{"report_id":"24987c30-4a70-4535-bad1-3f051b92668f","version":6,"status":"done","tags":[],"date":"2026-03-12T15:15:27Z","url":{"schema":"http","addr":"cab.800-ltd.com","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cab.800-ltd.com/","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"title":"800PtyLtd","dom":{"size":373671,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48727)","md5":"80e739886b4e1843f3f91d1541a59263","sha1":"5321c535a7839f7163c9670e03139f5d520b9b84","sha256":"d111a7df0e33d644216d86b5e2d32221d14b767decb5156c46d45dcca91909cc","sha512":"80549e57edcd1e52a1c0d31f460b480c2a1c4c3dc4f34f0d07467bc0c458904bce8163c55adc15481e538da85b3e25809facc94f4f348081938b1f661dec31ca","ssdeep":"6144:vHIc2kEWFnvT6R6ZH6VK5J29FYrIt01o3w0hkjILitHXwIgw2Y3AdrxWi6BMVy:gc2kEWFnvT6R6ZaVK5t","tlshash":"fe84a93855ed0233417b08d4b276530a75e2975ffd8b0960abbcaf980fc6ccad88565e","dom_hash":"domhashe63d4d8e2b75cadef808bf03743e1bcd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cab.800-ltd.com","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T15:15:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"p-cdn.in","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-18","domain_rank":1896086,"first_seen":"2025-01-28T04:06:35.642543Z","last_seen":"2026-03-11T04:52:22.42647Z","alert_count":0,"request_count":7,"received_data":421276,"sent_data":3213,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.tradays.com","ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"domain_registered":"2016-03-29","domain_rank":0,"first_seen":"2019-04-23T06:28:14Z","last_seen":"2026-03-11T04:52:21.484195Z","alert_count":0,"request_count":8,"received_data":312747,"sent_data":7031,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}]},{"fqdn":"socket.800-ltd.com","ip":{"addr":"104.21.71.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-02","domain_rank":0,"first_seen":"2026-02-11T04:36:56.506241Z","last_seen":"2026-03-11T04:52:43.29421Z","alert_count":0,"request_count":1,"received_data":812,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p-cdn.eu","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2797932,"first_seen":"2023-04-25T08:10:51Z","last_seen":"2026-03-11T04:52:22.084649Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cab.800-ltd.com","ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-02","domain_rank":0,"first_seen":"2026-02-11T04:36:56.502217Z","last_seen":"2026-03-11T04:52:43.219526Z","alert_count":16,"request_count":16,"received_data":8093252,"sent_data":7472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":4,"received_data":31133,"sent_data":1891,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.204.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":5,"received_data":576564,"sent_data":2840,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p-cdn.link","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-18","domain_rank":2989695,"first_seen":"2025-05-28T00:41:48.509993Z","last_seen":"2026-03-11T04:52:22.64101Z","alert_count":0,"request_count":1,"received_data":1092,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc614b6fa5f90c56a4aae4a3ae1187f4","sha1":"ddd5e59e4a58e59cac1678149f5e05fe9d3f5be1","sha256":"485ecc755c0237f0efaebbbb6bc52f122e4faccc7a5fe819773170d524aaffe2","sha512":"1db33136914902feca8bf0fb0044016fe0d747f6dd347fd54255f97dacd310f031d74befdf915151341fa081cc3487ddd5797972dd63e3cfb6fe00522d64b506","ssdeep":"","tlshash":"d7f09088466f4546d8a2e2595e7b9742592488032858d0ca3d4c82cc9fecc3c836cdeb","size":523,"data":"","first_seen":"2023-05-04T00:52:21Z","last_seen":"2026-06-02T22:25:51.018296Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":true,"md5":"535f6dd6b01a59f6ab3093259a547df9","sha1":"e673b29567700d24e93ca4f0bcc362996c328fff","sha256":"ecde5adc32dba434088ece3a89173d2b6912a20f32eb3c0c0eeb81c4db5788f3","sha512":"08de7790b25d9f9a09ee72ba7d1338580507c3209e774b47446f13df78f1da107b81cf7c4595b2f0cb4ac4282b1cb20c1ea0eed9c6b8e0a7529d9a476639b5b1","ssdeep":"3072:V29FYrIStE01o3w0hkjILitHXwIgw2Y3AdhFxWi6BMgnoF:V29FYrIt01o3w0hkjILitHXwIgw2Y3Ad","tlshash":"08e37c585ade0237947509b873778141a4e16b69bac90c68cca8df5c6fcbcdf40c6ace","size":145480,"data":"","first_seen":"2026-03-12T15:05:39.708326Z","last_seen":"2026-03-12T15:32:37.582573Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/fz/core.js","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":false,"md5":"375322f8d50cea75c21388c4f0ba9e4c","sha1":"1ed0baa18c9c9b2db118f8308c7f2a7fbe7856c1","sha256":"981c9b6d90b87022f9969e93ac342a73b486070dcff595f59d4bc80541fd0c2d","sha512":"24007d88185c2d9432179cbd44371062467aefb76b58dc21796b81e47d7c23469b544ad11e04f6f1319bf48b62c0e1ad8a191c297f000fb5dc1097687796cd15","ssdeep":"768:85z3e+0SHAmP8WW6uRzFtBNYnaH8/H/MeQUfxh/ToO2NRqIBc9WAVFXh33iN+s6M:85yrSHAmxW6uRR2nac/H/cNRh05oX","tlshash":"0cf22aa97255343553bb107d105f2206f33a6f626d0b8590c126ec943db8d6be37beac","size":35767,"data":"","first_seen":"2024-12-22T16:58:23.312331Z","last_seen":"2026-03-29T04:41:52.9869Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/config.js","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"813521fbab5dc9da1906641eec8485fa","sha1":"fa5cb07041c8675bce63a97337de2e3526f40cc3","sha256":"80e02bcaf36aae8600a73c03b0dc20adc6ef4a793c03982b007e7e9a76ce6f69","sha512":"20d2a9773effe7d837f7507ff1cc2e4385266202a2256da731d6eefac88c1797b9f4c1e03ac774cfe7dad37f8bd188467cd87d83b8ce3621309aa6e6c2139b40","ssdeep":"","tlshash":"713164171f29fc7ac2036cce57b41e3b608eb66d065b2410905ce648ef9b471d57318c","size":1495,"data":"","first_seen":"2026-02-11T04:37:05.883027Z","last_seen":"2026-03-12T15:39:33.538858Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/js/app.c7e18bc4.js","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58aeecd96a5de2c823c4cb50108e42ae","sha1":"c8553b6027160ced7be0b3d7cfbdbe368ad87491","sha256":"70951fc4f4f3cbb266e4b6eb47f9df2c07b56c737b3ab245f43683079532f769","sha512":"28f8f8ac80ff7fda568697f48aaec02d333d332b4f018acb6293d513af148ca91365c13e1c15562decbc575d671728218caf26e2c614da093d6e96a100c11031","ssdeep":"12288:dEBmDuBI84PFlzBPOCZ2hy7wLfVB7zHfitZ6o3QyBNHS0U/rCbdzixCWWPiYkieQ:dEBpgh7oT3f8iNO","tlshash":"84459e28919f57fd5e65930ab4923b0fb4b40cfae093c136566e942d32e3c8452ae77c","size":1196638,"data":"","first_seen":"2026-03-11T04:52:27.22909Z","last_seen":"2026-03-12T15:46:18.145708Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/js/chunk-vendors.9b4f0ac7.js","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ca191a66900f08d680f349d728b4404","sha1":"f2f7a5c1c109a5480f1e0473d7da70f50b67b0b8","sha256":"3e9d0e1af62c3ad5de956ca0db6724bd073e5decf89b29c96b77ad2665bb47be","sha512":"81d2f25a7fce3be737ff1f73b8535f4cacb609c7cf7cb0286a728b2de384c8cabbce7496608a1a8881b6467c593a541e75d082930c0ca0d2f1bc7ad120c5a358","ssdeep":"24576:QbKdbQnhQVllb0HcFiFGeHuZrJquDU2L4ENn+:QbKdbQnhyllb0HcFiFGeHWrJquDU84K+","tlshash":"8575e988f2647022479a35e4442f150ff236b92d644b40acf768d4fa7cb9989763bf39","size":1629018,"data":"","first_seen":"2025-11-12T03:40:16.29153Z","last_seen":"2026-03-25T13:11:24.325107Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":true,"md5":"b71966bbc31c2ff8d03815636b0209ac","sha1":"20ed907c3d2fd697d69c8d39c0c5a66965eea5ff","sha256":"04b16b5764dfdf77632aa405cb626ca722c7a641374646e5df1522d96261aead","sha512":"3829a01604890d6fd1c4618ed61212a5ac0d3ca2d60971a21730227de0f973b94b3e8b3b81b1e37f18f47d6b1461a0b9acfe2c91adcd4af6fe5d92bcafbbe5ef","ssdeep":"","tlshash":"ebf0ab9e24e88c9696bb61553b7346083562019a244bee31bf4ecdcc6f3cc3a4049e9c","size":458,"data":"","first_seen":"2026-03-01T11:52:36.445922Z","last_seen":"2026-06-02T22:25:51.024024Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/js/widgets/calendar/calendar.2c3c973cdaa85be0afda4775b0b51d9c.js","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9020a37b447e104db3b7100f31edc28","sha1":"e3e8a03f186f0dbefd7b7a457b59c17f92540b7d","sha256":"60b852f8d9657ede2e67dd9656d77175102b4568e00957fa61833fe97fa370e1","sha512":"dcecd89ea4518ca9882091c256d0abefcc4afa291f189b827e15e6b1339883936dde43fcafb7ebef30eaf9fed55f86eb4913fe2a89a2f1bd4a44ede0bd8a6bdf","ssdeep":"768:sBmrS1dzfATL4KlnIuT66mmunXtcaYtK/cxbT:s5LTmL48IODmmkYIA","tlshash":"4f03a3853985263147e790b0d42f120261a34756ac9f4c68af2dffc059f894ba25effe","size":38906,"data":"","first_seen":"2026-03-12T15:05:39.702322Z","last_seen":"2026-06-02T22:25:51.005229Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cab.800-ltd.com/css/app.3da0d8c6.css","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /css/app.3da0d8c6.css HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brkubxW9yAPOphKUnj%2BHloMRF9EqXIjqXSkv4DZHGS%2BGJIIhyJuWrahabf6mG3obTQL5pgEKYmXkR0TcmpnFUcol%2FOJ9HflzIJKYVqCAKQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"69aee271-1338d\"\r\ncf-ray: 9db3c091ca7537c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78733,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"39c53811bc3fa0d83eef15fd8323ccb0","sha1":"90e4697a2dc3db3cbb7433aacca8868865161b8e","sha256":"099bb46872aeecbc35108edb5345dfc2dee44a717337c61cab58dee99374479f","sha512":"9f4290f56db5cd448c85e148cf927612264a9652a1df9de0a3c344d66b39157e88535c86041f6d55e9ce8b56d1e141e4c77487ac3bcc371f15806bbefb86f05c","ssdeep":"768:9rsvDWrHqf2WI/AWWNohtrsgVQGskmsW6oWoWZfE97LYDjVIeQQQWaFVr/46gAc1:9rsC1Ac0I8fQN1","tlshash":"bc737a114591303cf977da32b4a48689323b9107ae329e3c669b799db3a1de8dc337d1","first_seen":"2026-03-11T04:52:27.201705Z","last_seen":"2026-03-21T03:58:46.729107Z","times_seen":174,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/800ltd/image/new-design/certificates/master-card.svg","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /800ltd/image/new-design/certificates/master-card.svg HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 15:00:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dV6mVb%2FYlKuJYY%2B4pve0dSQe8qOp5oakSTBBizWsXrM9zAFgpKVuGPdP2YEvXkby1RSgxpCzUJNsJzYHby00F3uOL3iZTusH\"}]}\r\netag: W/\"69b2d504-302\"\r\ncontent-encoding: br\r\ncf-ray: 9db3c0a2cb571382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40475ec8ab046210394270740b1f722e","sha1":"7d8c70098de0112f0868c5adab3034193b42ba30","sha256":"584cc334320b5e1756711cc93c394ec0a9b9c4f47f848168237d8506fd3078ca","sha512":"3a696c527234b277b4845432c683690ab10bc06502f3768c0d8e4f81dfdd8b892fad4ee66ee6e17b0af4d15626437c78968ce8e57563688632ba558a32ba9615","ssdeep":"","tlshash":"8401dcdaa288f7c4a462dfa5532ba870593f42f8e680c2c043b8fb4037d230e082c880","first_seen":"2025-06-06T08:43:12.055243Z","last_seen":"2026-06-02T22:25:51.002195Z","times_seen":236,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/bg-dark-tablet.png","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /bg-dark-tablet.png HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 603478\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:31 GMT\r\netag: \"69aee26f-93556\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROLBSw0U1T7CZgVUw9NCpsUiQ0eAOB6U3q%2B1XM5xCjh0ZpiBRB2F%2F0QpaeS5xxP%2F21vBH%2FD01ON2doLoiWdq%2F3RAhH5bYmXLLREdyRbk1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db3c0a35cef37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":603478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 928, 8-bit/color RGBA, non-interlaced","md5":"76c0d4811a33873eadd863f79d98b0eb","sha1":"e83495ece2948b67e13ccefea431e7762e16f7b0","sha256":"24ab23af0a72fd64b4aeb0d8925923dc6d0b4e58524a11d7b7a3dbc3b9f2830c","sha512":"bd25f631c2bb7a30b842054e331b45261f4dc8bb8739a42764e44bf9be5f6fa3d725f518aad73488bd911e3d9c303dfe391c705f399d7800805e5552d7933da2","ssdeep":"6144:H/ChmhXjPP1KCV8o6rrCrm0Rwh+5qfn5VbBlSKGt+aiu5UUgHQudVdwAtySCkEHQ:fssJjdm0RwhEqfndDi+6SxvgtsDwc","tlshash":"3fd423339539d03fc3e651b03a3b988bfe1f7ba8475dfc22a46590a411e7e5a2748907","first_seen":"2026-03-11T04:52:27.219675Z","last_seen":"2026-06-02T22:25:50.99254Z","times_seen":191,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":332,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/i/filter.svg","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-12T15:15:07.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradays.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 17 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1C:51:F7:B1:0D:46:C4:D6:AE:2B:91:31:64:58:2B:A9:2F:B8:38","sha256":"7C:01:A5:15:5A:DD:CF:5F:32:D0:76:AE:B3:99:04:97:B3:54:4D:52:2C:A2:E1:2D:4E:50:39:5B:AD:D8:7D:8F"}}},"request":{"raw":"GET /c/i/filter.svg HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nlast-modified: Thu, 05 Mar 2026 14:48:44 GMT\r\ncontent-security-policy: default-src 'self'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 93\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1488,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2023aba997321e5bca4fc0530354bb8f","sha1":"858ab65a5d5e900bcfad477c85ab5007ca3b1ed9","sha256":"bd4c622a9df592361a89bf15d1972dc57ecfca0cca7783ff590f6d61898379d2","sha512":"706836535123b6ec02dc5d3efcad74841d7de2898e67e30c688f8d4e6edf3f3bb0eae7847230cfb2873891087265836b7e25d9997548dc6a06f0f4a1c8824323","ssdeep":"","tlshash":"9431c5d8bcd85184a8060351cfaf605756b7b1be328fb7d651282af42dc8b4b1dac7c1","first_seen":"2025-08-16T18:01:36.860891Z","last_seen":"2026-06-02T22:25:51.004441Z","times_seen":260,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/media/supportMessage.370f1e53.mp3","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:05.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /media/supportMessage.370f1e53.mp3 HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:06 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 35944\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:44 GMT\r\netag: \"69aee27c-8c68\"\r\ncontent-range: bytes 0-35943/35944\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsFw4ifiQYC4QhuERGE1jLFxeZNMC6UMGWwiTOkQOB7AVSRy4yeNXBUYHznEBCH6QstnFko%2FVct%2BVqaNQvlXEjwtdsyxZC27DR35iynbjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db3c09a2b6337c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35944,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 256 kbps, 44.1 kHz, JntStereo","md5":"370f1e53da0177284513bf9131740e5c","sha1":"1f602ab2e5c786b0308c98a855292b6967188281","sha256":"472d5def8a2148e70fc25c1f8c110ac77b728191b2f052eef171c131783f7865","sha512":"fdd51341219ae23a8d0b2220323a80428d34781cae0a0a60ee89681904beec1ffff67d90371391f6d8079bed10fd2491af422d3263a116dc83a8a54a102a0458","ssdeep":"768:LU1Y/cdNAFhpiGRDIwOLfqBMY1vsQvOMksoX/jcGc/rc6jVXebj2Bj4a5y:edyFhsG5OjtY16h/QGsrc6N0aBjpy","tlshash":"4ef2d087654c0eb8f496835545bf02a5eeaa7c1c473175ccc13afbb21373f628b9a056","first_seen":"2025-06-26T08:32:10.105296Z","last_seen":"2026-06-02T22:25:51.01676Z","times_seen":234,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/800ltd/brands/800ltd/logo-white.png","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:06.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /800ltd/brands/800ltd/logo-white.png HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 296413\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 15:00:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69b2d504-485dd\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmPkXFjfnjEqALKLwyluKpRS4lgdaFsqfdT3mkBewAVYufNh8tC2JuQ8h%2F%2Bj6XqNPINQPkz66YwUqBO%2BFDXvYalbgxldPY3N\"}]}\r\ncf-ray: 9db3c0a01f9ac124-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 981 x 504, 8-bit/color RGBA, non-interlaced","md5":"fc2a771b85df49f9a4d89987f26a1dac","sha1":"c67e1edf385dc62738d88d1f83204d18c95c2275","sha256":"15d63bdc79526f03d17250dc0917611a5cc8079dea156149a9f7c9ab6ff1f06f","sha512":"f6ddb85e9852d3a808321be839daa23ff6880a215757451783f43e3cd57e1de730e5c0774a72df6eca78f3bd7e8a6c375b4a55a1b12c6e48088d4e5f6d9cca14","ssdeep":"6144:KrkU3L+Yl6qwi6xFDX7C2AGSE1WUGTvEd5unAHH4FSBuXJqrai+3VmqjtuJ:Krkclnw7NC2AGS2Gvs5unAHHESwk/aVI","tlshash":"e45423dd78c00709d8eef1b64af763d32373d125d2f26412d6a0a92dad668f8c474c6a","first_seen":"2026-02-11T04:37:06.037425Z","last_seen":"2026-03-12T15:39:33.541349Z","times_seen":7,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":143,"receive":101,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/800ltd/image/new-design/certificates/stripe.svg","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /800ltd/image/new-design/certificates/stripe.svg HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 15:00:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zXoPBIZDBKuVseqLFbEBRKD5Fi3w%2FfCoc7t%2FODB0DpHuUd1RNy%2F6nzcOkedXhzipmEqj8TZKFfG30uneDeA7zIpkbYH%2FK56\"}]}\r\netag: W/\"69b2d504-916\"\r\ncontent-encoding: br\r\ncf-ray: 9db3c0a2cb581382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"814cec58da90aa00323310dcdbb29a69","sha1":"03c274d644deb4361f3d7d1fa036c4cbcbc23061","sha256":"3132ed55a70668a7854743d1a6d7c3966b483d546524c62257632577376e6248","sha512":"a47e0c09184b363fa98723c375ff9f52751112614c387506ede39ff28eb2ce35b608719b8f453f73d9c828bd85fc50d36c29fd98ab2d059fa6216b3cefd44cc7","ssdeep":"","tlshash":"094134d113f0d6f56606ab5dc4a26822b7a834b77a44d79bc3e4afc0a1180c40a85d5e","first_seen":"2025-06-06T08:43:12.060368Z","last_seen":"2026-06-02T22:25:50.974995Z","times_seen":235,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/styles/widgets/calendar/widget.f1b1b50300b51fafd8d2b3890788973c.css","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-12T15:15:07.