs/WCINtz:w2VfYmUK6oLY0F/FGIqv6s/WCINtz","tlshash":"fca334bcf95192bb5e9b587f4398f6687648f943fd166f86bf00c00020c6ee710e5a5a","first_seen":"2026-01-06T10:31:31.660442Z","last_seen":"2026-02-12T10:35:29.960971Z","times_seen":796,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/indices/nasdaq-100.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /indices/nasdaq-100.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"fa32ce9106e388377a04cdbe6d56ff2f\"\r\nlast-modified: Mon, 05 Jan 2026 20:16:08 GMT\r\nx-amz-id-2: yQeLl9YnjQtQfIuzN07bkbRCFwRnK77VgJ7FkoTqF5cef77txbmnLfp0AKopL+rcfSk2kouMfEk=\r\nx-amz-request-id: 56RB5NPSMPP5DZ3H\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: fa32ce9106e388377a04cdbe6d56ff2f\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/05/2026 20:49:52\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7b408b790e81ac26696db189d7b9a7e6\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (563), with no line terminators","md5":"fa32ce9106e388377a04cdbe6d56ff2f","sha1":"061c65c5491a367bdc1af4664a955d3dffbadb83","sha256":"f4948a635d5c9a57abd3f23f19f982050a52bcd3eebc161fbe9b6bf34f0a3e74","sha512":"e23274408a22f9f797ffcfe5422f9221395f8d8776e70edff646adbe32bc39dfd983ff5aa79ab0c1907a0875a816b460ccfd3a71a31fc401ea690204dd4d73d4","ssdeep":"","tlshash":"dff0e166ba21864cb74343445d24305a4b4ffede316c07e47031d5bdb0563c35c60c2d","first_seen":"2026-01-06T04:13:07.080709Z","last_seen":"2026-01-09T04:15:30.97095Z","times_seen":32,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:43.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 04:16:43 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-eb0\"\r\nexpires: Mon, 19 Jan 2026 23:58:02 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-20T23:58:03+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-05T18:49:57.368912Z","times_seen":16705,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/app/apple-store.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/app/apple-store.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1695\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 28, 8-bit/color RGBA, non-interlaced","md5":"23365ecc5efac688c5c5f6687bc28517","sha1":"985f8bfc355f154128dfb95cb6a52e7f75810dd9","sha256":"9b6379553c736ba90369e9f127aeee40c1d36af562b7269b3c809d17df10be6c","sha512":"a839459926280bc036ca47f162a629312a3425af02e76ca163fa446d10fc8fa6f01a2dad148cd09a89e661f8717d2e8712cf84b43004ad611c9e2fdfbc845d91","ssdeep":"","tlshash":"aa31fa937327587bcd7675241474c0817f1a876a2ba9238d902933c4bf244a9ea66201","first_seen":"2025-05-05T00:39:50.1292Z","last_seen":"2026-07-27T13:32:19.536672Z","times_seen":11,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T04:16:34.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":85208,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1519)","md5":"fb7c08d6a5581ed7cd9529e07ef85aab","sha1":"3a41ce1ecf6b94c03c8314fb9394d89a7ef0599f","sha256":"b78dd4be5d477646d6fc0ea1f5024beacd2230140605158e33025b114d5cbd98","sha512":"1e0e200f2afb7c560a9192a980075225d98a970136c1ffa15a77ebbd1a48ca5484ccb83228c64b8cf08fe32b693c59761655073a641197f13b2458e1ddafa98e","ssdeep":"768:crpexPKKTCxTXQ4Yx/ijDh5VvWd/F1IGSYJIOOO0RzdV1K:bKKmxTXbYxKjXVOd/zIGSYJIOOO0l1K","tlshash":"cd833c2064fa693b00a391e66a762f1b6fe1ea07d96b461073fc1bc84fd7d82dd13518","first_seen":"2026-01-07T04:17:18.766053Z","last_seen":"2026-01-07T04:17:18.766053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":111,"dns":38,"connect":32,"send":0,"wait":47,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/banner/banner-04.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/banner/banner-04.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40424\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 326 x 265, 8-bit/color RGBA, non-interlaced","md5":"5ec34358ef9aec80c6442836c4ac0214","sha1":"2496662ddb8efd1c5f93651ff669426178bcf622","sha256":"a01cdd9557c59f0a5eae2bb0bb500e637a05e142b4aeef478458d209aa185112","sha512":"4a6e1b9f77a52013cee9849e09258124ec638fcc2ca14cb36c6d565409177fbf4f07d20b308cb235dad51a6e07866eb5ef7f9058cea936ff3fa285414449cc86","ssdeep":"768:0VuBzSg+mSucAyRDKxW2j2GQ2DlgJ10YQbiLDwZX/:emzPJf/8KQ2j2GQs+0Fpl/","tlshash":"f803f122f35e3b46d219684372e8c14587980578ab66ec0fd498f71ee001b1eb77ddb8","first_seen":"2025-08-06T05:48:03.391713Z","last_seen":"2026-01-07T04:17:18.768163Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/7785.13b61a3f3b048821ed59.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/7785.13b61a3f3b048821ed59.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65aa-624\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:14 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:26:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 5474de896ffd0c0f7ab60e648959b57b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572), with no line terminators","md5":"1e10f5d818d90f5b0fdc7216154c6b28","sha1":"61f5a46f9af51b909488337eb5c9fd557fe3dd7e","sha256":"8e0ed0edef47bc29e5a016fa5397d9ef84f67a1ed0ecbf096a3a04176ae1ff7e","sha512":"ffa068078aa5c3e00419c88f6a4008c3d6add96c03c4aacb849a1494fca246a505120949ede9a87ba6e483f11772e5fdddb48bfd33649de4b6695db553f3435d","ssdeep":"","tlshash":"4b317e76d334e125bd760e376340e5aa7054f4477633926cda81bda8d0d16fd3a32398","first_seen":"2025-07-09T16:57:52.33152Z","last_seen":"2026-06-08T05:21:46.682194Z","times_seen":6155,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/20991.72338a326684b4a6e9b2.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/20991.72338a326684b4a6e9b2.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65a8-39f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:12 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:27:11\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 21e41f94b46ede82cf0441f3f14a30bd\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (927), with no line terminators","md5":"f7edbf729f1d754dc08bf0eb0acea1eb","sha1":"a7fb94b706ced3436e5026a781636a0ff188747c","sha256":"8e7236fcab97e4d2bfb8645321121f49fdc9826a3fbf1970d6412894fa240484","sha512":"a9bbbb20568f601c8708e54cba868d3ebd85fc3cc133cf5748c2f8598fa5f05cdb3b0434e1e947d51a2ee6db800226c5e5907136a474de064baf06614701c721","ssdeep":"","tlshash":"f8112768b1a06d2c7613ee3c1ba85c4c795dd25ca6831ecffad07028079f2cd26720a0","first_seen":"2025-10-14T13:25:50.155594Z","last_seen":"2026-03-24T09:56:39.927675Z","times_seen":5056,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.2f3WBw8L4SI.L.W.O/am=AAQD/d=0/rs=AN8SPfrXXtxuFpMMBoYgp93jo68L3iC3ZQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:37.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.2f3WBw8L4SI.L.W.O/am=AAQD/d=0/rs=AN8SPfrXXtxuFpMMBoYgp93jo68L3iC3ZQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:49:01.761015Z","times_seen":17739839,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/css/vendor/magnific-popup.css","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/css/vendor/magnific-popup.css HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1697\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2f01a4a984b4ee75028cd96e746cb975","sha1":"5e330dd82aa81998adc6bfbbc43c22b754697a23","sha256":"2dfa59536f8cebc9212bb08407a23428fedfdead36a9bd2c31e34002e0b63df8","sha512":"54910da81bf1d8226d76d514da29f0b8ec67f39c67a04a08d915f2ba6002da0bc7ddf920cbed4c704bdd0773af64774718fa204dcdcb4a4512b4286580937bc6","ssdeep":"192:huQ41/ez2yIyZ+AcS3n2s96/LEAeXHFyiYne:u+P3pFF5","tlshash":"c0e13ed39fb22305e525e9a8a797ab5973120023e70fcc6b7fd91448df8d7c841a2785","first_seen":"2025-05-05T00:39:50.086973Z","last_seen":"2026-07-27T13:32:19.636059Z","times_seen":80,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/12568.053cede951b9d64dea44.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/12568.053cede951b9d64dea44.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65a9-90a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:26:37\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 72ba2bb37fe8b66a979121199f7ca198\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2314,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2314), with no line terminators","md5":"1085f07c0dfc61d9d2aa570bf6a92141","sha1":"ceb7063dfde1541bf7c9f135666e29b8ef27934b","sha256":"c1c7e1089720c9290822271a34529480652d1a1300155407c5ad181c7e8f1c93","sha512":"1d1af2801453ea66bee46cf53755d8898d2314ccc70a4968eb981e5990c11b370aa7da93855c4f57eab492a59616e757531fe8e47eed7da6f0d1fbd8c72ce568","ssdeep":"","tlshash":"0f41251fb3fb1d212c234b1147d46e532330e5a315e36adce810d1aeaeda9de39b1285","first_seen":"2025-07-09T16:57:52.286883Z","last_seen":"2026-06-08T05:21:46.688495Z","times_seen":6275,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.2f3WBw8L4SI.L.W.O/am=AAQD/d=0/rs=AN8SPfrXXtxuFpMMBoYgp93jo68L3iC3ZQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:36.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.2f3WBw8L4SI.L.W.O/am=AAQD/d=0/rs=AN8SPfrXXtxuFpMMBoYgp93jo68L3iC3ZQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 4155\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 04 Jan 2026 17:26:56 GMT\r\nexpires: Mon, 04 Jan 2027 17:26:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 211780\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22386,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (22386), with no line terminators","md5":"901d0c6f3ec8e257e3b9372389ca731a","sha1":"96ab12b16de57ebb10f094a2cdf15b47c0ab28ac","sha256":"fb1bd700eb83832fc2ca14c9fd537e5facad95f3bd15632db0c4b1c5a5bd7e20","sha512":"11e9ea0d777362fd474273c0da81a04389829c7693f0acbd723ccde73901a503aa594d96cf5f506e7342ad708b6c28760fc1517657c6bd2d5100e6ffdfeabb13","ssdeep":"384:gM78SrevMTWhFzou+FqWBZpTpdHjPtcBG:p7XevMCiHjPCG","tlshash":"88a2ab2117aed019a3afa85354d36dff71d488db90113eeaef5a3352cd822f231da215","first_seen":"2025-06-14T23:54:58.423738Z","last_seen":"2026-08-05T23:51:29.353126Z","times_seen":4064,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":92,"dns":46,"connect":10,"send":0,"wait":15,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.pYUD-jQE6Xg.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfoVmHC-xxbJ2bx9isCWHeR-u0_Hxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:36.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.pYUD-jQE6Xg.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfoVmHC-xxbJ2bx9isCWHeR-u0_Hxw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 105292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Jan 2026 18:33:42 GMT\r\nexpires: Wed, 06 Jan 2027 18:33:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 03 Jan 2026 02:08:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 34975\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":370591,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2581)","md5":"454652414686d41a95f5ba76c1f67ffd","sha1":"91b2d0c50fb1296b1dcfb5e50e7fd8bd95da778a","sha256":"74a3e091545a7ec2c346399af43f186ce09666dc176dce27e1b5d87f29362196","sha512":"25dd288be586f7b48a80f451d6cea94489531d78fd2b28c37f0fd40bf595ea4519127414373fc8da05836ba83d9e30203ff8a8870da355e45e6e22f020a5ea95","ssdeep":"3072:cNOP/qRijmbFPW11PmLRaisun+EQaCRVK+DTx1oSFJdu6IVquPUSyHyil3Y2qMPJ:2yJpuQipQHxDFmBLtC3Y2c3N13UP","tlshash":"2974d9c9b26634539262f8a1d06f0087b93ead57b4484c6cb24decea5df084941b7f7b","first_seen":"2026-01-06T21:31:33.071196Z","last_seen":"2026-01-08T22:42:08.693743Z","times_seen":204,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":128,"dns":42,"connect":21,"send":0,"wait":46,"receive":61,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/pl2.gif","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/pl2.gif HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1627343\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1627343,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 360 x 360","md5":"c55ad2577052d71c93574f67994f6393","sha1":"67067d25a6fb61c985b5cbc308c042bd909ca874","sha256":"07f93841e3c97d408ff20ff0db870977c3cd7f87237b31c327a3fa2fd445ae7c","sha512":"bc7abdb7b320c572479d2f0b4ac19f0603358d7037b67a6a4c9ce96eeec111d077d4268b7702a135333f14dd21b47d8bf56ac5e7c70cc17f41ac75b13b2be013","ssdeep":"24576:IbdJ0O/6xF1u3zanqi+e4OCfTQIh6n9m1exUV0wqs:qdyO+s3zaPA8Ln8eOf","tlshash":"5e252382137c8a56fea4083c29a55f63ad8450281cf7bf2bd59935c361cb3691dec4bb","first_seen":"2026-01-07T04:17:18.777649Z","last_seen":"2026-01-07T04:17:18.777649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":500,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/type.