{"report_id":"2d031e30-096f-488f-b905-bf58985d8760","version":6,"status":"done","tags":[],"date":"2025-10-28T12:14:23Z","url":{"schema":"http","addr":"metagrowthtradefx.com","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"metagrowthtradefx.com/","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"title":"metagrowthtradefx.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":""}},"submit":{"url":{"schema":"http","addr":"metagrowthtradefx.com","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-02T12:14:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.youtube.com","ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2025-10-26T22:19:56.818301Z","alert_count":0,"request_count":8,"received_data":3841432,"sent_data":4588,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2025-10-26T22:31:51.186396Z","alert_count":0,"request_count":4,"received_data":100713,"sent_data":2464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-26T22:13:34.663946Z","alert_count":0,"request_count":3,"received_data":975163,"sent_data":1330,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yt3.ggpht.com","ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-01-16","domain_rank":1275,"first_seen":"2014-01-15T16:55:17Z","last_seen":"2025-10-26T22:31:50.275748Z","alert_count":0,"request_count":1,"received_data":2087,"sent_data":503,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ytimg.com","ip":{"addr":"172.217.21.182","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2025-10-26T22:36:18.156686Z","alert_count":0,"request_count":1,"received_data":2287,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-9.jivosite.com","ip":{"addr":"158.160.17.225","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1474455,"first_seen":"2023-01-19T04:34:47Z","last_seen":"2025-10-21T13:12:30.502725Z","alert_count":0,"request_count":1,"received_data":796,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget.coinlib.io","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-05","domain_rank":0,"first_seen":"2018-10-03T18:45:45Z","last_seen":"2025-10-28T01:12:31.089228Z","alert_count":0,"request_count":60,"received_data":1562294,"sent_data":32217,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"metagrowthtradefx.com","ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2025-01-22","domain_rank":0,"first_seen":"2025-06-11T15:19:43.242448Z","last_seen":"2025-06-11T15:19:43.242448Z","alert_count":100,"request_count":50,"received_data":2116895,"sent_data":25814,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Parsley.js","description":"Javascript forms validation script.","website":"https://parsleyjs.org","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Highcharts","description":"Highcharts is a charting library written in pure JavaScript, for adding interactive charts to a website or web application. Highcharts meets accessibility standards and works with Python, Angular, React, iOS, Android, and more.","website":"https://www.highcharts.com","common_platform_enumeration":"","icon":"Highcharts.svg","categories":["JavaScript graphics"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-26T22:15:30.637354Z","alert_count":0,"request_count":5,"received_data":46385,"sent_data":2724,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2025-10-27T03:42:36.835981Z","alert_count":0,"request_count":11,"received_data":1743266,"sent_data":5117,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-10-26T23:09:28.568286Z","alert_count":0,"request_count":4,"received_data":449365,"sent_data":2282,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-26T22:15:38.172198Z","alert_count":0,"request_count":2,"received_data":11966,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-26T22:12:38.002151Z","alert_count":0,"request_count":8,"received_data":281946,"sent_data":4342,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-10-26T23:09:27.879885Z","alert_count":0,"request_count":4,"received_data":158426,"sent_data":1908,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-26T22:14:00.009821Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-26T22:13:12.20986Z","alert_count":0,"request_count":1,"received_data":57933,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2025-10-28T11:53:25.100022Z","alert_count":0,"request_count":2,"received_data":19986,"sent_data":1114,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-26T22:12:37.824968Z","alert_count":0,"request_count":2,"received_data":16965,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a55b98088fa69fb6a7ddeb861e555ad2","sha1":"d7cafbe1a6546f89b21f1d8b3f72273cbde63c68","sha256":"bbd518f7cd6a176d7a1db4b243eea2abe670dc90855390b74073550da0fa2e9b","sha512":"3077be9c699f864d4682999cd96313ae60a3632222293ecdb40b5cd70024d078ce2f5adadab966bebcb2ceb5cbc782ac41a477f1cefd3281f4bce25c08810459