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradays.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 17 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1C:51:F7:B1:0D:46:C4:D6:AE:2B:91:31:64:58:2B:A9:2F:B8:38","sha256":"7C:01:A5:15:5A:DD:CF:5F:32:D0:76:AE:B3:99:04:97:B3:54:4D:52:2C:A2:E1:2D:4E:50:39:5B:AD:D8:7D:8F"}}},"request":{"raw":"GET /c/styles/widgets/calendar/widget.f1b1b50300b51fafd8d2b3890788973c.css HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nlast-modified: Thu, 05 Mar 2026 14:56:32 GMT\r\ncontent-security-policy: default-src 'self'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 78\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":69967,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f1b1b50300b51fafd8d2b3890788973c","sha1":"e3abd49268f0b4fc92c628b200eb28d97ed0979e","sha256":"70de234a7d4890b5ab7f3b6e8bfb08452a0d6f2cb5736a40681b5eeb03bad931","sha512":"ce87389469ad8a1fba794752f0077913aa778f15e61fbcc771783f621f3f16bb5fb190d93a786b7c64e315ef87b33e7c79ec4888192048a135ef6d267f30f4e8","ssdeep":"384:iktR400mY4HnMBEBmFLfPGcuzWuCoT3/Rjr2so3sNHLpWLaLr0wMNd45G6dIrdS9:JMBEBNZfpsYdE5BjVqkMnnsV99IN","tlshash":"1d63aa678f41312ea033c4389ac19a417b295221e6273ef7fd59ece883ca5875777e09","first_seen":"2025-12-19T23:35:14.892295Z","last_seen":"2026-04-09T01:52:19.857958Z","times_seen":232,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/js/widgets/calendar/calendar.2c3c973cdaa85be0afda4775b0b51d9c.js","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-12T15:15:07.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradays.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 17 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1C:51:F7:B1:0D:46:C4:D6:AE:2B:91:31:64:58:2B:A9:2F:B8:38","sha256":"7C:01:A5:15:5A:DD:CF:5F:32:D0:76:AE:B3:99:04:97:B3:54:4D:52:2C:A2:E1:2D:4E:50:39:5B:AD:D8:7D:8F"}}},"request":{"raw":"GET /c/js/widgets/calendar/calendar.2c3c973cdaa85be0afda4775b0b51d9c.js HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nlast-modified: Thu, 12 Mar 2026 08:03:36 GMT\r\ncontent-security-policy: default-src 'self'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 202\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":38906,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38906), with no line terminators","md5":"e9020a37b447e104db3b7100f31edc28","sha1":"e3e8a03f186f0dbefd7b7a457b59c17f92540b7d","sha256":"60b852f8d9657ede2e67dd9656d77175102b4568e00957fa61833fe97fa370e1","sha512":"dcecd89ea4518ca9882091c256d0abefcc4afa291f189b827e15e6b1339883936dde43fcafb7ebef30eaf9fed55f86eb4913fe2a89a2f1bd4a44ede0bd8a6bdf","ssdeep":"768:sBmrS1dzfATL4KlnIuT66mmunXtcaYtK/cxbT:s5LTmL48IODmmkYIA","tlshash":"4f03a3853985263147e790b0d42f120261a34756ac9f4c68af2dffc059f894ba25effe","first_seen":"2026-03-12T15:05:39.702322Z","last_seen":"2026-06-02T22:25:51.005229Z","times_seen":100,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"socket.800-ltd.com/socket.io/?EIO=3\u0026transport=websocket","fqdn":"socket.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"104.21.71.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: socket.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cab.800-ltd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: JvflzxOCWs33+D5AUwLhMg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 12 Mar 2026 15:15:08 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: IQHgK1tSh8Wx6AIPXUoygQTtV2Y=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NX70kzDeCpGNb75otezS1bNfdoIwRpnZsTRZQCdWAfzsZLGUnlzbw5BT9yUn5pIplWCI67BKI7SlBL5TsJt15YK0r6ry2Fp%2Fbmpj4iesRvgG7Gr76YgrjQ4PhQ8kt1o4sa%2FFoYo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9db3c0a61f78f351-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7847\u0026min_rtt=7830\u0026rtt_var=1677\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3112\u0026recv_bytes=1195\u0026delivery_rate=550989\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=53a6a5456d01833c\u0026ts=303\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":4,"dns":54,"connect":58,"send":0,"wait":285,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/i/calendar/widget10.png","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-12T15:15:07.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradays.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 17 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1C:51:F7:B1:0D:46:C4:D6:AE:2B:91:31:64:58:2B:A9:2F:B8:38","sha256":"7C:01:A5:15:5A:DD:CF:5F:32:D0:76:AE:B3:99:04:97:B3:54:4D:52:2C:A2:E1:2D:4E:50:39:5B:AD:D8:7D:8F"}}},"request":{"raw":"GET /c/i/calendar/widget10.png HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/c/styles/widgets/calendar/widget.f1b1b50300b51fafd8d2b3890788973c.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2579\r\ncache-control: max-age=31536000, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nlast-modified: Thu, 05 Mar 2026 14:48:44 GMT\r\ncontent-security-policy: default-src 'self'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 138\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 42, 8-bit colormap, non-interlaced","md5":"471b2e82f315eda4d2686dc8c7a81e89","sha1":"4d9f1a43419636ee4d926f0051e56854fbf81ea0","sha256":"ad8dc5baa0f6f5966e5395be8f5cae0bca67625bfbc748f3543873eb84386862","sha512":"a3cb49c16b59b24b73acad54b51f773bd2ce930d278abd6bb1da0f515816d3723dd327a4f459ff8c2902757f4e1f479d30dd3047dac76f6f303ea4bf75bd4cc8","ssdeep":"","tlshash":"dc516cafe014f430bc1f8494f95850698f8be2bdd91948aaf4db025801ceb9471080c1","first_seen":"2023-05-04T00:52:22Z","last_seen":"2026-06-02T22:25:51.013289Z","times_seen":284,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,400,0,0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,400,0,0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 12 Mar 2026 15:15:04 GMT\r\ndate: Thu, 12 Mar 2026 15:15:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7e2e2d930e800aec6df113d564f59edd","sha1":"a094bc6bc85614053f080d256bb995487f534745","sha256":"b6c564f6c7ef0840f9539f489f10f577fa5f477d46c5cdfe15d68a3f1e376b9b","sha512":"2817d39f6fcb943b792ff0401ac8504a414088e3ab4ccbb53852c4684a1367b8d65193496baffa9632cb1b3431e6b871794ef8b9a87cb2ca4cd8e82b784070bd","ssdeep":"","tlshash":"13019e58aa565905a1550c43330f3f225e19451f394ad8beef460d0c9efe9770345f0f","first_seen":"2026-03-12T06:22:31.205264Z","last_seen":"2026-03-16T18:25:38.79666Z","times_seen":83,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":275,"dns":1,"connect":57,"send":0,"wait":77,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/js/chunk-vendors.9b4f0ac7.js","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /js/chunk-vendors.9b4f0ac7.js HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KAxUeaRVMLTS6Isbkd4iyKC1LpHDYpE1eLaOTt0fjtLY7n18Djw9demECL95o2j5WIav5R5BdM57u5kFZQSss8K9aXlRYEdnI8JCu22O5A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69aee27b-18db5a\"\r\ncf-ray: 9db3c091ca7837c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1629018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"90a9b81d1e87aefea696b87e77e99c97","sha1":"02305df9ce204756bad939f6d00969a99e824dbf","sha256":"344385b29d35c1fa875fcaba737f1880bf91cfde44d17bdbb76c66a4efd3667d","sha512":"5f547fcc5098f0b87ac64fb42b4af8a34890ff62a06042fbbc702cbd9dcd547128e0bb98462029c5f5063cef41d63248f31f73046f699cada25b6378653aface","ssdeep":"12288:QbKdMyZQnhQamsDQllb0HcPdi7FGVYHoGhUZS:QbKdbQnhQVllb0HcFiFGeHuZS","tlshash":"0625fa84b6647031479a75e4442f144bf236b92d684b40acf368e4fa7cbdd89663ef38","first_seen":"2025-11-06T02:28:19.133325Z","last_seen":"2026-03-25T13:11:24.277665Z","times_seen":206,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/media/orderWin.5f212a12.mp3","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:05.