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/vendor/type.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1397\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5532,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"497ebc8ef71e0997ba5fda09be7ef211","sha1":"77855aa2dfb40817b07d80d2f3e121afcdc8f427","sha256":"d20866ac54b17d2205264f37b531fbb71b6a6425d124f551bd4c97a949dd43bf","sha512":"12b50618d086df01d11e6d45f2a7fc97b93e2c62fc668d140a2f5fc9c6cb66451aecba1e4ce682ba26a1fb258294c5f1788dff451f3842d7cde5161cfafc6d8c","ssdeep":"96:gIPU+nZ1yrTn0Y8PKYTy8nO9nYPvySnFknzNjn6M2NhcnB0z/M:7fZ1ij3yTR+YPvXFizd6LO0M","tlshash":"e5b16194fb7869ae4bbf0dba167e90cab67c30335545863b7de64226166029c3313ccd","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-06T02:21:22.667308Z","times_seen":1181,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/jquery-ui.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/vendor/jquery-ui.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 65363\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":255069,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"b0835cb4bf7759d11d32c3b58ecad21a","sha1":"71235de197a8d6c17dbcdc2bdf03642900766234","sha256":"dc5152d39a5e618489a49efcd4c513166359bce33dee387f252c7560c7a1615d","sha512":"b339704a0a3b0356aab65425aea357f5c666d6c46dbe5533bc0f0dca586d8f84d17dc49300f8ca25024c9b2564b02d6b0c0d72462bc1bc3721f6fd0d584e6428","ssdeep":"3072:aDa8LPLGI9fB8NnODpEujVHUc9koNRppuzGvvFCAvuBFak8J3:YLjv9u4VxvLd1","tlshash":"5244f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2025-05-05T00:39:50.08507Z","last_seen":"2026-07-27T13:32:19.533642Z","times_seen":54,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.37132.0d5ab883342d9eeaad87.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/en.37132.0d5ab883342d9eeaad87.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"694b8513-a8b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 24 Dec 2025 06:15:47 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/24/2025 10:23:38\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: db251b8972bf6728a6f33ea294ff8b0b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2697), with no line terminators","md5":"05a573ca75d248b33fc26c619cb38697","sha1":"e09714ae774c28c6ec2a8057f552ab92ba6bde93","sha256":"df43804e223650f28861a3945c0d89efd9dd9a0913af85f9057f35e650f8ae6a","sha512":"d2bad7bd0be68ef1eb5413e665cb83dff3a66e95b5170a671d18236e56f6d161fbd481e2f0095db61351f177d37e1b85fab3c654266feaac16e26428ba70bb2f","ssdeep":"","tlshash":"2a516287d1e055e52fb2c7487b96ded67ad071a04072d4e92b4d2f96c2c7ce0c0f8a84","first_seen":"2025-04-23T12:47:37.64052Z","last_seen":"2026-06-08T05:21:46.568424Z","times_seen":3029,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"87.242.88.149","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:43.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 279\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":279,"data":"{\"event\":\"bundle_loaded\",\"widget_id\":\"B4HAXlte4h\",\"chat_mode\":\"online\",\"site_id\":2377498,\"device\":\"desktop\",\"visitor_id\":\"286accb079e542bf\",\"widget_version\":\"181.5.0\",\"shard\":\"ya\",\"param1\":\"181.5.0\",\"param2\":\"newCode\",\"param3\":\"en-US\",\"param4\":\"https://code.jivosite.com/widget\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.7\r\ndate: Wed, 07 Jan 2026 04:16:43 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:49:01.761015Z","times_seen":17739839,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":68,"dns":1,"connect":28,"send":0,"wait":29,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/waypoints.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/plugins/waypoints.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2592\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9028,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8863)","md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-08-06T08:27:25.850452Z","times_seen":18352,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/slick.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/plugins/slick.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10097\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-06T08:44:04.042136Z","times_seen":110359,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/61997.9b223907748904842eec.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/61997.9b223907748904842eec.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"688320b3-c70\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 25 Jul 2025 06:14:11 GMT\r\ncdn-cachedat: 08/14/2025 09:09:40\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 278e7a170302463b9373e64d326c9161\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3184,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3054)","md5":"e499c0113cf5665fbdb37448b0e40b17","sha1":"09092b4005242c72d7c71f691fd3441b70261b4b","sha256":"5e2915ec7ac02c2cf5b983f0136b12b664d65f580492ad542b7d643f30d58b26","sha512":"09c4a229573c16e0d31ebcaad90d1abe1a7009fc4b134e072b4bced26209cb23807a8f6f35fd80616e9a9bed2b5b453c1052a886f83b91e6d2287c2758895c49","ssdeep":"","tlshash":"ad61e1cd3386b42423e6e7a7b4af120be23e5999602c4418b355d4e17d269de8137f78","first_seen":"2025-03-12T13:46:44.579198Z","last_seen":"2026-06-08T05:21:46.526267Z","times_seen":2559,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/fonts/fa-regular-400.woff2","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:35.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/assets/css/vendor/fontawesome-pro.css\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:35 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 357732\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":357732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 357732, version 768.256","md5":"aca950cc283a103f77e0001fb67043b7","sha1":"bf0d2965fbc75a8a23ca081c7094a95535d46ca6","sha256":"d2d786476ddb1827a07bc0ac83e78cee6d262a16092b6064c166091132f09b65","sha512":"688dccb8f597517ea3c93ddfe5c888a5257e141887cd7df4642935e62f308f8fd8bf091346d1594498267212e97d10c8d3eead5766a334f5f9d2d6e28ea769b1","ssdeep":"6144:xOpEwksQBsrLv4JSkgbLA95gvi0vtVpGLE8Im+tqm5VaIBPXxDMz53yHSJG:xO/YWrLImfA9iKI7pG+tqmrt453iS0","tlshash":"1f742311da330b5a100abc22bf603cec49fa5bb51e51954eb94a34d85edc4f1a7cce6d","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-08-05T00:38:35.621949Z","times_seen":1345,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCUSDT.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCUSDT.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"bbb4f6e32f1ca29b50e4d51d2ff90533\"\r\nlast-modified: Fri, 18 Nov 2022 08:44:56 GMT\r\ncdn-cachedat: 08/14/2025 09:10:58\r\nx-amz-id-2: TjnXXAowjHcyMTmDK8IWi6ygqQKDTwJzu9oyOior4/z9TzLn10IE5VH0k5q8vHWPNisLMgnoT18=\r\nx-amz-request-id: 26VX59HPKWV3R21Z\r\nx-amz-meta-hash: bbb4f6e32f1ca29b50e4d51d2ff90533\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 13d4a7f0465546ecf53902c4239df418\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (456), with no line terminators","md5":"bbb4f6e32f1ca29b50e4d51d2ff90533","sha1":"91813b2f633589f1a54acc07e079f5fb16814ab8","sha256":"c44cfa6a107ce04e8893a36785ee019b6c76f20c03464fc5f652004ba7513f0a","sha512":"6925c29399407f316cfa724f7cfeb17e8ba499ae75288ebcbc16e4b221ae9427474c8e2d0c3e6b23e64f0afbd1205c827414b8ff1442dd90a387794e4535fd24","ssdeep":"","tlshash":"0ff0d46e9704d9cbc504826ae77c907619c620d5f28e1298fca15b5034877db2a04cbd","first_seen":"2023-05-02T00:43:59Z","last_seen":"2026-08-05T03:55:23.88922Z","times_seen":1989,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":253,"dns":7,"connect":2,"send":0,"wait":6,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCXRP.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCXRP.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"4cc138d1e09d2133eeca65966f3894f0\"\r\nlast-modified: Wed, 08 Sep 2021 09:01:05 GMT\r\ncdn-cachedat: 08/09/2025 14:29:07\r\nx-amz-id-2: JuDMffPvu0lyvb0WoxlTyWtkqoK7HTMLiYTfnOGrFfHlA6fdqNzj/inFZpNceX34Oz2t+p0q+ew=\r\nx-amz-request-id: VCVD2HFHZW6JZFGW\r\nx-amz-meta-hash: 4cc138d1e09d2133eeca65966f3894f0\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 038fe44ab64aef7e3bdbc700eeedfbb7\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":661,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (661), with no line terminators","md5":"4cc138d1e09d2133eeca65966f3894f0","sha1":"cf40ee7fc2a18c2f6ae3c7522b6234ca45743623","sha256":"b2296bde0cbe8bc2cd069e06dcc26ebcd6cd3203dea044abf5a2fed0dc4ffbf6","sha512":"ba132f8034dc017c417c82c74747a3b419e760f9c18213fbb567e6558912f47108c01e8b6d4af1dd422daa51518095a660ddb2554a2b614d01ef8ed4c6039f9f","ssdeep":"","tlshash":"d301236dc738fd19fa45c65ced248849124770db875e01cbe3c0ae0b30b96c7580cd54","first_seen":"2023-05-02T00:43:59Z","last_seen":"2026-08-06T04:20:06.361701Z","times_seen":2413,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":171,"dns":6,"connect":2,"send":0,"wait":6,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/bootstrap.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/vendor/bootstrap.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15560\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60404,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (60125)","md5":"b0794583ec020a7852f0fc04d5cefc52","sha1":"847dff899b5bcf8ee434e389e2a910ba1dbad76f","sha256":"9bcd4d0f29dc6556ebeeff44eaa0965f0c7f7308ee58394708cce2f698cca1b0","sha512":"d7f46f6537020c452363f0b2a62333fa2aaab5aa107c021398d489635eccca9e0cb3999dc4f4b9515ee239f759a3170687315b3a6eac9ed4ca269a63bee860e2","ssdeep":"768:pZYN+vOLQ11ObgUDZa8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnlcGpPX21b0:pKQjXht8xmeY8ssH2nvt","tlshash":"0543a5563254b8330ade85a78136434bf7295c98b547806cb5bc6cde2b7dc863272bb8","first_seen":"2023-03-09T13:23:05Z","last_seen":"2026-08-06T08:04:32.219562Z","times_seen":2217,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/cert.pdf","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /cert.pdf HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/pdf\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 470895\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":470895,"size_decoded":0,"mime_type":"application/pdf","magic":"PDF document, version 1.3, 8 page(s)","md5":"0195db53e178d3b4c082f8d777f6354f","sha1":"0d17072d4a10ca6a218eea21b376f55ef0bdb5ed","sha256":"c7cadb2056803ba2c8c9ea8f8b1725c73198d9e6165a2650fb8eacfe01a679f1","sha512":"6c27280d0c73af4f1e11804a9e45acbe32080ac718a933fe75321c8139c4c9afcae3557e95f915e30f233b2798a59d1103b04d833f3510ea2e10dbfedb2fb848","ssdeep":"12288:E4+LW5QLYsfCLZ+Tm8OmP3ncj8AFrK/ET/oSv87mEB:nWYsfCLZ+Tm3mPXmvLJ81B","tlshash":"b3a44b48b225183f7fde72007c26192b80266b93a1c6dfd64ca7906b47eaf61fd71c16","first_seen":"2026-01-07T04:17:18.789935Z","last_seen":"2026-01-07T04:17:18.789935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":790,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/embed_ticker_tape_widget.c54c6d784ea940c1a531.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/embed_ticker_tape_widget.c54c6d784ea940c1a531.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"695caa5d-49f6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 06 Jan 2026 06:23:25 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/06/2026 10:15:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 98b5996abaddc93b79b6793270891c03\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18934,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3070)","md5":"20118328ff35bbf956e8e363b9ccd649","sha1":"f00970910ce645363506c276c038315caaf84729","sha256":"054a7e05ec6a3599f08bec0a6ff3d725b2eea1568817a53db0ac2c79a6c095a1","sha512":"d2809b3770fc9dce90fffb6d395904c3ef79038e845e23d8d4957e817bdb97dd87345b98fbfccbe77195db4c9fc906f8a0c0c7e1403fc8f5eec90d246c73ac9a","ssdeep":"384:CCQMtOweB555WeaadK9+BY0022wFYLZML4euzDE4JmkSl8drkuOCWZAfBYG59zJD:BQBweBn5Weaawf22wFYLZML4eu//mkay","tlshash":"1f82e7133394147a80fb459b91fd4647b6220888f6428818b96c8dde276ddc935fbf7d","first_seen":"2026-01-06T10:31:31.721241Z","last_seen":"2026-01-15T19:35:13.659838Z","times_seen":101,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/83701.a7899734f1c34f6fcc23.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/83701.a7899734f1c34f6fcc23.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"6937bfa3-1c8c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 09 Dec 2025 06:20:19 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/09/2025 10:04:13\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: be1de07bcfa62c1dbeaf0b4c43ad5be3\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7308,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3063)","md5":"619457598ef021e1b093e508050c25bb","sha1":"389e173024eeb7e89ae1c78f40d88e65fc40a843","sha256":"62a1bcdf91e82cad4504201d37492d49532f57eef207c7d0483aca9f5688711a","sha512":"985cf5d66ff2c7583caea1d471b8319e8f51449b006ee94ab035409858069ad64e54b7034e1554454f8d2d63ca285ca4a1e7bce88678e8dc1aeff2f55bb21fb3","ssdeep":"96:fEe0ZIput7XybRUh7PE8NiA5wVqhvcELErhb/mMPH1i0+0XFCW6sbP:fEzOY78ks8NiDVqhvtObu640XM/4","tlshash":"78e1c6c972f0f0ea93d334e480ab5906e135ae5a588e6076a34562d32c34ec681fffd5","first_seen":"2025-12-09T14:25:28.491571Z","last_seen":"2026-01-23T06:29:33.961801Z","times_seen":1456,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:35.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:59:18 GMT\r\nexpires: Sun, 03 Jan 2027 10:59:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 321438\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T08:49:52.487008Z","times_seen":25829,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":465,"dns":46,"connect":23,"send":0,"wait":37,"receive":5,"ssl":412},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/apple.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /apple.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"725d4f188fecc7d857c5a8e668ec4dac\"\r\nlast-modified: Wed, 08 Sep 2021 08:59:47 GMT\r\ncdn-cachedat: 08/09/2025 14:29:27\r\nx-amz-id-2: OfXAosqCnT45MP932Itud4MiD6xzjSa187kFLkHYpOF4agfR85gd+EMNbzwgZQ1WClcJpAGs4b0=\r\nx-amz-request-id: EPW0K4KRSK76V32B\r\nx-amz-meta-hash: 725d4f188fecc7d857c5a8e668ec4dac\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 050ef20b777e1d0c8b9f278822db5e64\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1112), with no line terminators","md5":"725d4f188fecc7d857c5a8e668ec4dac","sha1":"1b0fa7fa9f490f81c5b27a1103ddf27a64a80380","sha256":"92c90a9fad411e1735a51e42c34537725149bf0962aa30d593fe5f311be8d1bc","sha512":"c7a7e2c18bf5cd8e2f85220261d6712ddd1682aa6ac1439b66b924431c79e7fa2a1a89adb01fc03defced15f724a8ed5cf5936befe1dc3cab62dd9d15652261a","ssdeep":"","tlshash":"6f2133e7db6557dcf449c2edbf0a4875100e7096a25752c1949e2f1cf02e6d3fa04844","first_seen":"2023-10-02T02:23:08Z","last_seen":"2026-08-04T14:43:53.469239Z","times_seen":1098,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":279,"dns":9,"connect":6,"send":0,"wait":4,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/css/plugins/swiper.min.css","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/css/plugins/swiper.min.css HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4668\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21052,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20795)","md5":"23e9c8698ffcd548fe92859d61b33480","sha1":"b2e0c629fd52bdb09c30634a3f2879bee058142b","sha256":"dd848a82f302ffa92457fe271594f99651e08e935806b8a1df3641dd62c1674a","sha512":"26609e3387aaa503ffefc4fe0064fdb6595be2e366e4dd584c3ba7831f55b77b0a76480f7d113366f157c89c9dc7f1213aeeebab5071b06557bec20d058decdc","ssdeep":"192:IbgmUJbiKneT7Fmk0B7xP5Tanxup/a2uMSf5jfcpqesseEPJ9QzPz+c3At2/g:IdUbeT5mk0Bmnh2u9f5jcKNmb","tlshash":"819255791340291752274f2647e58bb8da74c4930b938aee62c0ad48c7f7dba235f397","first_seen":"2024-08-19T21:38:32.183696Z","last_seen":"2026-07-27T13:32:19.635259Z","times_seen":66,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/about.jpeg","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/about.jpeg HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2554164\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2554164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 6016x4016, components 3","md5":"343b7f2d7bfe8c9b31da7b7f80c18e79","sha1":"e2c89dd273e720b55410ef89d2f3eb1da9340587","sha256":"0469d3aaf275cec4ce75864343a32fd78fc7e3458e209e974bfe9c773ed5035b","sha512":"198679163e25907b7bbac9f4e6837cb1dd8cfc3a29deb88e4610eb92e11d8792465ada28e6b84c1a0f85e01876d1d945b92d866275673e91287402d0bab5c4cd","ssdeep":"24576:3GBlukCBSV0McNo3IS12f90Rdov48nMhNCCJh:clqBSV0KI/WpGM/Jh","tlshash":"37253332df0619cbf6c4773985e3525a5fb125f1e343293d8ed5c82b0a1b3a5ac698c8","first_seen":"2025-08-06T05:48:03.416594Z","last_seen":"2026-07-27T13:32:19.604685Z","times_seen":11,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/ajax-form.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/vendor/ajax-form.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 445\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1261,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c0f861f8abedad636336a36a50811a18","sha1":"d65d863be5fa01525fe15e705c2f0f204567bc7d","sha256":"e13725f905d372373a415fee5097e37e3dbb95c23bdcff4f11e11377300458ec","sha512":"f0a2d1f419b271568cbc02c38f73d898d95f0af85d582906360137c703349bbfb85c25f7247f534c97f6e074d5c94c3d12a54f89773cf210deb03d9d86024885","ssdeep":"","tlshash":"67218e00ae7c0b6e2226214536ed33cdbb2c55628647742a9fa9147a16841dc16c27eb","first_seen":"2025-05-05T00:39:50.143146Z","last_seen":"2026-07-27T13:32:19.596084Z","times_seen":50,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/2452.cb0cf9507a4fcb2e8172.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/2452.cb0cf9507a4fcb2e8172.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 20\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"695caa5d-14\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 06 Jan 2026 06:23:25 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/06/2026 10:15:55\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: dcc5ee1d9117fd648b331a481d5d0143\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8c361f5f3e81eca6f243f991934acfb8","sha1":"cca2cc0145571af645e93a0eea492681a68d4db1","sha256":"b7db039e8731af6abd4fe1cad1c082f9a54cac9bfae4de52cac6cbb64431ff06","sha512":"94498523c2221fd084df6e33d95e80c4f0dcc1054ff64a84c7c5309491e66301e34045b6df7d5247854e2893bf8e3fd6ca8b22f2e40daebcad83853dec330ad8","ssdeep":"","tlshash":"757000020028200280800800222000000003023a2a880000a80080200802aa08a0a00a","first_seen":"2026-01-06T10:31:31.715579Z","last_seen":"2026-08-06T06:09:10.711365Z","times_seen":7812,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:35.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:59:18 GMT\r\nexpires: Sun, 03 Jan 2027 10:59:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 321438\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T08:49:52.487008Z","times_seen":25829,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":307,"dns":0,"connect":11,"send":0,"wait":10,"receive":16,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-5.jivosite.com/widget/status/2377498/B4HAXlte4h?rnd=0.3446926319082063","fqdn":"node-ya-5.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"130.193.53.144","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:37.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2377498/B4HAXlte4h?rnd=0.3446926319082063 HTTP/1.1\r\nHost: node-ya-5.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://www.bluemeginvests.getfar-express.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/4.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 203\r\ndate: Wed, 07 Jan 2026 04:16:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8a2ecc2c6532d88d0b5910fe266df505","sha1":"7c8d8a4fd8299a8209800085813dadef254974e2","sha256":"57fdf719302c39eac60a8fea4982be79cf72cc4f69e620c447f697833a190eb1","sha512":"2d1b20749809273b97e8b5aa080a8d2999735e4223744336f6ec328b597f46b9604ae76243988d99b2aa39c82ffe5f4230cc725d4efc1049060eb3984115bce4","ssdeep":"","tlshash":"7ed0223d0a2624eecf80c584a1d3774b0360018220c28b38e681ec0091fe5d2452e847","first_seen":"2026-01-07T04:17:18.802782Z","last_seen":"2026-01-07T04:17:18.802782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":204,"dns":65,"connect":43,"send":0,"wait":93,"receive":2,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/css/vendor/fontawesome-pro.css","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/css/vendor/fontawesome-pro.css HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 75155\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":466047,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65360)","md5":"5e1c8598e15c2c6c21e2e63fff0efa17","sha1":"7eb7a7213f09ababd24dc74f9bbd22842ac6c2c2","sha256":"b648495e3156e4f6747a4a5b5de14b31c218ee68fcb7eb88fe9bde295817afec","sha512":"f2092b1bd8cdac660a3988053714477de38de20846abe64265bcfc6f14ce2edea1a7907a5dacbd3117e2dfe7cd9d4b1abbf279066a550f735f55f4cc8b13c9b2","ssdeep":"3072:DlCBy5vzoH4oF/60CnUMA+wr6aJN0ugNcHE/9s4pZQk:ZCBSzoH1F/oUb6aJcNcHE/9se","tlshash":"1da4c6a0a05510dcb3d7e60f5b02b629e4b7f33ed9814f4fe1d9484e0dd3a6871867aa","first_seen":"2025-05-05T00:39:50.126402Z","last_seen":"2026-07-27T13:32:19.523115Z","times_seen":30,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/css/main.css","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 49356\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":397404,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (978)","md5":"ec9243f9a882f6ec1e5f820f31217993","sha1":"af4781078514db84a91665e3c7126ef9c8a80532","sha256":"117bc0ef23db0d7b48ae9670bdbc80989f7587568e57f032ac17afb13132256a","sha512":"2431c3bb4147bd9804b7fabd27051ac5291b5c8a404fcff671d0111e5ed30e3308e65e98e8ecfda9e32549379764619ba15243f5917e5e98152ad458f0cb08b3","ssdeep":"12288:9KF8Z2B/48ogT5T8tTbLfffgRjW6r1fYNzK2OdQRvK2Ke:hfffOf8","tlshash":"7d8432f65fe9121c342be0496da55bd4e3ac6006a30eeee9a6d0305c5f883e5417fbc9","first_seen":"2025-08-06T05:52:42.32429Z","last_seen":"2026-07-27T13:32:19.637882Z","times_seen":5,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/app/play-store.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/app/play-store.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2159\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 107 x 26, 8-bit/color RGBA, non-interlaced","md5":"d5cfb570e14376dc9471ff4710e0ec89","sha1":"409e515e380f1aa805f4de32a9652ae454ea0a43","sha256":"7d9827686e472b4646ad8e347d9c564183fb9a387c45fb8e215bcebc2f8f6ffd","sha512":"727ac5d161880a19883c00a8abcd20e48212727377ef4bf2d87ec9647f696e4198f9b70ad05f89d4fdb1e83cf6fbd3b912de19a4f048ba406aab52e02c8aa8ed","ssdeep":"","tlshash":"204119d43b2685625059a96902e038307d4b1f71f1ab5a48eed32599823e0e2bf119a3","first_seen":"2025-05-05T00:39:50.076122Z","last_seen":"2026-07-27T13:32:19.630137Z","times_seen":11,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/swiper.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/plugins/swiper.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38147\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143700,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"ffd18ff8f4da5aeecf3dd57c398a2766","sha1":"3d1745ac173468de087e562f52d677ef02914adb","sha256":"9efe2d2587200bd246ee89a15cf483d84d66ee600c621db4d07962eb06b426df","sha512":"79ba08f8106d9e17fcecbbac0367f142b03264602eb21294a6eebc5004d89e1956de7fa2da1c4b627209935d0b01fa07749b2d1259f04f75caa549fe93e3c640","ssdeep":"3072:tJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGKJM9/EfrNK/YvD:tJLC4dkEUYnafpl9v8cIWybV4y+oGIMy","tlshash":"ffe3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2025-05-05T00:39:50.093558Z","last_seen":"2026-07-27T13:32:19.642924Z","times_seen":29,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":418,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /embed-widget/ticker-tape/?locale=en HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=120\r\nexpires: Wed, 07 Jan 2026 04:15:36 GMT\r\ncontent-security-policy: script-src https://static.tradingview.com/static/ blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://platform.x.com https://songbird.cardinalcommerce.com/edge/v1/ https://checkout.razorpay.com/ https://*.checkout.com/ https://*.cardinaltrusted.com https://www.tradingview-widget.com/static/bundles/embed/ 'nonce-sXXlew11owCr+nxYHmXgmw=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'; base-uri 'none'\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nreferrer-policy: origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/07/2026 04:15:09\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3a33d89eee7a3369c0217c2d8fea1b7c\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":40962,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15695)","md5":"f395d57d2c3f71dd4b3abfa3fc4c3db2","sha1":"9fdf6fdfbea024d3b8d145f3843b81c2f1056f5f","sha256":"895a2e958f3487ad8ba328de08eef9c886494aeeb31af0d98ab8ab0bd8c8f200","sha512":"73803d946493072b643b260875dad29a342d25386df3c5781922617f231b7e6d2dfcb5af7f505842c854ab0ca4701782eb2cb2403c6507e9cdbf13cec8bb0285","ssdeep":"768:TUPO1B1+vLCsM6dGINCczwFusCwP5YrU7ljpxwL14puPZ/Mb3pAa34A:TUPO1B1+vLCsM66qwFus8A7ljpxHV3n","tlshash":"4903e65394198306e6aa84057c37b203fd2a0658165244d8b6acdded22affc3f157bfd","first_seen":"2026-01-07T04:16:50.660984Z","last_seen":"2026-01-07T04:17:18.810639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":142,"dns":1,"connect":3,"send":0,"wait":3,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/main.