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /media/orderWin.5f212a12.mp3 HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:06 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 22532\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:44 GMT\r\netag: \"69aee27c-5804\"\r\ncontent-range: bytes 0-22531/22532\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Hh%2FPYFeT3IFMQBN0g%2FetNP3mP9tqJkjFCe8nnbiKfLdZwFZvCBKCJfZWRKcglkhNZZK%2Fv9ejjBGCyCag44UHeXHV3dNZT8rjhhmjgslUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db3c09a2b6037c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22532,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"5f212a12f96c673072f0d44341433365","sha1":"e9b3933c84d2287abf6e5141f434f3efbd60b395","sha256":"6b1283efa7399f55e1336ff845b92bfec802b667160559ad9a59fe5c8f445bf4","sha512":"e6e75be4aa163d7c39d71a616cebdcb91afd5c06dcfbc7b9d6eeb6bab21fd78250873caa43d7777f94cf0388cae12dfbbc7784dd9927d94cdc30471a7c35d0a3","ssdeep":"384:8JM14ZdoqYgqcAoAPsxuA9MYFuLsW9Dj+pG5iPhl/zbZBjYWBmOCKl6tV:ahfoRVcAG4x4pGmhl/PZBYW3laV","tlshash":"dda2e0564f4b76c9fe472b7306a518e7c264aa4303283d538b6863917c7f23fab04196","first_seen":"2024-08-20T10:14:07.555956Z","last_seen":"2026-06-02T22:25:50.983263Z","times_seen":275,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.204.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cab.800-ltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 09:27:00 GMT\r\nexpires: Sat, 06 Mar 2027 09:27:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 539287\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.204.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cab.800-ltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 09:27:00 GMT\r\nexpires: Sat, 06 Mar 2027 09:27:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 539287\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialsymbolsoutlined/v319/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzByHX9rA6RzaxHMPdY43zj-jCxv3fzvRNU22ZXGJpEpjC_1v-p_4MrImHCIJIZrDCvHOej.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.204.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/materialsymbolsoutlined/v319/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzByHX9rA6RzaxHMPdY43zj-jCxv3fzvRNU22ZXGJpEpjC_1v-p_4MrImHCIJIZrDCvHOej.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cab.800-ltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 314628\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 23:16:48 GMT\r\nexpires: Thu, 11 Mar 2027 23:16:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 11 Mar 2026 18:40:34 GMT\r\ncontent-type: font/woff2\r\nage: 57499\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":314628,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 314628, version 1.0","md5":"3c1d4dea9b310f31c006a3ef81d5d749","sha1":"9f8f8d458d7803f5251b7ddb073f84338c58ed7e","sha256":"a119b9d6e634fc9a6c3e027fa00d942e107c2ec97cba3382e669463d62f5f31a","sha512":"cdc6d6a079a01ea42e67a8c836f5f258d096a7e3d21c390f11fcd522a74cd36c21718e739f488bdfbdd9c4b696e596f7cdbc182b4cee3d34bacfcf8bf310b7a6","ssdeep":"6144:2F4PFcjWZvbpb0RPO4WjZdxuo5Uo6rCr5XXEu4UYPyPeHCsbbX+5ZShd:2F4MWPWPO4WjZNd+Cr50FkebXc6","tlshash":"706423a1a36e89b933101fd370472e337aea357c03527c66c59a83b45f319b2e79961c","first_seen":"2026-03-12T05:25:27.497365Z","last_seen":"2026-03-16T20:44:21.708253Z","times_seen":147,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.204.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cab.800-ltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 06:48:33 GMT\r\nexpires: Wed, 10 Mar 2027 06:48:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nage: 203194\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-06-08T12:50:18.012249Z","times_seen":63118,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":186,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/800ltd/image/chart/expire.png","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /800ltd/image/chart/expire.png HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 430\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 15:00:20 GMT\r\npriority: u=4,i=?0\r\netag: \"69b2d504-1ae\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NHu4CSq6LokvV5Kw4K5zxK3GQGr27kGQTDbjOxIEfh46tFOh6vThVv62lmm4tOQGPPpq%2F3OkIAgoRjeUH6CZZbeOMuHUUO6A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db3c0a568511382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"40f70b5c06b9f4e4e3dd6627bfe8625e","sha1":"3ea3b5a1c9bedd85678e765ebc5e9afe21ed4685","sha256":"5d9d19e539736e08b8eeb21ea0de6daf5ccda26169a9d063782a745be12a29c9","sha512":"0c5715aca5586d87a14c08e29f6a13adf0bfecae4278cb929ae9179671015576d83f6fd892e2d60460c3b55e19a1c4b5857ce6ff25bbfdfeaddfefd858f34ce0","ssdeep":"","tlshash":"e2e023c0eb852832c6c87727163f420c69bfec805c049ddb0159c4fa616860110d5681","first_seen":"2025-05-28T00:42:12.46262Z","last_seen":"2026-06-02T22:25:50.977767Z","times_seen":239,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T15:15:04.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Mar 2026 15:08:35 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oldUuBZ6eGKwnCL%2FuEmBGMoB7uM6NAnBoGAFtFlRuJHSf9cxWGM9u7M1E9g9r6i21DMsRsOq4%2BL805kpxAInaZkN0D80E6yaIhYUY6KEEQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9db3c08f3d1c958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4867,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1611)","md5":"4cab59dbcb6b97715603b7e54af1f73e","sha1":"32a7ea92f00daa6a946957e30181e76ae133f60c","sha256":"f4b37d524322a18c56196bff244e0c73be3c29615be277c10898e85e8d643f07","sha512":"89d99d8b4d4d269d26a7df585ef8262b80d2680515e2eba655dd0187808de3be298eb47b33ad0de91a3bf9c66468ff619b14d2b005e613caa802d3dade2bd29a","ssdeep":"96:GLOUIL2ORxb2pnHPB6hP2GW2WLabn8qw8nbq/sqnVyLwDnSQ4888VvL:GLt22Ob2pHJ6hP2GW2WLabn8qw8nbq//","tlshash":"2da1a8a35412508d3a22ea61aff8762ac09f951f9551ec58b4bc02ddcff07c44ae3767","first_seen":"2026-03-11T04:52:27.204758Z","last_seen":"2026-03-12T15:46:18.133932Z","times_seen":171,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":57,"dns":25,"connect":8,"send":0,"wait":276,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/css/chunk-vendors.c5a8cada.css","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /css/chunk-vendors.c5a8cada.css HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2Be6UIs%2F1snMEn9MH2as3ICsGPxT%2FB3dCE8NSyZltWrpDHTrN1uxkEUlNVtlb3kNPstSMHHaHtl%2Fy4%2BxIkvZ4PiC4uJH1EooG2I6lQstCA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69aee271-12cb\"\r\ncf-ray: 9db3c091ca7637c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4811), with no line terminators","md5":"6ca376a8d26c309be793b3b8666ca34d","sha1":"1c45dd55839afd8454a3145e8bdb39d359d6f539","sha256":"bc608cef2cab892421565cc74a90176e5302c7d1cf7751ae5040ba8090f34fdb","sha512":"0431631e8511a1e21662dfc4d09b6bb3225f4143f310721dc8d42d8dd4ea78da4d4c56ec036431eb3e37b8b59047af4a242945a591ac5c2d69ef7208c9e4aa1b","ssdeep":"96:J2tmOictRHNUME7WWXIShv/JRhWWBh+5T+3:J2tdtufhv/J3h+5q","tlshash":"08a1507fb248f1684027ff42a5e15addf42ba3b0b6522a15f2c4623021f27d1bc2893c","first_seen":"2025-03-06T08:07:18.685166Z","last_seen":"2026-06-02T22:25:50.996784Z","times_seen":242,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/js/app.c7e18bc4.js","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /js/app.c7e18bc4.js HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bD0eTEDVgJvYs3ueShIQonp4y8LnROBsDLgJL9kIJh%2By7IYywgR1e39mFToiHCj2b6dVkQCHiQ3ub21jtM%2BGw0MO64dD1EMqKjEGuBS%2Blg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69aee27b-12425e\"\r\ncf-ray: 9db3c091ca7737c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1196638,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59358), with no line terminators","md5":"5d7fd30f904a113b6f88e6969e91e108","sha1":"6b2ab489fade5f186a78ce46d99d9989c20f690d","sha256":"907f5586b70750eb4d17288be667ec268fc682b9c0aa80359c73be7f4a9c056f","sha512":"d69ae8f09c30f12e64eaaf717331caba87a772d7ca37b7c06b2ac0622bb2ce35e3feb0715f29f63c4421468fc2b33db8beb5a3b0600468c88ef50138ef0da624","ssdeep":"12288:dEBmDuBnIBGI/ebhy7wLfVBwzHfitZ6o3QyBNHS0U/rCbdzixCWWPipbLVnGH:dEBMII2k7oTMf8ivbLVnGH","tlshash":"25457d19d16943e85d7ac7dfb2d12b897cb8cddac0de802b075e836c31d6ac41299eb4","first_seen":"2026-03-12T15:15:33.105245Z","last_seen":"2026-03-12T15:15:33.105245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradays.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 17 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1C:51:F7:B1:0D:46:C4:D6:AE:2B:91:31:64:58:2B:A9:2F:B8:38","sha256":"7C:01:A5:15:5A:DD:CF:5F:32:D0:76:AE:B3:99:04:97:B3:54:4D:52:2C:A2:E1:2D:4E:50:39:5B:AD:D8:7D:8F"}}},"request":{"raw":"GET /en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1 HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate, no-transform\r\ncontent-encoding: br\r\nexpires: -1\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-robots-tag: noindex\r\ncontent-security-policy: default-src 'self'; script-src 'self' c.mql5.com www.tradays.com www.metatrader5.com www.metatrader.com metatraderweb.app www.mql5.com https://content.mql5.com search.mql5.com search.mql5.com https://c.paypal.com https://pay.google.com https://cdn.chatbot.com https://widget.mindos.com test-api.sumsub.com api.sumsub.com static.sumsub.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' c.mql5.com www.tradays.com 'unsafe-inline'; img-src 'self' msg1.mql5.com msg2.mql5.com msg3.mql5.com msg4.mql5.com c.mql5.com https://content.mql5.com charts.mql5.com www.mql5.com www.tradays.com www.metatrader5.com www.metatrader.com blob: data: *.tile.openstreetmap.org https://c.paypal.com https://b.stats.paypal.com https://dub.stats.paypal.com https://www.gstatic.com img.youtube.com; media-src 'self' blob: msg1.mql5.com msg2.mql5.com msg3.mql5.com msg4.mql5.com c.mql5.com www.metatrader5.com; font-src c.mql5.com; connect-src 'self' metatraderweb.app www.mql5.com www.metatrader5.com www.metatrader.com https://msg1.mql5.com wss://msg1.mql5.com https://msg2.mql5.com https://msg3.mql5.com https://msg4.mql5.com wss://msg2.mql5.com wss://msg3.mql5.com wss://msg4.mql5.com wss://gwt1.mql5.com wss://gwt2.mql5.com wss://gwt3.mql5.com wss://gwt4.mql5.com wss://gwt5.mql5.com wss://gwt6.mql5.com wss://gwt7.mql5.com wss://gwt8.mql5.com wss://gwt9.mql5.com wss://gwt10.mql5.com wss://gwt11.mql5.com wss://gwt12.mql5.com wss://gwt13.mql5.com wss://gwt14.mql5.com wss://gwt15.mql5.com wss://gwt99.mql5.com https://cdn.chatbot.com; frame-src 'self' c.mql5.com www.tradays.com web.metatrader.app metatraderweb.app player.youku.com www.youtube.com player.vimeo.com vk.com rutube.ru https://c.paypal.com https://pay.google.com https://cdn.chatbot.com https://widget.mindos.com test-api.sumsub.com api.sumsub.com blob: mql5buy: mql4buy:; object-src 'self' c.mql5.com www.metatrader5.com www.youtube.com; worker-src 'self' c.mql5.com www.metatrader5.com www.youtube.com;\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 2275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":157982,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48237), with CRLF line terminators","md5":"94bef1324607f155f74c8fad392b1d6c","sha1":"7af25308f30374c1c97e40d8e033f930dca52431","sha256":"ce731f84bfc4eef11bb52e2c707656926777abbe3e3f4a2e3bbdad84276e2dcf","sha512":"5b3a3f8866819a0dd48fb9345eb748d852c36e723b7405f91dd88a36881994fa0dfd73982211c33cf8008c481667b7143670c05250398cbbc5fd52714a0d276e","ssdeep":"3072:7D29FYrIStE01o3w0hkjILitHXwIgw2Y3AdhFxWi6BMgnov:7D29FYrIt01o3w0hkjILitHXwIgw2Y3m","tlshash":"87f37a585ade0237947509b8b3778141a4e12765bac90c58fcacef5c6fcbcde40c6a8e","first_seen":"2026-03-12T15:05:39.669302Z","last_seen":"2026-03-12T15:32:37.570989Z","times_seen":68,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":170,"dns":0,"connect":17,"send":0,"wait":23,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/img/symbols.824cf6a0.png","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /img/symbols.824cf6a0.png HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/css/app.3da0d8c6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2933933\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:34 GMT\r\netag: \"69aee272-2cc4ad\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUe63S4ZO%2F0aXFDZyCQcqr5bqv39rKzvh1rIVVMeMcC6aX%2Fi1tX%2B2254%2FyFAoMOc%2BcgdBx2ZInvmyz5mbz5UmX4gEZiwl%2B4DkJa6vcxxQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db3c0a35cee37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2933933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2146 x 2146, 8-bit/color RGBA, non-interlaced","md5":"3f94b596644f7cc65f78187f0bb4a2fd","sha1":"5e366f75b70873617b6786e4fd161ca94e2678d8","sha256":"76e7b6e7689a3366d692655844dd1825f357880b290861db04650c43f2316ba2","sha512":"06016612458b6c8c144405a8b622ca6b95d85542664b3e7efcab95a0de683c369474715dd47983d9f6d09ea57403888ff04256bdbf132ca4829f5875bfba2a8d","ssdeep":"12288:i3oD1js5x5mI0NUtL5B430sozg6WHcHjKc6odHa6fiU3O9fZvzekV5XyJjU/Gwu8:iFNsKL5flTH76A6ilWfNeCRypU+J2","tlshash":"89253336d4f787fecba95a6ddc2618321074821106bed3b1bdb8e60a643af551107f2e","first_seen":"2026-01-27T02:59:16.782715Z","last_seen":"2026-03-21T03:58:46.737258Z","times_seen":206,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":334,"receive":893,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.eu/800ltd/image/chart/expire.png","fqdn":"p-cdn.eu","domain":"p-cdn.eu","tld":"eu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.743Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /800ltd/image/chart/expire.png HTTP/1.1\r\nHost: p-cdn.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/fz/tr?event=Visit\u0026ref=https%3A%2F%2Fwww.tradays.com%2Fen%2Feconomic-calendar%2Fwidget%3Fmode%3D2%26dateFormat%3DDMY%26theme%3D1\u0026id=xgtwjihqxpekdivhyasdmymldwnqaolegh\u0026ssn=1773328507592112895\u0026ssn_dr=0\u0026ssn_sr=138\u0026ssn_start=1\u0026fv_date=1773328507\u0026back_ref=https%3A%2F%2Fcab.800-ltd.com%2F\u0026scr_res=1280x1024\u0026ac=177332850791845450\u0026sv=2552\u0026fz_uniq=6405493124433332859\u0026an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1024%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Win32%22%2C%22rp%22%3A%5B%22PDF%20Viewer%22%2C%22Chrome%20PDF%20Viewer%22%2C%22Chromium%20PDF%20Viewer%22%2C%22Microsoft%20Edge%20PDF%20Viewer%22%2C%22WebKit%20built-in%20PDF%22%5D%2C%22wv%22%3A%227937%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22hc%22%3A48%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A167%7D","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-12T15:15:08.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradays.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 17 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1C:51:F7:B1:0D:46:C4:D6:AE:2B:91:31:64:58:2B:A9:2F:B8:38","sha256":"7C:01:A5:15:5A:DD:CF:5F:32:D0:76:AE:B3:99:04:97:B3:54:4D:52:2C:A2:E1:2D:4E:50:39:5B:AD:D8:7D:8F"}}},"request":{"raw":"GET /fz/tr?event=Visit\u0026ref=https%3A%2F%2Fwww.tradays.com%2Fen%2Feconomic-calendar%2Fwidget%3Fmode%3D2%26dateFormat%3DDMY%26theme%3D1\u0026id=xgtwjihqxpekdivhyasdmymldwnqaolegh\u0026ssn=1773328507592112895\u0026ssn_dr=0\u0026ssn_sr=138\u0026ssn_start=1\u0026fv_date=1773328507\u0026back_ref=https%3A%2F%2Fcab.800-ltd.com%2F\u0026scr_res=1280x1024\u0026ac=177332850791845450\u0026sv=2552\u0026fz_uniq=6405493124433332859\u0026an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1024%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Win32%22%2C%22rp%22%3A%5B%22PDF%20Viewer%22%2C%22Chrome%20PDF%20Viewer%22%2C%22Chromium%20PDF%20Viewer%22%2C%22Microsoft%20Edge%20PDF%20Viewer%22%2C%22WebKit%20built-in%20PDF%22%5D%2C%22wv%22%3A%227937%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22hc%22%3A48%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A167%7D HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _fz_uniq=6405493124433332859; _fz_fvdt=1773328507; _fz_ssn=1773328507592112895\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Thu, 12 Mar 2026 15:15:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 70\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-service: Finteza\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":70,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"48b7a1e65c0e92830152164b22a7c37d","sha1":"16f99525ed7feee4e80d1e32df48d36286cdfca4","sha256":"e3849fdc1eab88579b20b1b56875d6ef8299c4ad165e03921400ccae69149861","sha512":"8846633046618696dfe7dcf6397d2588a8334dd2349b1300eff197e336ff3193a83ab8900d6666a0d7a0a6f797d323a4aee2bd05fa7a2eb8b888f3ea85459489","ssdeep":"","tlshash":"c2a022e333c0bcbcce23803300208b38ccf0c00000200e0c080ec83f2e08200888aa83","first_seen":"2023-04-06T23:51:49Z","last_seen":"2026-06-07T19:50:13.513065Z","times_seen":1694,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/js/chunk-1323853e.b02dcba3.js","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:05.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /js/chunk-1323853e.b02dcba3.js HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Tio91Txw1kY9SdN2Jui9G6UuZTJmt5Kad4av8JwyFGqV4VNnYJYanARipWqkPufNJZgZHQBlVl38wvrAIZt704RHb6%2BHZZ67qNv%2B%2F2BgQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"69aee27c-13305d\"\r\ncf-ray: 9db3c099fb5b37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1257565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"bcd838127595eaa6bef0c4945fea1308","sha1":"12134fd1642c6adceda9f50d166bbf403ce4807c","sha256":"232dad98e49dc90d18fe31a96ce091860fc4cf3b3872c5d9609137544fb49b9d","sha512":"998189f178b0bb2dd4f29ac43664fe5a8cd04a5ced42921f6067c0cc2fb68d57db04d142d0718614b36319fe50ee3eb24b1fac7ac20f51a75954b5249ed29b2d","ssdeep":"24576:70UxdxZBJnsYD2B3xYnEdbdG8xt5OgenY6rEgeY:70UxdxZB5sYD2B3xYnEdbdG8xt5Ogenf","tlshash":"0a255d65635a74ba8969c199a03e0002b1312ed46011c4ddf3fcdde9ab9dc8933bfb79","first_seen":"2026-03-11T04:52:27.177712Z","last_seen":"2026-03-12T15:46:18.115196Z","times_seen":171,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":381,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/brands/undefined/pwa-icon-16x16.png","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:06.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /brands/undefined/pwa-icon-16x16.png HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:06 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUchMV%2BQYtHxc7Bya%2F7LdwjT%2FPCPA86xVRlP6k6tVt3HtfuDim8OmeI8t007UyhV5EMqLGjHJCCP0BqHgYL10Af0IWKZrolvrOj7rLq1tQ%3D%3D\"}]}\r\ncf-ray: 9db3c09d1bc237c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4867,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1611)","md5":"4cab59dbcb6b97715603b7e54af1f73e","sha1":"32a7ea92f00daa6a946957e30181e76ae133f60c","sha256":"f4b37d524322a18c56196bff244e0c73be3c29615be277c10898e85e8d643f07","sha512":"89d99d8b4d4d269d26a7df585ef8262b80d2680515e2eba655dd0187808de3be298eb47b33ad0de91a3bf9c66468ff619b14d2b005e613caa802d3dade2bd29a","ssdeep":"96:GLOUIL2ORxb2pnHPB6hP2GW2WLabn8qw8nbq/sqnVyLwDnSQ4888VvL:GLt22Ob2pHJ6hP2GW2WLabn8qw8nbq//","tlshash":"2da1a8a35412508d3a22ea61aff8762ac09f951f9551ec58b4bc02ddcff07c44ae3767","first_seen":"2026-03-11T04:52:27.204758Z","last_seen":"2026-03-12T15:46:18.133932Z","times_seen":171,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/800ltd/image/new-design/certificates/pridss.svg","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /800ltd/image/new-design/certificates/pridss.svg HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 15:00:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tuV8tLpvb6Ygwc5aAHKzWqbqQUYZ2lI9489aY1tuY%2BpVPZYi6kAyoUJinK2OFadXGLJxaK%2FdNIpAbPoQ%2BJdqf36cS6lqrO%2Bn\"}]}\r\netag: W/\"69b2d504-975\"\r\ncontent-encoding: br\r\ncf-ray: 9db3c0a2cb5c1382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2421,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b58a4b2fcf3dc496347888d4951f1d8","sha1":"804c4c11f9a9fbb05674e8a1efcae94d457ba0af","sha256":"1ce2c2c22752886d1f1fdd124c6b68f41eaa8466ac314270a31f03bccab2904f","sha512":"6ea1c05e263abe66faf719cb1fba4792c700d47c0e4ebeab78825e4adae0e1e90633134eee8c0a6d9be0b90c3c3aa4ed43f6e8e3b927e036f55f0f876dc64bf7","ssdeep":"","tlshash":"884195f652f872f0d807e7e8d5b26136362f28765b14c9bc4ba8a759bd2c05c09c9dc8","first_seen":"2025-06-06T08:43:12.056226Z","last_seen":"2026-06-02T22:25:50.976481Z","times_seen":235,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.204.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:05.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cab.800-ltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 09:27:00 GMT\r\nexpires: Sat, 06 Mar 2027 09:27:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 539285\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T12:34:26.891385Z","times_seen":181744,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":212,"dns":1,"connect":44,"send":0,"wait":45,"receive":56,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/brands/undefined/pwa-icon-152x152.png","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:06.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /brands/undefined/pwa-icon-152x152.png HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:06 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hicuNtZgtoDDs%2FiZgpn3oH4YiLothw5A7s%2BWB0oNcD2VaYsxlBGE7UaqUlVzsRf2XHKNCu8eZPRKQWY3UBLwh0tLOuTJo8H9b0Z7xUoQEQ%3D%3D\"}]}\r\ncf-ray: 9db3c09d1bc137c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4867,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1611)","md5":"4cab59dbcb6b97715603b7e54af1f73e","sha1":"32a7ea92f00daa6a946957e30181e76ae133f60c","sha256":"f4b37d524322a18c56196bff244e0c73be3c29615be277c10898e85e8d643f07","sha512":"89d99d8b4d4d269d26a7df585ef8262b80d2680515e2eba655dd0187808de3be298eb47b33ad0de91a3bf9c66468ff619b14d2b005e613caa802d3dade2bd29a","ssdeep":"96:GLOUIL2ORxb2pnHPB6hP2GW2WLabn8qw8nbq/sqnVyLwDnSQ4888VvL:GLt22Ob2pHJ6hP2GW2WLabn8qw8nbq//","tlshash":"2da1a8a35412508d3a22ea61aff8762ac09f951f9551ec58b4bc02ddcff07c44ae3767","first_seen":"2026-03-11T04:52:27.204758Z","last_seen":"2026-03-12T15:46:18.133932Z","times_seen":171,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.link/800ltd/image/chart/expire.png","fqdn":"p-cdn.link","domain":"p-cdn.link","tld":"link"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 11:17:25 GMT","end":"Sat, 06 Jun 2026 12:15:50 GMT"},"fingerprint":{"sha1":"BB:CA:42:D4:0C:12:40:5C:1B:0D:59:50:A2:5E:54:10:42:10:9B:DE","sha256":"B3:03:64:DA:AC:40:35:A1:77:5C:00:FA:AA:70:2B:6D:D7:1C:62:A7:9B:E3:E0:83:84:29:2E:C3:B9:C8:2A:5D"}}},"request":{"raw":"GET /800ltd/image/chart/expire.png HTTP/1.1\r\nHost: p-cdn.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 430\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 15:00:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69b2d504-1ae\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9BXaDchuVeUeCpfBnyvh36QzosJ4Fyse4ptBXkQ03LZo0K5cscROpZPq7id2JGYptUti0yG8%2FsHMEmIBsIFhAaDZ12Z6yHPq50%3D\"}]}\r\ncf-ray: 9db3c0a5a8e7de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"40f70b5c06b9f4e4e3dd6627bfe8625e","sha1":"3ea3b5a1c9bedd85678e765ebc5e9afe21ed4685","sha256":"5d9d19e539736e08b8eeb21ea0de6daf5ccda26169a9d063782a745be12a29c9","sha512":"0c5715aca5586d87a14c08e29f6a13adf0bfecae4278cb929ae9179671015576d83f6fd892e2d60460c3b55e19a1c4b5857ce6ff25bbfdfeaddfefd858f34ce0","ssdeep":"","tlshash":"e2e023c0eb852832c6c87727163f420c69bfec805c049ddb0159c4fa616860110d5681","first_seen":"2025-05-28T00:42:12.46262Z","last_seen":"2026-06-02T22:25:50.977767Z","times_seen":239,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":38,"dns":0,"connect":8,"send":0,"wait":112,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/800ltd/brands/800ltd/favicon.png","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:08.