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3305\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21492,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e2500da12b6f355fb4bbaa2b7b06a324","sha1":"25940a3c06d1514e5933bebe503d4cbda4696290","sha256":"5de50e052c51305f711d2346bbd73c3d27da63e7a6d1b0ee34b98109ac3812af","sha512":"aa9847e258b9403cea3470c18f724e2bb63aca57a40dc1dca3575b963f25170677d30d791f01cc3d8ff7307f671d0a735da05f9d84e5fbf6db16e4d7c3e758b8","ssdeep":"384:+s+srTV0IFymBFlBFAVI1Ggr7ItRuMAWithUCkA8ACAdHhA:b+srTV0IzORIH1NTdW","tlshash":"e1a2b746a460107a257ba33f2d2e9304f6a2236b81c59eb379fc05581f3635462d9ffe","first_seen":"2025-05-05T00:39:50.120308Z","last_seen":"2026-07-27T07:20:00.576809Z","times_seen":25,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:47.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.bluemeginvests.getfar-express.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 07 Jan 2026 04:16:47 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:49:01.761015Z","times_seen":17739839,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/counterup.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/plugins/counterup.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1297\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a1dd0da23384c3be56812d06e71fdeb0","sha1":"b10f96b231f2adcf2c86cc2f23b203e21110ae1c","sha256":"49e8ee00b6e88276e064c080bbea603d4561bbd772540dc552892aafd1f3f142","sha512":"58b80955ff10324b7d457da1a3ab2c1838395a2025c5eeabe33503e53bb27a71445d79d35fc46628f98870b104a53bbc5e296f17ce58b3fbaa9dacbcac2b5b19","ssdeep":"48:Jx199PmLhva0V6DpHZMSUriQ4OqwQmNxQXMiXyNdkiasFAkLMEyOdffzm8:JxFPAhKJGSUr2qN682aKi3Ak4Ey6fb/","tlshash":"56a1ca49686728991e33f16e7b9f72545324a52b0405ec0e78dd92804fc293de7e6ff8","first_seen":"2025-01-30T04:14:07.591462Z","last_seen":"2026-07-27T13:32:19.602858Z","times_seen":42,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/css/vendor/spacing.css","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/css/vendor/spacing.css HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1372\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17244,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17244), with no line terminators","md5":"2779c141f6182ec6ff31b52689dc8844","sha1":"91b682c6ce2462ed9b33388025141693cbbd40f0","sha256":"2acec7e6e3dd5ab838c693ceff8f171383892a68a75a2163e90c7f760a07a42f","sha512":"a3266b5253fa80d2110899ca1f8ea5e51ba5e1a1c1404ea997602ffdc5451608b625c9ea4c03f7674077a64decc16079869e7cd5e39a81da087b799965498a0c","ssdeep":"192:PHWSIv5kBWpwpChQReRIlbSZ4RBRydIJ6lcZK9oBilk/Jydt4Ub9rgtakdyjS5TX:OSxlaFgtakdCVvbximsDivu","tlshash":"847286538b8222acc81bdbb1ca4679e0f705a537904957d7de421b67ce0f7cc283a81e","first_seen":"2024-10-24T21:44:25.653509Z","last_seen":"2026-08-03T09:53:42.869106Z","times_seen":147,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/parallax-scroll.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/plugins/parallax-scroll.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1794\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8854,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"828dcce2481fddde9a12986a11d2d6cb","sha1":"679ed2045cd16e4ba35bab23e122a1e8cfb91db4","sha256":"323be7d67a7d9d4af3348a1083bf41006ef084b740714c4db04e061102d97b3c","sha512":"55bbf62578b5bcde797387bf051bf9a544dc1dd34d43acef5a56e234b081ffc6754afe8db0468184864b1cc5150a306b2c5fd4f5d69951e62184c17cda71951b","ssdeep":"192:3tlmESxgCsueqki3bixigrlg+67PLUKqBl6:THSxiueqkiG7iPp","tlshash":"5602fd04e4930522e5e771358f5e029fb72eb5079269d9287b0ddacd4f8093493e8fe6","first_seen":"2023-03-10T05:21:35Z","last_seen":"2026-07-27T13:32:19.638457Z","times_seen":56,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/61593.1f12e32e6d4c4b83fe10.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/61593.1f12e32e6d4c4b83fe10.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65a8-2151\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:12 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:26:37\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ecdce6bfb25baeb3735e56cc37a5ebe2\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8529,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8529), with no line terminators","md5":"0241ca44897ec79b2c50c63072c76800","sha1":"c58baaaf953c4f43a202002d8e1f40a51e082679","sha256":"852b781d52b939e5f990ce511b7ae16a80942ba4d62392c56d2d012fd5be7c1e","sha512":"305dae6a18c6fb00289cfb7559e388521732e17bdfc80ee3d5f558c45929590af2ff75fbc5cae2ec5ad6dded0b53bd09cd1033e517005b30e8b252cf705f01f5","ssdeep":"192:zx6b6bUbib2bOzyG3Ds/NE4/mmw09uUBJuHbRPuJRkX:zxxzyG3D4NrOuIUBsHdPunkX","tlshash":"fb024426b96306617c1b5a3d02b0afbc9836db839ad397dead10e1308fc75c59297d81","first_seen":"2025-07-09T16:57:52.341956Z","last_seen":"2026-06-08T05:21:46.646488Z","times_seen":6040,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/76901.2d64b239e6ec8b4f4dd2.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/76901.2d64b239e6ec8b4f4dd2.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"695caa62-e112\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 06 Jan 2026 06:23:30 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/06/2026 10:15:28\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7d3a2a3c3e6244da82b153cb64df2ccf\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":57618,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13093)","md5":"aaf8a678a11c3dbc76dda8d11f2e7d15","sha1":"c31ffe09915f15e0bb62b9ef475703866d209ebf","sha256":"40f86475d0d370cb02deb112b9048a62421335fc67ccba2673eef55912c2830e","sha512":"b7eb3979ca255b1de68428eefdb5b823ba7e3ecfca4ab36b749265b6b916ca17784ae60b332b31647ac1c2a070790ed1d9f85a7ee8184767ac855c88260689b7","ssdeep":"1536:20j/XOe7Zi41kxGC0hsh36Uni78ldtJOzoJ4emIwxKrRP7Xwz4xQ+4:2c/XOW/1kxJLhRPY4xU","tlshash":"1c432b66a9279db35ee947dad8772501c5fc0126b44128687afc8cdd0f8cbc47063aee","first_seen":"2026-01-06T10:31:31.679808Z","last_seen":"2026-01-14T02:17:55.05947Z","times_seen":208,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fticker-tape%2F\u0026date=2026-01-06T09%3A00%3A18\u0026page-uri=localhost%3A8888%2Ftradebasepro%2Fhome.php","fqdn":"widgetdata.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"93.123.102.197","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Wed, 18 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"96:06:76:35:9F:2C:2D:1C:89:55:E8:92:7C:4F:4B:FD:E9:F6:FF:1A","sha256":"BC:FA:33:CE:19:85:7A:43:44:BA:17:CE:87:15:42:E2:02:0C:7A:4E:83:42:1F:58:8F:59:B4:20:BF:4B:35:00"}}},"request":{"raw":"GET /socket.io/websocket?from=embed-widget%2Fticker-tape%2F\u0026date=2026-01-06T09%3A00%3A18\u0026page-uri=localhost%3A8888%2Ftradebasepro%2Fhome.php HTTP/1.1\r\nHost: widgetdata.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.tradingview-widget.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: JTHhfqNW4AarHN0Qi0euog==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 07 Jan 2026 04:16:36 GMT\r\nConnection: upgrade\r\nsec-websocket-accept: e0tDT6XaSwXdaUA+peiLYAXN+BI=\r\nsec-websocket-extensions: permessage-deflate\r\nupgrade: websocket\r\nServer: tv\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:49:01.761015Z","times_seen":17739839,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":11,"connect":129,"send":0,"wait":25,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:43.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 04:16:43 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-16b0\"\r\nexpires: Mon, 19 Jan 2026 23:57:24 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-20T23:57:24+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-05T18:49:57.441868Z","times_seen":16707,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/wow.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/plugins/wow.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2524\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8182,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8152)","md5":"a26a117ff59c944bbb654bf506f69786","sha1":"237c90127c99e91347536835096276b0add6d018","sha256":"cfa1739ee346d63a3d3cfdff8c18cbe8fdedbcb32d4b0895028c193ce828e7a5","sha512":"11a93fdbd393a5bdfa2cba36af8ec8a55ccf04b5e700c3c0572a5b499899e1091ff29ffb4bf5d11b9c69ece2963cf61f253ea67ad23e20e4644791bc17dd34fa","ssdeep":"96:irZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:iry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"04f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","first_seen":"2023-03-07T01:10:38Z","last_seen":"2026-08-06T08:43:32.696878Z","times_seen":8279,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/67151.5f40fb33e178b007bfc4.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/67151.5f40fb33e178b007bfc4.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65a9-9a1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:26:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: eec4628dbfd1857ba37c6d3ee1cc0f6e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2465,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2465), with no line terminators","md5":"713920bb4c981f74918f66d6a60ed5ec","sha1":"e8dc6c26551ea8cd377d68ccefa6d65628229a48","sha256":"62b7b99213edcf744ae32fb4953ebaafb3902fe66d6116a15c7bb212f44e3d23","sha512":"6d9c3a8939838f76b91558582764e9756880db043f3b712612eca1f10bb193e2531d7df11fc0c3d74f2cae0043682a97542fdf8af652c5e5e56ac01828e0f0d2","ssdeep":"","tlshash":"9851a7afbbc71e2dd70b8e92e7a711bf91a445c0be199138e5736c31024cab10b24284","first_seen":"2025-07-09T16:57:52.307228Z","last_seen":"2026-06-08T05:21:46.675183Z","times_seen":6431,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/75440.7570e3038454e92a7c37.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/75440.7570e3038454e92a7c37.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"68c27f3f-12f7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Sep 2025 07:50:23 GMT\r\ncdn-cachedat: 10/09/2025 11:36:11\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0cd7814ee10fdd2a35168109fd247b07\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3057)","md5":"02f41b54ef883b424f7b9b35d6993f80","sha1":"05ada298e5ccf5b1adffac1d9672d960541e0542","sha256":"317031dd7dd79f47c408dbe0bd5eaf997678d4730e20e68a87ece65c29dcb3d8","sha512":"6f69d695d58703ebb54b02e52075b6885c32f304a30dfab4b7c345bbaefa7dd0749e6924e302a604519a8dbeca640b241bef45849dd3581096722fee6aa32091","ssdeep":"96:zcpMMHFeHojARuZi0DWs3dYbYiWWD+WRdiaEBymSS0qRIv0maWvW1HN6AG0szEel:IpMMlIeARmLWs3dYbJWWD+WRd8ymSS0D","tlshash":"14a1fc87b5c1f0a06396aca4913f054ae63e6c1c710af4e8f3e5e5d29c7b20b5112f36","first_seen":"2025-09-11T15:27:27.447913Z","last_seen":"2026-01-30T10:36:29.374161Z","times_seen":3440,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:37.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:57:46 GMT\r\nexpires: Sun, 03 Jan 2027 10:57:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 321531\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-06T08:32:25.581332Z","times_seen":79055,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.56316.5d781abcca49a77088cf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/en.56316.5d781abcca49a77088cf.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"68fb3dd9-6beb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 24 Oct 2025 08:50:33 GMT\r\ncdn-cachedat: 10/24/2025 10:36:12\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.39\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: aded3fe66626516c56e6854a71601f3e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":27627,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3069)","md5":"05afc18c522666950c93749f9b26baf6","sha1":"6e8ecee8b21ad49f25fa9b9f1d0178104b28d10c","sha256":"0bfc8a17e105fea7a39eaee2ecab439bba68431d7d9d1ca2ed595fbbd776e7ab","sha512":"f6d49bd798b982e354d9a2474a877b2329e47dd63503044f726f3fe6e73a97becc63ff0f3899c416b8de0312fdf9433a127049f50f05f3e1ddd7426b401562ad","ssdeep":"384:e+x0EMPsBRgXD2PTmdN2/5dQ1tHSJm/BtU:e7E2NJuJmI","tlshash":"bfc2c007cd96b099f3f6e24e0ef4d50c2cb453495270d702be868e289ae5ee69d2f315","first_seen":"2024-12-25T16:51:40.939371Z","last_seen":"2026-06-08T05:21:46.543678Z","times_seen":4644,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/99201.f2a56b47ee088a948586.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/99201.f2a56b47ee088a948586.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69369546-50b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 08 Dec 2025 09:07:18 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/08/2025 11:15:49\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 792a06c633d6fa6bee15c76a4bf62354\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20665,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3069)","md5":"c2e30c17db05253fab0554528943cd21","sha1":"c2283c177060a0a7bf20a4aa105c64725e79fe65","sha256":"50fe753cef898c8e36f7deb195924724c6e63d55cb4c56deb850ef2b6d521694","sha512":"87f69b9cca5e83c75a9868243b5c78ef79718620f3e8f0133464e57753f2f43dc3702fce3e86eb644ca77b5144e810bfe8610ee777b509c2c173d041c07435bd","ssdeep":"384:ou8NTRJCURKRGehPowQ7a2ATRW5TNDta/UDRAtmSJSTLkeYcOH24KPKe+srIRyzq:ou0TTCURKwehPtQ7a2ATk5TNDta/UDmn","tlshash":"6492de8578d2f0a863955cc4c4bb4446f02a1d3c704db8e4e7e5c8d2dabb54ee436bba","first_seen":"2025-10-09T12:56:47.518234Z","last_seen":"2026-01-30T10:36:29.421297Z","times_seen":1773,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:35.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:59:18 GMT\r\nexpires: Sun, 03 Jan 2027 10:59:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 321438\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T08:49:52.487008Z","times_seen":25829,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":390,"dns":45,"connect":34,"send":0,"wait":10,"receive":5,"ssl":337},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:47.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1200\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1200,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"zxx\",null,\"TE_20260105\",null,null,[4,0]]],1871,[[\"1767759397293\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"44395063-4CDD-4848-A21C-74DC12E539BB\\\",[\\\"https://www.bluemeginvests.getfar-express.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,26000000],[null,28000000],[null,65000000],[null,65000000],[null,139000000],[null,101000000],null,[null,186000000],[null,186000000],12611,12076,85208]],[\\\"translate:page_load_to_initialized\\\",[null,186000000],[3,51000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1767759407295\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.bluemeginvests.getfar-express.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 07 Jan 2026 04:16:47 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-06T08:48:40.547224Z","times_seen":585063,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/pl1.gif","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/pl1.gif HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 311733\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":311733,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 360 x 360","md5":"5a65e4db965666f5abfa063b81b7f6d9","sha1":"09f59d5eff83f05b72649045578753684fd09c9e","sha256":"1cd08cb2ce4f8958fa6bcfff8a1665a3619ffaaaf72bd1ebefb68df41eaf9fd0","sha512":"82cc819b80cef3f913a9b91aa83249436d90bb3c01f9295348b0f33d7ee1bb671814a19f49425b81cec16add70abba3e2311239d105e771e20176ba1ae9c8365","ssdeep":"6144:UB4ODuyqbzKsZ3gHfBTVLyaLzGE917Yk5ssmzf:s4ODwXPZwHfBTVZjD715ezf","tlshash":"8264f19567784292feea043832481b22cdd410a960f7af67516134e13bcb7799dfe06b","first_seen":"2026-01-07T04:17:18.82457Z","last_seen":"2026-01-07T04:17:18.82457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-sheriff.tradingview-widget.com/sheriff/api/v1/rules/search?origin=https%3A%2F%2Fwww.bluemeginvests.getfar-express.com","fqdn":"widget-sheriff.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"52.84.50.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 27 Dec 2025 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0A:93:73:BB:95:EC:D1:52:11:5B:CC:2D:92:43:D4:FD:5A:2E:BE:A4","sha256":"70:E8:96:A5:F6:09:13:92:CB:0D:3F:A5:37:C4:A1:0D:4A:F7:52:C0:C1:B6:21:DB:D5:92:33:3F:B5:7D:EE:0F"}}},"request":{"raw":"GET /sheriff/api/v1/rules/search?origin=https%3A%2F%2Fwww.bluemeginvests.getfar-express.com HTTP/1.1\r\nHost: widget-sheriff.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 07 Jan 2026 04:14:34 GMT\r\ncache-control: public, max-age=3600, s-maxage=3600\r\nserver: tv\r\nvia: 443, 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\naccess-control-allow-origin: https://www.tradingview-widget.com\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\ncross-origin-resource-policy: same-site\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: fLmnedmMmKZetP07CN70-HTNfYJS-p5LreFsaaxk5yrf7GtvL1bY-w==\r\nage: 121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:49:01.761015Z","times_seen":17739839,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":187,"dns":10,"connect":7,"send":0,"wait":61,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/tradingview-copyright-data-impl.f335cceb8ae5b4ddc0f4.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/tradingview-copyright-data-impl.f335cceb8ae5b4ddc0f4.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65b0-f94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:20 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:26:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 01b8960c2fd621e6b63404b246fa06f1\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3988,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1999)","md5":"0d3a53b01bb53f478ab17a3851ad6998","sha1":"422d13aef7a996dc6cde97e8e8d3317079b741ea","sha256":"243a3d88948f26aae10617746a6a28fb86cebdf1be261902ecfd411a49d8ea47","sha512":"0a2d946d1585ed3f010fb2a84de75401c231afe905b2f33f75ce4cd9b7ae7e8bc265d604f2c36948c45dcd1f9f230cde0b00b1c6dae88c9bc6cc7a0d686c1d19","ssdeep":"","tlshash":"a4817497164158cc2152d8b8dc3b01e5631fa5ed768f53e4faa3df30a0932e5a851d6c","first_seen":"2025-12-11T13:20:38.364978Z","last_seen":"2026-01-15T19:35:13.675398Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/fonts/fa-brands-400.woff2","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:35.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/assets/css/vendor/fontawesome-pro.css\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:35 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104740\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104740,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 104740, version 768.256","md5":"27ed7b486bfe3163c0d312b6d2aa9069","sha1":"97cb3773774b591841557c859b0f1b4b1b1cde09","sha256":"fb347c28258cfeeb9b0904c469d8049fcb2ad4d1bb5e4c9601e0edda3b76bb69","sha512":"dcf76a7345dfd9861657e86a9c05ff6b8c8dc66fcb3942173151e851f3f08ccee750b63dd8cfe5a5d84cedd119643358dda3b89fc2b9949aca5a7b61afd5199e","ssdeep":"3072:NXgZ4vY5KhuOfO0Ba75N5j2blH8dgaRdfw:mZJKY50Batj2l8vzfw","tlshash":"80a312498538ed13251072b9b267a6e9c30637f932791f4c4179c80afba9911d33af9f","first_seen":"2023-05-07T16:46:00Z","last_seen":"2026-08-03T16:55:30.121034Z","times_seen":1289,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/app/app-01.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/app/app-01.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38038\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 392, 8-bit/color RGBA, non-interlaced","md5":"a23e42a8167397d0355d35963a388bed","sha1":"cebad89fb636084b8ac43599fda71ae830a4db89","sha256":"5168a3c82097ac8f0f1dcad7f2711dc071e60021cfd5c60674b2ecbe0d4b942e","sha512":"f9d1255cad22b1686becdd80fb0ecff0a06ef236c9083fd6b64add62d5ad3d71dd4e3b6044dcbe15599f013809d0a614e58417262634e179c8ad798047998b56","ssdeep":"768:rKVl2jSolNQWZ6nZrmnPUVUDwemokW128ixE1hXq:m4jrlL6nAPypna28ii1hXq","tlshash":"5103f1d52e0e4e24a2c4d9f5e118b647fe737faa147f344fc5399a1284623416b05a8f","first_seen":"2025-08-06T05:52:42.374561Z","last_seen":"2026-07-27T13:32:19.596984Z","times_seen":5,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/35087.6f688c623d7d2c1c1806.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/35087.6f688c623d7d2c1c1806.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"695caa61-a37b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 06 Jan 2026 06:23:29 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/06/2026 10:15:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b7c8f1b5522467c1166d734366f4893b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41851,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3062)","md5":"207f3a1075794f53a68a36d9b735e1c7","sha1":"6db549a66138fd50e697d1096e97db362f84ac63","sha256":"5fddefccf48b2a27423de9a72a7336c282806bbf0d82e02207786d2183afc322","sha512":"43353494013859c76f086d45cf5d86b624f4697f7c9a3bfa24e300fe1ca0714e1e64bb530b7f5e4c8e89a2fa72fda27c0c401c7843909b10204252a76f2bbf07","ssdeep":"768:qvSV+GRDx4OvUr3NeyzMfm9jCK1u9PexxGXKb5VI4+xU7HAMlbFy9M+Vc+BNkLFN:q2/3DUbIf6e5I5qxYYM+Vc+BNkLFktXK","tlshash":"58130a87f1a7b456a3e7805ae4370107a338184139098cadfa7c9dde2a3e5417663f7d","first_seen":"2026-01-06T10:31:31.669502Z","last_seen":"2026-01-15T19:35:13.632431Z","times_seen":253,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/pl5.gif","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/pl5.gif HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 667629\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":667629,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 360 x 360","md5":"439fd91c90e40c048e4f82010e49e88c","sha1":"fe6cf4bd0dcd84f9674e08b2170df032f33af09e","sha256":"41d4a3d7aef066617b6b5df0e4cf966229017f1829bddb7914f0485f8d8473d6","sha512":"da617e9a60bd43a326ecf7fe213eae024b203988b47e93e72433e70e79b1a56d833324dcb34bce055d96b8400c176b974c1fc637582a932792ce4d18868f8a08","ssdeep":"12288:G7TNfVvgGHYp33ZZAsoDFvhSaOZSX+ktqr57voxKBUFw2Wn+18ukPW74:G7xt4IYpMsoDF5U0X+kIV7y3mno374","tlshash":"bde41259672886c6dee7183c36294f215ec4102d20f7ef27623976c1469bb78bcec4a7","first_seen":"2026-01-07T04:17:18.832836Z","last_seen":"2026-01-07T04:17:18.832836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":612,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/fav.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:36.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/fav.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23348\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 269 x 372, 8-bit/color RGBA, non-interlaced","md5":"40520bf52bcc638a788123a2656b27fd","sha1":"dbd24b27730cea8c2ce6b99c9668642397275f6c","sha256":"1a8f92ec7445591f03db6694e9cc15554761bc71eab73ce44e3007efea584234","sha512":"b5fa3d6dcfe6506b59d062fdfb8e66c7bbf6bddb3d856910906b60e413442d2d584a2ff3031821bb3e9fa8dd67910c69fe037b0771d3c66771192ecc863812fe","ssdeep":"384:3YstloPeTBUSEMD7WsZb6ZGMbn1mOdWkzi0zfnbZmqPMg7XXYe/le4dPouU:oLiUFFh1xd7dZHE8XXYe/AgNU","tlshash":"caa2e14ea7e87de51c16321ca00ccabae2308e1fd745c887c122f5d2f6db6d866a9584","first_seen":"2026-01-07T04:17:18.834989Z","last_seen":"2026-01-07T04:17:18.834989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCBNB.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCBNB.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"2d7bcb1e6c2f721679a5f7b4408f3e49\"\r\nlast-modified: Fri, 12 Jan 2024 14:17:27 GMT\r\ncdn-cachedat: 08/09/2025 14:31:26\r\nx-amz-id-2: YWGZtVNNU8QawjSYXa7wgiBHwYj/e1mwlEUVysM0qBA5V+Gh95gZylTqlCSNPVDl4tiiY3z9UmhFOIXTn6n5iVUAdJCY9oElREY5FxUnSYg=\r\nx-amz-request-id: 3PVK0X6VS20KREG4\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: 2d7bcb1e6c2f721679a5f7b4408f3e49\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c7474dd65515e3c4a47450d6c18f00c7\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":914,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (914), with no line terminators","md5":"2d7bcb1e6c2f721679a5f7b4408f3e49","sha1":"a23b4ae42639ec5cabbf87440bc693a6fccb568c","sha256":"cce3fa1600b656dfe422f8b318ef6e2815bda2a3d4288e84ea93485d4a079a1d","sha512":"5daa92213d37c38665d99ca6878e83bd9e103ca2777f6812d8729dd3f8723e5b9fbb92182c1164882ec556e385343e238dbc7797b8084a73fa6f766c581f23a9","ssdeep":"","tlshash":"2511d0e6cba42e1cc986c31dee1d801ee22910cd714d12dcb5aae625a150acf3c04b18","first_seen":"2024-02-21T19:27:11Z","last_seen":"2026-08-06T04:21:25.899802Z","times_seen":1632,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":288,"dns":3,"connect":7,"send":0,"wait":2,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 07 Jan 2026 04:16:35 GMT\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nlast-modified: Wed, 07 Jan 2026 04:16:35 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13902,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"853eccff44085975762fdea016ce4b74","sha1":"7cba4075f80d92291788e452749a64c5b465947d","sha256":"eb12ff21a82882804eb6fe3e98c53097ee97fad39b05b4924814d8797cd99c48","sha512":"8654ce239eaf4f76c786cc7f195775119e4315e92b5d4b0b0be9c80dfac303931ab19c9adc66857ac189de559638349cc23116d11d6e761fdeeaa0d400a6ebbd","ssdeep":"192:yNiD+233JhoINPOz23KghxTNkBo23tLh+qNpct23oCh3NN2HK23zFhMkNTSv23Wb:OAPJR2zPBcvlK","tlshash":"2c528d92042f950067831dc223cf7f365ece10886086d5b96bfd1dca9cead7653a535e","first_seen":"2025-09-22T09:48:12.511428Z","last_seen":"2026-08-04T06:10:37.600172Z","times_seen":27,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":273,"dns":3,"connect":50,"send":0,"wait":25,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/12558.a5cbea53361f89efdc98.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/12558.a5cbea53361f89efdc98.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"6937bfa1-13ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 09 Dec 2025 06:20:17 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/09/2025 10:04:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2f5fc616dcfe62f563ea248b34fb9f81\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5066,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"babe5dba32ac0bdd044ed5d1c6132b35","sha1":"feb646fa66b967c88ea7b7654ae4108b26683a2e","sha256":"afe70fe69dc8482f3e6f1ee7272866ca4af48bc331370cf894d30d9f29fa069a","sha512":"62ea6ecc058bc5130460626fa5cbd17f9454b70a2bb1f2547baed9b0e75ba3ba9dfcf94bc8b04d0346ca8ae37402a450ea8c1a5d9c57690046fac0ae6ce887ad","ssdeep":"96:buvQHXY4UubdYDFKIX1ysh4RsiF7kCTsFOFEtzIdCsHLJyJJU6XbBAqQ6LUDCYb3:tHXYRuhYZKyynRJ7kCTELULJuU6XbBjC","tlshash":"d1a163e033de706863f508e268791486f72919043a0f85d8f3d4d4faad5794fa27383a","first_seen":"2025-12-09T19:49:20.883672Z","last_seen":"2026-01-30T10:36:29.390047Z","times_seen":1197,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/fonts/flaticon_finwisee77e.ttf?87ff5777ece29a60d6fb6f845dd613e5","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:35.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/fonts/flaticon_finwisee77e.ttf?87ff5777ece29a60d6fb6f845dd613e5 HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/assets/css/vendor/flaticon_finwise.css\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:35 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16492\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28272,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticon_finwiseRegularflaticon_finwiseflaticon_finwiseVersion 1.0flaticon_finwiseGenerated by s","md5":"2bee8e3912ba524d811779ebb74fbcd3","sha1":"aaabe5edece20967b98f4cfd0147b68196d4330d","sha256":"be956efe74614e80a5baf45fba5d6a0b19b6cfffd0b6b9cbe5db01ae65f04d77","sha512":"7f36b5e53b06312a05c68bb0a19402c9a98e61a5e7dfd3fd384b6f6ea62362dd6755a5acbdf3e9402b08564390320ca8bc18ce571d17c1b3122131a242be2ffc","ssdeep":"384:36lsq9ifDQuCsvK5y2hJKCzrJwrnmdbKsFEmc47E:/qEkL7KCzKCesFEDz","tlshash":"5bc26cbbb35b4ebfd3b7a5bb4d94422242a0b60012f33d836e8d952c95065c84ff065e","first_seen":"2025-08-06T05:48:03.393242Z","last_seen":"2026-07-27T13:32:19.519208Z","times_seen":19,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1766064608","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:41.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1766064608 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 04:16:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 338898\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69428756-52bd2\"\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-06T23:34:35+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1539379,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"429683434ebe5a56917c270fd4fff3d9","sha1":"1100b963d71a5ed5142a3f27fba72a332037cc26","sha256":"3fdd0cc3ccf0cbc7c076bbd91fdb1ad1438d013a0c5215cadda28f3926d8f959","sha512":"129a00414e4711ea8910d9029ac44c4c7999637537a506872582514f539ac9bcbef6a7370f9e4b8533d6ab5b1f94971d02522b1162797d46aa25522c7b7cd6e1","ssdeep":"24576:j/hLnS6Ulw3nfy8iEKMQZiyIf9CQ/E0zOVch1meapEuo2Mdomrt7ku:jJLl368iEKMpyGP/E0ueapEuo2Mdomrr","tlshash":"67254ac5b1c1f46503d355e6643b2009f23a285e7809b064fabcddcbea6659e6233f39","first_seen":"2025-12-18T13:47:04.087198Z","last_seen":"2026-01-28T05:35:47.405785Z","times_seen":629,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/app/app-02.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/app/app-02.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39864\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 394, 8-bit/color RGBA, non-interlaced","md5":"3711d9cfda34b524789d28a43918d1bf","sha1":"7adc192704f808e5a3d4a04cf7465a67c6e3cfa3","sha256":"1ae37542a0b546efb2637ae4bb70ab8bda544ef60bfcd670ba82bf2ff810dc57","sha512":"53ac70b5ae23082ef66a9c98d55bf36613f434a23030c85ec71a880beb0ce86e6495fab5a14422a4baa3114f605c70f8ab708852b89bca44b1ec61ce3170215f","ssdeep":"768:fDt8yfBQ3lubJOG6532GRP8I+7wxLBrMjmDe/t2wwwS9zR8teJVQhh0+0D:Z8yJWldTtREI2wnMjm6/t2+CR8teJehc","tlshash":"c903028439de2df3e465226f02df82f0f97b9307cd38851a7a95817d2154b1f492aa98","first_seen":"2025-08-06T05:48:03.430458Z","last_seen":"2026-07-27T13:32:19.640583Z","times_seen":6,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/plugins/meanmenu.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/plugins/meanmenu.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3200\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11264,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b1a78e15b45e0497c3299992222d138b","sha1":"a30da9f858a3ce2ab3edcf07706337d2ca32d9f5","sha256":"4594db563a574092ecd91c9f357af5a366bebf76ddb9d1f4e680d63eca02795b","sha512":"a4051d48db93666b1e84261b6f5c4503f9093e926ceefb8a8f3409647e004622796a8765cdc8f15bc133c636b0d8a16166aeaec908cc4e4106855880006eba11","ssdeep":"192:QIsVd+89x+N3UXr3/5gSvB93q2I6ktrquz8Ikb:QrVd+8iN3UXr51JGpu","tlshash":"ca3285e0f37c11ae95761464b02702fe34bf823af449aa167c79dd79309096912e6fe8","first_seen":"2023-03-08T02:15:23Z","last_seen":"2026-08-06T02:23:46.207424Z","times_seen":465,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/61688.d5bb59fbee8f0a8fdae0.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/61688.d5bb59fbee8f0a8fdae0.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"6940f959-6a6d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 16 Dec 2025 06:16:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/16/2025 10:18:05\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 36b86f23a89ee70a84dbe9cdb79e049c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":27245,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3063)","md5":"030a798e247d99e7d835966ca1f47ef2","sha1":"2498b5863f9a72ff0beac58ceb812bd7ff65e782","sha256":"9f9e95b5f0290933d37b778ff3643ee5de18c1da77b1006f3b6c2518755ea1b4","sha512":"c25134d2a7da85c6d93f9049ce45cd05f49b07e75e404d1616f2b2ece8a4de8cefa7b9245dce53f4880541aae720e5abf7f4a7cb0f9552fd22622b3de751d67d","ssdeep":"768:C+Rr91tLXZ9vMhmhDeCFVK72P0UpPJIJD8jspR2DLQW3yoY7j7YX6BsWmSElWg4I:tvM0hTCn2z3C/NZo2+/Vn/3","tlshash":"85c2db6b31e3257503e604eed43e3641a6351154b04740f0b5abdad929aec4e63b7dfc","first_seen":"2025-12-16T10:47:27.287556Z","last_seen":"2026-01-15T19:35:13.641638Z","times_seen":745,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/B4HAXlte4h","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:36.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/B4HAXlte4h HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 04:16:37 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 719\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Wed, 07 Jan 2026 06:16:37 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc58\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1429,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"eb1e4be9e1f9358e8de17afb6d09aae3","sha1":"d052e90bea2b0a50d44474f547c4d18f5df37a18","sha256":"d07c215b415352d62a7ef5ce216379bf0d2e090cdd5aff2d6ae485cd0dcee701","sha512":"ff24424487f69a967871cf8285eccc9448f2bdbc27a467696b0355d8e63ebd9112ad53e762caf9cc66a28776c13d8569db2b8ed5f47c9716f48a98d5d1aea520","ssdeep":"","tlshash":"be2114f24c4858374d81becb626bfe03253c86a6ee814f75d7949c2c11973d5131b64a","first_seen":"2026-01-07T04:17:18.848785Z","last_seen":"2026-01-07T04:17:18.848785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":355,"dns":37,"connect":61,"send":0,"wait":293,"receive":0,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:37.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Jan 2026 10:30:29 GMT\r\nexpires: Wed, 06 Jan 2027 10:30:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 63968\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-06T08:32:25.659442Z","times_seen":56598,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/90309.27ddfb358e9fdbf60438.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/90309.27ddfb358e9fdbf60438.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"694cdaee-2e36\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 25 Dec 2025 06:34:22 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/25/2025 11:56:37\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fce6052ab2bf62aadede4705105e1746\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11830,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"94e3eb79095b74cb9c84088715821726","sha1":"335dfe9041054df8533b2c9b50733a079a370ef0","sha256":"68b9556701c5818f48fbe70ff12d32c6b86cce2a04f6d4b489fa4503d0611382","sha512":"fdcf9d4d013ca5921fb8e44bb5b9ad86a278858421632e7c9772ae20810398bdde8fe528c4aee14352254a12b35cdaeba19c447925727068598dd211395c3c32","ssdeep":"192:WsIqc4ZAWunSxETu3v/KB2q3fxi9nulKzjUeqgVbHkDtHd:WLQ4nSxETu//3UxKNjUe3pHct9","tlshash":"9b32e8f6b2677117c3a09097d4b69043732c2590b8498c74ba702dee39d8c9af5beb74","first_seen":"2025-12-25T15:29:26.825584Z","last_seen":"2026-01-30T10:36:29.405973Z","times_seen":835,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/0a66b6c/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:42.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/0a66b6c/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 04:16:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 25391\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69428755-632f\"\r\nexpires: Sun, 28 Dec 2025 13:26:53 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-28T13:26:54+00:00\r\nx-node: m9-up-gc8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2663656fdbaed65d0bd1369033be00f8","sha1":"82de76cc3b444f6e51a15a70bf08dd3dbfaca506","sha256":"2236627a941a3b0104041db8bf5658394a87a6597106e3565f7ad4e296d2edb3","sha512":"d074ae221b098b3d037e0baa169942774dcdd263c9aef1123bac326dd6b91d964f37d43a5fce40a984be8950825bdb3274a9109bbda9034b99c459019e63a0de","ssdeep":"1536:KL5xTKw/y16y6hrhJDu/yd2g28S3pWyg6I6/V+ulR45US6IFYPQliJOYO3DN6+cc:85kPPrPgl","tlshash":"c5d3f966ead2993ce91e541ac985aa3ca63dd403cf230daff744e3d147c76e31276809","first_seen":"2025-12-18T13:47:04.082621Z","last_seen":"2026-01-28T05:35:47.400551Z","times_seen":634,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:37.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.2f3WBw8L4SI.L.W.O/am=AAQD/d=0/rs=AN8SPfrXXtxuFpMMBoYgp93jo68L3iC3ZQ/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Jan 2026 04:02:53 GMT\r\nexpires: Thu, 07 Jan 2027 04:02:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 824\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-06T08:32:25.680152Z","times_seen":74102,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/user/user-01.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/user/user-01.