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /800ltd/brands/800ltd/favicon.png HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 112496\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 15:00:20 GMT\r\npriority: u=6,i=?0\r\netag: \"69b2d504-1b770\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNVUcuPt1%2BBI3Mhy7hH9qijnYh7543CgaQtYqoyaX03j8QfLnAjHIDQlPOobTqe5novbwyCV6qTnMMpzNIQR2RANY78yn4gN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db3c0a97f9d1382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ee6126780ae6f6777f4e7ba452f5f5ee","sha1":"76328f98b77d53fffc5075b52f3a76b38f721c48","sha256":"df54d58f4d7cee1825dc22866872a0c3376aa3c60f3c72a9c8888dd37ae562bd","sha512":"2ef979571d5cda007229f5b7e4eb7f2a3e37e339ea969c81fb9ad3766ee4b660252d938a83706ae7dc4c570c22d86f4d561e3a146f94464d2a067aba287d6e9d","ssdeep":"1536:Be2gy4rCA0BbW6a2hhdPTlN+Ig/uJ4DVgcsQ55WhMm+RYEKbLYckvCLPamKCh:14rCv/hzTGIg2OfTWwkPYcQCLxL","tlshash":"e0b302b5cc629341f91dbc3ffb772f3c288aa7a84d22075458bb450b62601e51aedc1e","first_seen":"2026-02-11T04:37:05.917865Z","last_seen":"2026-03-12T15:39:33.538237Z","times_seen":7,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":253,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 12 Mar 2026 15:15:04 GMT\r\ndate: Thu, 12 Mar 2026 15:15:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-06-08T12:45:52.66324Z","times_seen":46872,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":283,"dns":0,"connect":58,"send":0,"wait":94,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/css/chunk-1323853e.97686dcd.css","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:05.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /css/chunk-1323853e.97686dcd.css HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:06 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xz2jIpWphxShx61nPFEizjvtFkuxVOSQjEpsOZMqRWv3rokBXPySCbKGR%2FysqklWkRs2ggmpNPvDXbr2M53HwSHFg9NmQIKPUiGnOGoeNg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69aee271-40b9b\"\r\ncf-ray: 9db3c099fb5a37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265115,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e105d6555aa178c58c86d69c520b6ff","sha1":"7f7eaa06bb2b667e1bbd0d903fa89f636f635041","sha256":"11f2c60d87de21997f5ab0c29b11843d109d13a4b75230c05eecad4893d6651d","sha512":"a152267e35bab88d1e44897a4bdb97b3360b103a7c515db0e38fe06f889720ba7ee352ebe714215de90d12c26b3a0712b6c4eb063425e1aa22cf0bef35c486f8","ssdeep":"3072:0ZHCyHJP0SQWCP7IjOQOt5qlqR+A5PXGgbg8WTLixK3IHYCLtmcT536BdYpMW/cN:0ZHAD/3eYpMWJrHHG9vXi+","tlshash":"7e44e9a0725c753dbc3be255d5a9814fb124b753c81242defa9162388eeb9d33f36188","first_seen":"2026-03-11T04:52:27.221312Z","last_seen":"2026-03-12T15:46:18.140775Z","times_seen":171,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/media/click.726c6bc2.mp3","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:05.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /media/click.726c6bc2.mp3 HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:06 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 4378\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:44 GMT\r\netag: \"69aee27c-111a\"\r\ncontent-range: bytes 0-4377/4378\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c0dMRBxqpZOnlrDvVJm0Hh2LjykQ5TjurRPLGWw53mUlnmA0OwT4sYPOS8DuT7wTh3Y93%2FO4q7vCvSP37kSEIAlTTzKVLbwU2yKGKan%2Frg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db3c09a2b5f37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4378,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"726c6bc200ca0821503aaf447e3e3b5a","sha1":"a90eea6a68d659cbf657e99d22a128d9aa725d1b","sha256":"4b4045d1723a9332f16feab63038751c3f297fe54bf133cbb3891ea5028cb9e2","sha512":"6dab4620f6347e2dd0ca8d242742665bb7a16c68652abca521cd982d78ba2aae101a05ba4c4c357d7f92b0def66d5758c59e43057bbd639606177d265b5b605a","ssdeep":"48:cKo3kkK3arjMcACvxnSj+CacRVz+SsGiPsL3kHMlDANLIjs7/QpR59CmxvoXd5bf:CkkK3arjvAC5oakVoG+uUN0s7/+Tx4f","tlshash":"85917d578d49b271c04de83d943126044b06fc82c89686ee151ff364c9bcb06bd2561c","first_seen":"2024-08-20T10:14:07.554483Z","last_seen":"2026-06-02T22:25:50.991584Z","times_seen":274,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/media/orderLose.7aca6797.mp3","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:05.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /media/orderLose.7aca6797.mp3 HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:06 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 34346\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:44 GMT\r\netag: \"69aee27c-862a\"\r\ncontent-range: bytes 0-34345/34346\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7IG%2B0lZvCYLm0GaINqBrttDUvbMV%2FCebyowV74f9%2FbzSW8%2BFcykzLrwxCu1yb%2BfMg93CT2bzCqTr75QDZo5dvna6yzwv0dyEp%2Fn7pPYOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db3c09a2b6237c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34346,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"7aca6797b6a15988c0de43b423f1ed8f","sha1":"0ccffe77c793970f0f50151a0448e1fcf2238014","sha256":"0d5aa15fad454cdaa4e8ee01d040b2d039f8d37d43712ef1fee24c8845783994","sha512":"e40d5b8107e52bf413973d4d3ee44fd97f65b343b243188134cff24846794427e0016c1727fd186c2888e7061521aad5cf55db35a82a79bcf7e71ff20c8115b2","ssdeep":"768:G6FMgu73lbiB83lzKMjI5nrkmgDtJZc29bOedJaGqeDS:tFMHlWBKF8nrkmsnc8bRdJHqx","tlshash":"88f2e13d1bd03edcf4963935cf650da8ef37b62a0923598d06c1fb544897018b79ca4a","first_seen":"2024-08-20T10:14:07.556949Z","last_seen":"2026-06-02T22:25:51.00135Z","times_seen":275,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/800ltd/image/new-design/certificates/visa.svg","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:07.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /800ltd/image/new-design/certificates/visa.svg HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 15:00:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V58RdCUs172uuxcz1Erig5d5LZrPqeBg0FB%2FQVetDXMF9lhBimAqoXjzI6T52BTQyMBkE1fMZh7XkNm6kzrO7qQcx3j%2BabGZ\"}]}\r\netag: W/\"69b2d504-6aa\"\r\ncontent-encoding: br\r\ncf-ray: 9db3c0a2cb551382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86f4ba812ef3ed969cf35ae26e195aca","sha1":"376c311d9e592d6baa228573e4427265e1d1e994","sha256":"d7b6171f678716e315803fd2313e77ebd8f08cb59e3aaed5555c1efc9c1c8e40","sha512":"16b4c74cd4e85c0560776573708915502258214adbb93e44725b1182e14c097e607f8a975eb12871828a3947dc5728c6b1755d9bde7edb1b53257f4e79699fbe","ssdeep":"","tlshash":"b63140d12a5420c4ac8fe79ceb6738b1764779ea3a21c671cde0dc82b45815c89d7cd2","first_seen":"2025-06-06T08:43:12.06941Z","last_seen":"2026-06-02T22:25:51.003686Z","times_seen":236,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/fz/st?id=xgtwjihqxpekdivhyasdmymldwnqaolegh\u0026p_di=377\u0026p_dcl_s=378\u0026p_dcl_e=502\u0026p_dc=758\u0026p_dns_s=0\u0026p_dns_e=0\u0026p_tcp_s=0\u0026p_tcp_e=0\u0026p_req=0\u0026p_res_s=0\u0026p_res_e=216\u0026r_style_s=287\u0026r_style_e=310\u0026r_img_s=288\u0026r_img_e=388\u0026r_script_s=288\u0026r_script_e=384\u0026ssn=1773328507592112895\u0026ssn_dr=1\u0026ssn_sr=0\u0026fv_date=1773328507\u0026ref=https%3A%2F%2Fwww.tradays.com%2Fen%2Feconomic-calendar%2Fwidget%3Fmode%3D2%26dateFormat%3DDMY%26theme%3D1\u0026back_ref=https%3A%2F%2Fcab.800-ltd.com%2F\u0026scr_res=1280x1024\u0026ac=177332850814291838\u0026sv=2552\u0026fz_uniq=6405493124433332859\u0026an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1024%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Win32%22%2C%22rp%22%3A%5B%22PDF%20Viewer%22%2C%22Chrome%20PDF%20Viewer%22%2C%22Chromium%20PDF%20Viewer%22%2C%22Microsoft%20Edge%20PDF%20Viewer%22%2C%22WebKit%20built-in%20PDF%22%5D%2C%22wv%22%3A%227937%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22hc%22%3A48%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A225%2C%22at%22%3A%7B%22kd%22%3A0%2C%22ku%22%3A0%2C%22md%22%3A0%2C%22mm%22%3A0%2C%22mu%22%3A0%2C%22fc%22%3A0%2C%22br%22%3A0%2C%22ts%22%3A0%2C%22tm%22%3A0%2C%22te%22%3A0%2C%22sc%22%3A0%2C%22sw%22%3A0%2C%22ge%22%3A0%2C%22gy%22%3A0%2C%22dm%22%3A0%2C%22do%22%3A0%7D%2C%22sg%22%3A0%2C%22jc%22%3A0%2C%22bd%22%3A50%7D","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-12T15:15:08.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradays.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 17 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1C:51:F7:B1:0D:46:C4:D6:AE:2B:91:31:64:58:2B:A9:2F:B8:38","sha256":"7C:01:A5:15:5A:DD:CF:5F:32:D0:76:AE:B3:99:04:97:B3:54:4D:52:2C:A2:E1:2D:4E:50:39:5B:AD:D8:7D:8F"}}},"request":{"raw":"GET /fz/st?id=xgtwjihqxpekdivhyasdmymldwnqaolegh\u0026p_di=377\u0026p_dcl_s=378\u0026p_dcl_e=502\u0026p_dc=758\u0026p_dns_s=0\u0026p_dns_e=0\u0026p_tcp_s=0\u0026p_tcp_e=0\u0026p_req=0\u0026p_res_s=0\u0026p_res_e=216\u0026r_style_s=287\u0026r_style_e=310\u0026r_img_s=288\u0026r_img_e=388\u0026r_script_s=288\u0026r_script_e=384\u0026ssn=1773328507592112895\u0026ssn_dr=1\u0026ssn_sr=0\u0026fv_date=1773328507\u0026ref=https%3A%2F%2Fwww.tradays.com%2Fen%2Feconomic-calendar%2Fwidget%3Fmode%3D2%26dateFormat%3DDMY%26theme%3D1\u0026back_ref=https%3A%2F%2Fcab.800-ltd.com%2F\u0026scr_res=1280x1024\u0026ac=177332850814291838\u0026sv=2552\u0026fz_uniq=6405493124433332859\u0026an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1024%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Win32%22%2C%22rp%22%3A%5B%22PDF%20Viewer%22%2C%22Chrome%20PDF%20Viewer%22%2C%22Chromium%20PDF%20Viewer%22%2C%22Microsoft%20Edge%20PDF%20Viewer%22%2C%22WebKit%20built-in%20PDF%22%5D%2C%22wv%22%3A%227937%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22hc%22%3A48%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A225%2C%22at%22%3A%7B%22kd%22%3A0%2C%22ku%22%3A0%2C%22md%22%3A0%2C%22mm%22%3A0%2C%22mu%22%3A0%2C%22fc%22%3A0%2C%22br%22%3A0%2C%22ts%22%3A0%2C%22tm%22%3A0%2C%22te%22%3A0%2C%22sc%22%3A0%2C%22sw%22%3A0%2C%22ge%22%3A0%2C%22gy%22%3A0%2C%22dm%22%3A0%2C%22do%22%3A0%7D%2C%22sg%22%3A0%2C%22jc%22%3A0%2C%22bd%22%3A50%7D HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _fz_uniq=6405493124433332859; _fz_fvdt=1773328507; _fz_ssn=1773328507592112895\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Thu, 12 Mar 2026 15:15:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 70\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-service: Finteza\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":70,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"48b7a1e65c0e92830152164b22a7c37d","sha1":"16f99525ed7feee4e80d1e32df48d36286cdfca4","sha256":"e3849fdc1eab88579b20b1b56875d6ef8299c4ad165e03921400ccae69149861","sha512":"8846633046618696dfe7dcf6397d2588a8334dd2349b1300eff197e336ff3193a83ab8900d6666a0d7a0a6f797d323a4aee2bd05fa7a2eb8b888f3ea85459489","ssdeep":"","tlshash":"c2a022e333c0bcbcce23803300208b38ccf0c00000200e0c080ec83f2e08200888aa83","first_seen":"2023-04-06T23:51:49Z","last_seen":"2026-06-07T19:50:13.513065Z","times_seen":1694,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 12 Mar 2026 15:15:04 GMT\r\ndate: Thu, 12 Mar 2026 15:15:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4313e6367844adc0cdb4d6ccb86b26fa","sha1":"20335f134c7817c1e9d01f8c57fa2a36669af65e","sha256":"d6a90916411b5b4b696edaefd46fd4503e5bc622c14e490a09cf0de39696d418","sha512":"23a3392e96d2bb29dd720e4e65ea2e398651f8e7626361425e932732f1efa52dc14dbcbe5751ed7137e69916480f3fd2be5ebf4ef39a43c6c6200c9e777c7779","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpQ:lgKQcXr3lVwa3RzJZ","tlshash":"f7a19bd1087be114ab831cc123ce7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T01:34:36.284919Z","last_seen":"2026-06-08T10:51:01.023267Z","times_seen":7309,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":282,"dns":0,"connect":44,"send":0,"wait":92,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 12 Mar 2026 15:15:04 GMT\r\ndate: Thu, 12 Mar 2026 15:15:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"3f76fd77760209859f0632095384b183","sha1":"2c27c7ecf39a90a5b1d153428fe8b74b1fb84fdb","sha256":"25c9a25bdbd2fc34f32463de490deb2ec46ebac48440e28f42a8c397bb2535e9","sha512":"a8f41eeb460b97985ea50afc5589480a28305f8b624808c2e44a9b5e756442c3c7b1e20fb907930fd617190b067bd399a980d0079bfe6a68e79abff856a50300","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/Z:pDS99YURRuWDyjooYhREHPM5svvYaR7h","tlshash":"f6a210a1041744009b834ce223cebf35fe1f92117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-03-01T08:19:07.909883Z","last_seen":"2026-06-08T00:59:53.218761Z","times_seen":260,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":276,"dns":1,"connect":58,"send":0,"wait":77,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cab.800-ltd.com/config.js","fqdn":"cab.800-ltd.com","domain":"800-ltd.com","tld":"com"},"ip":{"addr":"172.67.143.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cab.800-ltd.com/","date":"2026-03-12T15:15:04.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"800-ltd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 17:38:10 GMT","end":"Sun, 31 May 2026 18:36:41 GMT"},"fingerprint":{"sha1":"CD:47:3A:72:F8:07:BB:98:BF:67:E7:8B:B7:71:8E:F2:DA:E7:5E:F7","sha256":"62:77:4E:1F:DD:8A:DB:A8:BC:78:79:6C:B6:99:82:75:21:1C:ED:63:CF:0B:45:28:26:FC:22:33:04:CD:98:FF"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: cab.800-ltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cab.800-ltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 15:15:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fr%2FyT28wRugcY774cQCc6vxgJrbKgbqnyew9VjMzUKh6IdY86QGVn8cupEtfOP0FlfkIGyRvuhT%2B6ciRgh5ofb1C8Eq6OOuEj%2FAL2zZDTw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 09 Mar 2026 15:08:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69aee270-5d7\"\r\ncf-ray: 9db3c091ca7437c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1495), with no line terminators","md5":"813521fbab5dc9da1906641eec8485fa","sha1":"fa5cb07041c8675bce63a97337de2e3526f40cc3","sha256":"80e02bcaf36aae8600a73c03b0dc20adc6ef4a793c03982b007e7e9a76ce6f69","sha512":"20d2a9773effe7d837f7507ff1cc2e4385266202a2256da731d6eefac88c1797b9f4c1e03ac774cfe7dad37f8bd188467cd87d83b8ce3621309aa6e6c2139b40","ssdeep":"","tlshash":"713164171f29fc7ac2036cce57b41e3b608eb66d065b2410905ce648ef9b471d57318c","first_seen":"2026-02-11T04:37:05.883027Z","last_seen":"2026-03-12T15:39:33.538858Z","times_seen":7,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"cab.800-ltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/fz/core.js","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-12T15:15:07.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradays.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 17 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1C:51:F7:B1:0D:46:C4:D6:AE:2B:91:31:64:58:2B:A9:2F:B8:38","sha256":"7C:01:A5:15:5A:DD:CF:5F:32:D0:76:AE:B3:99:04:97:B3:54:4D:52:2C:A2:E1:2D:4E:50:39:5B:AD:D8:7D:8F"}}},"request":{"raw":"GET /fz/core.js HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Thu, 12 Mar 2026 15:15:07 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-length: 12701\r\ncache-control: max-age=259200,proxy-revalidate,public,immutable\r\ncontent-encoding: gzip\r\nexpires: Sun, 15 Mar 2026 09:14:44 GMT\r\nlast-modified: Thu, 22 Jan 2026 03:47:25 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":35767,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35766)","md5":"375322f8d50cea75c21388c4f0ba9e4c","sha1":"1ed0baa18c9c9b2db118f8308c7f2a7fbe7856c1","sha256":"981c9b6d90b87022f9969e93ac342a73b486070dcff595f59d4bc80541fd0c2d","sha512":"24007d88185c2d9432179cbd44371062467aefb76b58dc21796b81e47d7c23469b544ad11e04f6f1319bf48b62c0e1ad8a191c297f000fb5dc1097687796cd15","ssdeep":"768:85z3e+0SHAmP8WW6uRzFtBNYnaH8/H/MeQUfxh/ToO2NRqIBc9WAVFXh33iN+s6M:85yrSHAmxW6uRR2nac/H/cNRh05oX","tlshash":"0cf22aa97255343553bb107d105f2206f33a6f626d0b8590c126ec943db8d6be37beac","first_seen":"2024-12-22T16:58:23.312331Z","last_seen":"2026-03-29T04:41:52.9869Z","times_seen":256,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