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 113660\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":113660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 690 x 690, 8-bit colormap, non-interlaced","md5":"58beedd09c13900c0d0e61a3c8ccce6b","sha1":"0abfac4824c83ebafdbf9cd22dabed3f157fe1f6","sha256":"649e30b7962ae441ad4f7ac391d7cbfd02f4919fb1329bddf2e56c0561946494","sha512":"053bec7f35af82eba8e078883f4a61223ca00716c3d40e2463bbba67f0ecc9921f9d691acef2791d7d2e947c720def7ee94c6ada136427b4efbffd310cdc50ce","ssdeep":"1536:04Mxuw+JJ+HdydLZtJJm+v14REQtGMnhuO1WhuzqGhwHKeEDwZgSHxpL61XZF6j2:0xuZvDDtJ6L9nwe+GOHnlZgSvAUx/lC","tlshash":"bbb31257cb399fbf04162c9a571879663d932ddf069a73f942a4f2b29347398fa2c100","first_seen":"2025-08-06T05:48:03.352096Z","last_seen":"2026-07-27T13:32:19.605597Z","times_seen":12,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":414,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/css/vendor/flaticon_finwise.css","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/css/vendor/flaticon_finwise.css HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 891\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"144ad63ac084d87eb474aab21b22e570","sha1":"a145fb4f0323d2cab25567d344d9b6f57117e3a2","sha256":"a94b64f417566e4e7b879432d189bf86428a22628a4ce9e968692717c30e6f4d","sha512":"25d0a38f8bab7eda01b9397607078acbf7b9d030dcb7fe912ce99675c1d4a829339b76f6d85513e2f5c25c117361043a7260a2b6b22a20c18ad8b276fa0ab475","ssdeep":"48:PUL2S6Re2GHla5BMpTEB76YFLv2F3nfGmF6yR44h/:PdGlhuHb2su64N","tlshash":"c4913ca8917f14805751d9d127af6650ef18b02e9cc4ac5df282bf9dfee1a10c3922cd","first_seen":"2025-05-05T00:39:50.081377Z","last_seen":"2026-07-27T07:20:00.627222Z","times_seen":19,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/23990.2487adf7cca8d6bc7b4a.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/23990.2487adf7cca8d6bc7b4a.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65ab-2da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:15 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:26:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 89f3556aa551ad212cd114f74e3a3953\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (730), with no line terminators","md5":"d829b77313e592f8d1913e78559754cd","sha1":"4bb78c4325498d327399604dd0dd90aa01fc6c87","sha256":"fdce8cb0a541548e40c8119d9c9bfcf3a9759dab795202f5302b4806a5938d50","sha512":"b1fa8c3f6815776f559376b98c708080898a95bd9128718fed3bb876db210241ae2be25002f53de0843ab5eb05c194a2f2f7f4a0b1000577797bf91ad7dbce5b","ssdeep":"","tlshash":"eb0128dea3465539e633dd73035783cb3004f6a28d389919fa44e92544cf7f04424d0e","first_seen":"2025-07-09T16:57:52.264591Z","last_seen":"2026-08-06T06:09:10.702763Z","times_seen":11111,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCBTC.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCBTC.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"107060b925841745f310697bd9f1f83d\"\r\nlast-modified: Wed, 08 Sep 2021 09:03:52 GMT\r\ncdn-cachedat: 08/09/2025 14:29:27\r\nx-amz-id-2: I0nqWBZWF+dQZ/ejYJ5Hx7OJzBANKb0X8Bf6w5/GlQFBkyvi6k7JEuqqbueunxVzmr0wMfOK3Lc=\r\nx-amz-request-id: EKBXJ651Y9CNHERY\r\nx-amz-meta-hash: 107060b925841745f310697bd9f1f83d\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ea0de6ce52d2e596c5367dea3c64e94a\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (801), with no line terminators","md5":"107060b925841745f310697bd9f1f83d","sha1":"40a2e01da20c164a3c3f774a72f3feadf17cafa2","sha256":"4dfca512e957e14f05da07751a96061cf4bfd5df438504f65287fa0a8c3cadb6","sha512":"fb7b987074d4701281c49fee08b1d44f2be2b3aa9ecffd0a88a6cc682aac06a6cd823598c8c8ba5ad43f8f1430a73c814148dea60d5740162cc41af7da324c76","ssdeep":"","tlshash":"24011ec55310f6046ec7c09dbf74a9e4110f60ae14a6c7dcf2c89f0835aae8ba614d48","first_seen":"2023-04-21T01:30:48Z","last_seen":"2026-08-06T06:09:10.707551Z","times_seen":6401,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":264,"dns":8,"connect":1,"send":0,"wait":31,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/jquery-3.6.0.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/vendor/jquery-3.6.0.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30267\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-06T08:47:32.286749Z","times_seen":496536,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/14334.7c9f729c81085c34deca.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/14334.7c9f729c81085c34deca.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"695caa6b-50ed\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 06 Jan 2026 06:23:39 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/06/2026 10:15:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: de650575d9da480638d309546926b098\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20717,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3062)","md5":"03649cd177d587a17c0d764dcde3b1f9","sha1":"ad51338a0455b6cbadece4e862e52f371b3a0006","sha256":"edeb5ad25d0118fff62cf38407bbcd7cab84ca6fd218ceafc6259781bf0692e9","sha512":"98fce26a98219ed51d34a928d29b8ec69cc2cf3559e33d00eb4c4f6dab0f7c4c57861a2fe3be381f70a24beda8791f07b99b6eda6d402b399333ade77b5b25ab","ssdeep":"384:ZTLa1noFlC+ADlWeTduyItUTIeacQZPZ8HYrUEjBEqCLzSrWmv8aEONoK+yu1iqT:JKonC+6WewyItUEeacQZPZEYrUk6qCLJ","tlshash":"3f92d8da32c270b502a605db443ea240e6350994b549c4b0b978acd72a1ddddb6f7fbc","first_seen":"2026-01-06T10:31:31.731654Z","last_seen":"2026-01-15T19:35:13.636266Z","times_seen":182,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/logo/logo.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/logo/logo.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 42195\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1007 x 403, 8-bit/color RGBA, non-interlaced","md5":"f92a314ddee057217b9775124ff241e8","sha1":"e5679765d3660ba436ecafa93315e9fa9357ca98","sha256":"1cdb1e3e00a0cef8525667b940a41342810356d9ef65cb051fd8ec747fad596c","sha512":"7de1ed3392f69c4747bdc2d0391931da9aa255dca9cff9477780ba1f3710e500b6474f7e67fba32ac6ca071a372653736dd3a42755b7e16e4e446d2393638464","ssdeep":"768:E4fyonvPMMezC2BSoct6HK5paYSbwF09rkGU6rJS65FAEPEffybLViNXB:EInMMeu2BRcuKqYSbP9U6AYFvPq6b0XB","tlshash":"3913f1fe986a21c8fb14b1375e312ec896fe948cd629470d962b1338ab8d405a35f5d8","first_seen":"2026-01-07T04:17:18.861065Z","last_seen":"2026-01-07T04:17:18.861065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/magnific-popup.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/vendor/magnific-popup.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7035\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20210,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20081)","md5":"fcabf2e2d85324d09429dde6484e4105","sha1":"0977652d7f946a8c532d535c75c0e19fdc5c3d45","sha256":"084a17681a83386f6c551844a31519482b905b512019c767e162e65e0b52ae85","sha512":"474eef11a74cf81f0af78e54ab1a39ae05993f32717ed7689a6afd94a14fc5d665233403332fb6559ba11ca48a40d0e9a1f76c278c2a1e1b69bceb3154e19917","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/j6l8aZwHwztLCpmst:lPBIt8I5h571qkOLCMst","tlshash":"a7921894f2b2b21383a735b8686f70093a729952ed06c855b55d94d87efcec89027f3c","first_seen":"2023-03-10T14:49:25Z","last_seen":"2026-08-05T06:07:05.102008Z","times_seen":171,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":415,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/0a66b6c/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:42.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/0a66b6c/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 04:16:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3393\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69428756-d41\"\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-06T23:25:46+00:00\r\nx-node: m9-up-gc7\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10545,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10518), with no line terminators","md5":"897fed932ad2b76e84601658b3d8a48a","sha1":"41f7753eb9a4b80b44dff68307f01033505510c3","sha256":"9c49a60ebb03f3afd92d644fbe72263f6f94129b049c5b62805f53cfc33a9411","sha512":"10e6724fb93d4b1555cf42028d21e7c7aa0f076a80fb0a3946e65d146f926cd51eb459dc9e3b2d20204a0e4788ce4cdc6f4a1d712d326f242059a08ebbe3332d","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLei1JK:C7H7ObdFkOIphZ8wjFCifK","tlshash":"1522d71ee7017f360fa623c3744f7b53b6a480d592646cb5d88c826953b9bcab21778c","first_seen":"2025-12-18T13:47:04.025917Z","last_seen":"2026-01-27T20:22:23.176416Z","times_seen":447,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:43.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 04:16:43 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-1396\"\r\nexpires: Mon, 26 Jan 2026 23:25:03 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-27T23:25:03+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-05T18:49:57.383379Z","times_seen":16706,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/js/vendor/bootstrap.bundle.min.js","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/js/vendor/bootstrap.bundle.min.js HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22440\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"b7ef46c92e06742f9f2eba8bc943f81d","sha1":"bf4ea1f0e399d05d307992f247d9376f8aa1eef5","sha256":"0d739c3c2b3e17d073a65f1381e8467fd731b6375a3e9e7bc494846df5fb3262","sha512":"e5aa9131d8cf3997ae12f8731fca7d70ed92064450b3bb0800552e023ff58c367bad2aaa09f871ac4217fb03429bf45d07c8183857ae647bde30d15233c0501f","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kE:b4Fj8GPwRM3CiI9BtP","tlshash":"7f73c6593244b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc867277f7c","first_seen":"2023-05-25T14:28:35Z","last_seen":"2026-08-06T00:46:24.703353Z","times_seen":2031,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/83436.72594d7096e07bd415b3.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/83436.72594d7096e07bd415b3.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65ab-10d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:15 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:26:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 17fd9274e45aad8ee5821a9efe552c6b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4312), with no line terminators","md5":"9ae4a37bb217a65a1b3d512a8d15bef5","sha1":"444990ed501ddeea12b0961acd4d59e7e0947921","sha256":"38a658b928f18a0c20bf5c07c041594dc038174ba57f00f87b219dd1cb680dbb","sha512":"66f585d480441c3a6488c39b5b3b32b689823f5318e4cd400e25a81bb012ce68f4a0b422abc84cd1a041076b1c8af43b5f502c4e5c7c5721280447d6a57cd13c","ssdeep":"48:DAGIPAGIOfKI5wsV5ksVDKX6/0IMIB5CUY3w0JMeFDWIm+RhX+vmRA0ruu5WNw5k:Dkf5F5J+XcJfTQRKgBRhX+uRA2emmZ","tlshash":"ca9167bf067c45943922470157a29b247178d3fb652248bbc37539aa4fd1eacec32f28","first_seen":"2025-07-09T16:57:52.336225Z","last_seen":"2026-06-08T05:21:46.6448Z","times_seen":3806,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/78006.bb4e309d13e8ea654e19.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/78006.bb4e309d13e8ea654e19.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"693a65ac-234b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Dec 2025 06:33:16 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 12/11/2025 10:26:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 04629e7d82ed9ca8af88e68afebe3425\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9035,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9035), with no line terminators","md5":"f86a129e0329247ce171888350f1f641","sha1":"d766898efc11f4e3d3298fd69d0cd7a869dc0f14","sha256":"79d0ea43e260ab8f89cf37e929f56abd215381e3b1fff83d5915fe5bf6ceea9a","sha512":"e832a70f6c5bfe1f314a04c4819d6bc06c0d53d8de66f9c948e0aad0931006fc4eb78af29adf8cd16700e16a7f2e5a2a28c25c40f08d0a04f2d0a600aa9a9961","ssdeep":"96:DUPVUUWuBNfNRNTNnNzf+WEAL0UWW+xjGoybll0y2mFu90PmHp+ykMIBm:2B5LZ5Bf+WEvWiqoUMy2CnPmHp+ykx8","tlshash":"c512bf5bf5e30ba62f63a026992d7b48616773056887b1f5fe42f3e045caed206036cc","first_seen":"2025-10-14T13:25:50.309864Z","last_seen":"2026-03-24T09:56:39.917963Z","times_seen":5361,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/runtime-embed_ticker_tape_widget.50da50004d745b8cb181.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/runtime-embed_ticker_tape_widget.50da50004d745b8cb181.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"695caa63-2706\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 06 Jan 2026 06:23:31 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/06/2026 10:15:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9e471823c29acd0264122a11dad8029a\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9990,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3053)","md5":"dd1a1aeff365f9e1b96ac5c01a1f96e4","sha1":"1bc38bd253f599e9a4695084a8387a4a91e7491d","sha256":"7c01f7609b7d86295ef0e85436cf971791f909bb7965a39fb647af80e3461de3","sha512":"f7bd9d51d5f46d30d12e5cda943602d53518cf70b2821d104b9d0a6f92c069b08472236f1811edac5194521bb1420d20f9dc8eb338ca2131446065544ddb4e11","ssdeep":"192:PaDxfdpJcRgj9urH3qGwR0vM8qykfESWO3jXa27vkv15vXW13kZJdD:PaDj/cRgdYM8zkv5jXa27vkvzo3CJ5","tlshash":"e0220aed120c98b525f9045298bda462f20832bbae0fe4a05357fcfcac1dee47662d55","first_seen":"2026-01-06T10:31:31.632063Z","last_seen":"2026-01-08T05:15:55.558451Z","times_seen":27,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/css/plugins/slick.css","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/css/plugins/slick.css HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 475\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1730,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9366819618bbb4e786bc2f1110efdcd7","sha1":"5694ff1a3246e6b43076028fff343fac9cfe05be","sha256":"129e1586eddfbada9f38f41a0522bf1d0a7ee5292320d908e28ed3563c7727c8","sha512":"80a02271cb235889f9407703d97ca7703c6014d9a2cc5d92eb7ab880dd1745209701a42aac68cc20a4124dfc79aa19af07cd79843a8ded174eef2ca919ddec6e","ssdeep":"","tlshash":"8e314a4846b38946841681c91fd7c65d2beff0130c29e098bacc5305cfcebe8a9c26b2","first_seen":"2025-05-05T00:39:50.104995Z","last_seen":"2026-07-27T13:32:19.522549Z","times_seen":36,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/banner/banner-06.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/banner/banner-06.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 396540\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":396540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 591 x 713, 8-bit/color RGBA, non-interlaced","md5":"533096f43f57855376100b5ed14023be","sha1":"4343e3cbd3815a45265b1ad992905ba37199d398","sha256":"7a58b093d3627370d6d341f3989a049d4c65cc4c2095c6b9147e174666c08665","sha512":"6bc9fba15d427eaed1242e9012bdade1bb7d3154f8ed8507baae3b72d79e60e02c773beb72fed8f2ff6be8d23f18872a659775d7e1541449848ba2f4e3fc717e","ssdeep":"6144:2WxKQ0DgGzGmO88z4//7BeIuMmG+LJoGn46Ibw3c+WbNMwn91O+4iY8nRcwUNDWO:2Wx3Egip7BnuZxo846GH7tY8nRqDjN","tlshash":"df84233328843a5d8dd387964ad0af6b5e64311b435f1cb9382c375b16bbc37e29126b","first_seen":"2025-08-06T05:48:03.337841Z","last_seen":"2026-07-27T13:32:19.63983Z","times_seen":14,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79552,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2082)","md5":"0735dd4cca36c6f764ba1606c8be18bd","sha1":"ac88d83f78678aec793e4f055a82d519f2c1f8ed","sha256":"5af5126bbe1469578190d7ca949527a9f2727676b0bac94e87af5d24bfa7f893","sha512":"fa0b5cb2761e8b1bd102d5fe95a5ef3dc4620a76b17684340861feeb1049668d1ca94813242aba945aad4b31d634cbe193da8b6e66928ab7df400f2cee38cc98","ssdeep":"1536:XNHiUZ8ZXbmgU1l4C0KGYbMfhyKucbR7ChiawNWdg:XG7C0KGJehiCg","tlshash":"c073b7ccb6a675618263f5b5513f000fb27b599af8084cadb288d8e1adb494c413bf7d","first_seen":"2026-01-07T04:17:18.872594Z","last_seen":"2026-01-07T04:17:30.385338Z","times_seen":2,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":253,"dns":24,"connect":23,"send":0,"wait":58,"receive":0,"ssl":255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/62204.435a90aa1ac8f816fe50.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:35.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:94:3B:A9:92:17:BF:F0:73:B5:E1:84:CA:FC:07:DA:06:39:0B:C5","sha256":"95:B9:F4:62:BC:B8:D9:16:3F:4F:FD:D8:6D:C0:05:10:7C:B7:11:78:99:AD:7D:28:E0:6D:06:6A:37:3E:D8:F9"}}},"request":{"raw":"GET /static/bundles/embed/62204.435a90aa1ac8f816fe50.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"695caa62-db5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 06 Jan 2026 06:23:30 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/06/2026 10:15:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 848b9e6401f7ec3c219cae52c976adb4\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":56157,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9921)","md5":"5f2942cdae2bc52f923260ea44026008","sha1":"57c68c6c09bd03c08f5b4f6382fe9067b8ef9aeb","sha256":"29d68d4cdaa22576e053eec7ca17ebf2ec8de0eed61e6beb95ed25626e8052b8","sha512":"18ded9dc11e384ea6db0db10e1901756a406ee46f0fc32a99e89b7775eb3d64cd937df4008c9d8054ce53512864b0e3daa9ad8cc17950ce4a58a707d3450b6f0","ssdeep":"1536:RSbkYZQ27JJP8utD0fSQRRFGzANRrlZMJ+a3v5c1W0U9z51qKrDGV5jFtFjzoN9b:RSbkYZQ27PaaQxz/Ml84","tlshash":"6c43c43df1909413b1eb80ff4ab5e1179929a482b6665bedb538c9cd124dc8b3123f39","first_seen":"2026-01-06T10:31:31.624964Z","last_seen":"2026-01-15T19:35:13.655818Z","times_seen":205,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/microsoft.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /microsoft.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"074d127e2f9fd8c2e79c01a5f002979c\"\r\nlast-modified: Wed, 08 Sep 2021 09:00:12 GMT\r\ncdn-cachedat: 08/09/2025 14:29:50\r\nx-amz-id-2: gLbL8NnLweyRNjktDsEQh5lxzLez5jlgx/EW3/0s3DdMZjJYx2/ExILaP65lwAHybmmyzhxMEQ4=\r\nx-amz-request-id: 0V3YHKVFMVFVMDS3\r\nx-amz-meta-hash: 074d127e2f9fd8c2e79c01a5f002979c\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ac49060272559b676003a8d63bcca5ca\r\ncdn-cache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":304,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (304), with no line terminators","md5":"074d127e2f9fd8c2e79c01a5f002979c","sha1":"a180afde05902cdc100a83180fa387201f992401","sha256":"6bf4fad87b4483f83117912558a5b8daa68a01d9608f11d5ca9ca16053149e85","sha512":"9bc6f57b0d51ec2d3361c0919755b834ccb66356942c57ec97c6548d4269d80a70c5094129d60f459b03e493d872d3b72ffb85ea746d123e931a3a2b5cb10ee2","ssdeep":"","tlshash":"f7e0c2e9723db06d990b8bf8279c64d220c230a6608d09f8b04c2121721dfdfbc86e88","first_seen":"2023-05-18T16:17:48Z","last_seen":"2026-08-04T14:43:53.439425Z","times_seen":525,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":260,"dns":6,"connect":7,"send":0,"wait":128,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/img/pl7.gif","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /img/pl7.gif HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 418418\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":418418,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 360 x 360","md5":"40b7f263cb4111e0cda11635b6f17105","sha1":"cdfe30bd7f7b094489dfe56e78a7e691456b5bce","sha256":"3ab2e567bac0d8fe129395917383f13bd66d65b63ba7bbe415e34b053bb667f0","sha512":"e5ebab4a362b32ea4374028d40902d37c9a961daec19a202ceebee3dd3a66fbc97d4c88df1746965c8a7582506067d0d5d536a5837a552ba6a31e61e2d1d5a66","ssdeep":"6144:wABoshfoAg33aFOniULRdHo4xhbJK0JjZr2ch8b7RlU/HnAkAe40isFu/AsINhV:vBoshfYaInvjJh8b7RIHAYn2Y9Nn","tlshash":"9994121a37bc8941ff92053c39242b699d44606c54b2ff176390ba53538bbac6eed07b","first_seen":"2026-01-07T04:17:18.876229Z","last_seen":"2026-01-07T04:17:18.876229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bluemeginvests.getfar-express.com/assets/imgs/support/support-thumb.png","fqdn":"www.bluemeginvests.getfar-express.com","domain":"getfar-express.com","tld":"com"},"ip":{"addr":"89.43.116.108","port":443,"asn":58222,"as":"ServerBase AG","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:34.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bluemeginvests.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 04:42:08 GMT","end":"Mon, 06 Apr 2026 04:42:07 GMT"},"fingerprint":{"sha1":"95:95:79:77:88:BC:15:B4:74:74:5D:B7:0B:EE:34:FB:22:16:29:CE","sha256":"68:3B:01:A1:77:0F:F2:B1:D0:7B:82:58:D9:3D:CE:8C:F8:3C:4E:86:58:5D:17:91:A1:73:A7:3D:1C:74:F0:52"}}},"request":{"raw":"GET /assets/imgs/support/support-thumb.png HTTP/1.1\r\nHost: www.bluemeginvests.getfar-express.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nCookie: PHPSESSID=6355ca31c2ec9181c6bec0c589f6c978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 04:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Aug 2024 01:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98637\r\ndate: Wed, 07 Jan 2026 04:16:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 703 x 565, 8-bit/color RGBA, non-interlaced","md5":"dbfd76f19daf2537bb100afc82bf1d23","sha1":"1946c8d50aea0b8d79a475460703615c8e7da2bf","sha256":"465f9e67854957c858ac14ca38fed65a9c1a200cb090c08387ebd81ec185b2c9","sha512":"c46ce8fed8aa8cef2096306215707cbdf39bcca1c613183585cc7d8dd6105a704ef486967aa43d0c626bbee298f85866e4f4bc172a9a42a370224db839d34988","ssdeep":"3072:r11HYwMJeYvSMu7N9OhphQH3g5pmfbhm8tWCQkVvi:xBYwGu38hQHw50fbhm8zQkdi","tlshash":"c8a3125100e33c6c68aef3b9c352557128ab32134a648a91dbd9d1c0b57d26eccb3af6","first_seen":"2025-08-06T05:48:03.43485Z","last_seen":"2026-07-27T14:36:17.544193Z","times_seen":14,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.bluemeginvests.getfar-express.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:35.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bluemeginvests.getfar-express.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:59:18 GMT\r\nexpires: Sun, 03 Jan 2027 10:59:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 321438\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T08:49:52.487008Z","times_seen":25829,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":335,"dns":0,"connect":18,"send":0,"wait":23,"receive":5,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260105","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bluemeginvests.getfar-express.com/","date":"2026-01-07T04:16:38.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260105 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bluemeginvests.getfar-express.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 07 Jan 2026 04:16:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'report-sample' 'nonce-3kT0oGJqmD9VPodIoHBvBg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw1ZBiEOLhWL7n-yk2gR0rl7xkUlJKyi-MLylKzCvOSSxJLU4tKkstijcyMDIzMDQw1TOwiC8wAAAtfBMO\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=30.SE=FHrYZuxS7nj3ijwvsQ5D3dULBXkCrLwkB0L5bf1zK1uemnrLcyRXWrIcprhif2v9rPOTr27TyjagJ0lAkR9YfJk5tSxIWAm2NAk4vS9sSRKEetfUYhkuETAyBLtxtp8ZxeqgjCBqe-DiPs8BPx-SD2omY_t6hVZ6Ns32ALiT2CGL_lQ5080Aj-kiynjAtp35mz49JjKEvPklhXwKwUWAuOnZ7TGFBaaMyZSKitY629X-0NCrFI88nw; expires=Sat, 06-Feb-2027 20:34:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:49:01.761015Z","times_seen":17739839,"resource_available":true,"data":null}},"time_used":1534,"timings":{"blocked":1492,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/meta-platforms.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3ABNBUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22BINANCE%3AXRPUSDT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AAAPL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ATSLA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMETA%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3AMSFT%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NASDAQ%3ANDX%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22CRYPTOCAP%3ATOTAL%22%7D%2C%7B%22description%22%3A%22%22%2C%22proName%22%3A%22NYMEX%3ACL1!%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22compact%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A72%2C%22utm_source%22%3A%22localhost%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22localhost%3A8888%2Ftradebasepro%2Fhome.php%22%7D","date":"2026-01-07T04:16:36.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /meta-platforms.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 04:16:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"cafd1d7d717ad67e5dbe45b88fa3d47b\"\r\nlast-modified: Fri, 05 Nov 2021 11:07:13 GMT\r\ncdn-cachedat: 08/14/2025 09:11:05\r\nx-amz-id-2: WPkWtBXKZY62GCnPfF0a8Jw2IEXUpl90FmlafPgSJzR9gXLp5/iEtuLnm4k6lW2KExAl5D0xYNI=\r\nx-amz-request-id: Q6ERKWT02JA2HCVA\r\nx-amz-meta-hash: cafd1d7d717ad67e5dbe45b88fa3d47b\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 40807135cb46562b92dd343d28517b25\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":786,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (786), with no line terminators","md5":"cafd1d7d717ad67e5dbe45b88fa3d47b","sha1":"0e858c59cd7a560d09b0792bf34621446fc4cf4b","sha256":"293eff2aa7a4048146447446eff25ae9776419aa39fd30e528c8847aa7b23643","sha512":"f4031363b894848c72e3e145d59d51a2f8248cdac5af9f0e3ca22750a433cb3752bab7e8eab684b6a940399b736f9bcf0936a18d723d24c14e0b521ab9c322b3","ssdeep":"","tlshash":"660125e21f64e14595939be1ff354048025ee4f726cc0fc5b1938d9ab4476c7dd02e00","first_seen":"2023-05-26T07:40:26Z","last_seen":"2026-07-30T20:59:43.505884Z","times_seen":264,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}