","ssdeep":"","tlshash":"bbd097c26d08402a0924a21c8283a03ea894a001fdd4fb84a30003d4083e950e83bc91","size":227,"data":"","first_seen":"2025-10-23T09:49:41.198925Z","last_seen":"2025-10-29T06:58:08.377903Z","times_seen":578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dc33066c3993e0d50896e533fd692ce0","sha1":"bf0f90d7e8e015a04e4d25db4241e3a0a054d790","sha256":"d539cd97ca1a108f9f5e3f611d7606d84c0aa35ea1973304e479b99025124e16","sha512":"f0754820d34842af885922f27a972d75b601368a3983d53e1f933773bc06eccec333373c63346d9caa0176c498f6f74b75c00989b3a3c5bdeedd57c2a7e4fd58","ssdeep":"","tlshash":"c7100000000000000000c0000000c000000000000030000c00c0000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:08:33Z","last_seen":"2026-07-19T06:23:16.911799Z","times_seen":1148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b9ece18c950afbfa6b0fdbfa4ff731d3","sha1":"c2c53d66948214258a26ca9ca845d7ac0c17f8e7","sha256":"e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3","sha512":"b2396a002fe7aec008808687d7cbacb340b7f7a090008382f3c95870f6fb10415f61f5737c102d4bfec58fe525407ea2001e761dab1da8a501d9523921f0ec21","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000c0000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-07-27T12:09:30.576194Z","times_seen":53411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a76a8761b64702e2504b16d18126580a","sha1":"a207ab1d307987bc013f5034177669818471029a","sha256":"a5e84ec6e99b07dbf119b4ec12e5eb6b28007b2dc968ee799da3efb904b2261d","sha512":"510151b7a19a0b9ce41fc4be2949b6ae989605460bbf9910d16eab0569348c99797ac5e08f72ce2542505e6de3c875700e84ff7a9519fae1c756b4cc1204cbe6","ssdeep":"","tlshash":"d7e0c2f80162bc9a3011be0e8e97648f11acf8e6b35cba06f4149aa63615885b833d09","size":292,"data":"","first_seen":"2025-10-23T09:49:41.219767Z","last_seen":"2025-10-29T06:58:08.303657Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7c724ed206ca80c866b31e688de466a5","sha1":"3a328c9e2c22267126f8cf58e0e4e8c01ef88480","sha256":"8a29603e8c40a787e8c7377e495f1c20531c050b36b4e84d7371dbaa81d88205","sha512":"0b1eec515cdc595b8be52d8b83e60a9580f778136e62d21a55c799e484c999e8c50e076f5e00c3690b9dc86cade968f8dc42a626f2318d4020105fb053d58bba","ssdeep":"","tlshash":"87a0220c0f20ac0c803a20be222f00c08020200002f0008ce08ec2e803f83ec3bc0ece","size":78,"data":"","first_seen":"2025-10-23T09:49:41.23837Z","last_seen":"2025-10-29T06:58:08.326165Z","times_seen":570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"962dfa2b3c48205b1a20cfdbefa0c533","sha1":"4fd7c8324738580e905317a71ec0d21d82a7f737","sha256":"079125d6ce0d7f29554edd63277981d959675cfafe09fbad938277b71c817986","sha512":"791d254b535d0520e350980d0567a1d7101fff12dfb73edea99330dc2b8733645dc92ade0247aac19f9bb435642158daab6370f9ba99694b8303abaaa1a318ed","ssdeep":"","tlshash":"3ee0c026937a6c45593630f19be3b4a88d010f334a48ec3c42c182d012914fba6c4540","size":347,"data":"","first_seen":"2025-10-23T09:49:41.183265Z","last_seen":"2025-10-29T06:58:08.308508Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/hashrate-main.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"340725158184f893f44e55e4560fcb40","sha1":"103e46ce57b085a1ad5c54627eacb8d30c15110a","sha256":"730135710211b6d8fd95daeea76e0e838ba04de1bb7eec7ec8d25c6111c4832f","sha512":"229c288e646d3fd5afc97a3312b06c85ee16a266678c7e9e0041a08dfd4d52b5715601d8a836039e656fde0390beac1993faf10e9c6fff39f606551c6e769b87","ssdeep":"","tlshash":"39f0ac0dbd2601b93634209ad87cb32463b2f31ab4cec14d3534419b57c8e643ae820c","size":605,"data":"","first_seen":"2025-10-28T12:14:45.843237Z","last_seen":"2026-07-27T11:49:48.594988Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e125a9b3e8dae891a190beb17d146ac8","sha1":"94aa50f25a985ee9fdc3acfc7ad8b787ac0b4f9c","sha256":"198a7caffab903c41ce127498bc4a12a95c9d7b6a4ebb2f8d2d5e65957ba4ba9","sha512":"0fea1d481e334ee8cb756e216c2f04823e95216231e27bad968d9ab8caf625619c3c93d90ecf5c2019c77253db4d153c5eaf1c1c3fbeb310b89bfc0f92b096f8","ssdeep":"","tlshash":"50d08c88264b0ca292bb3b4b4bbfa102b0066213a0904d203d1e77449f20e27db44808","size":238,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-06-06T06:45:08.144712Z","times_seen":2720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"38002f6dace50b57bac335d4e08191c3","sha1":"051447a1c75f728e2ef72a98a3416e0f0a116cf0","sha256":"b78b4e62109a28e506ff03e997952bf140243a971b9879a0fe39680ea16afb78","sha512":"cc5c62d3d31d1369b84117fc22185c8d2af85a051b0de0fff3575a6868eb98137c7394de7d12d8c70d7af7a19d32767400337c69c88afad209eb4d6ea2f7d268","ssdeep":"","tlshash":"f78000083c0ca022200238a0c20fa0280822e0200002c8000080088a0cb822b0802c08","size":26,"data":"","first_seen":"2025-10-23T09:49:41.192583Z","last_seen":"2025-10-29T06:58:08.339924Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dc33066c3993e0d50896e533fd692ce0","sha1":"bf0f90d7e8e015a04e4d25db4241e3a0a054d790","sha256":"d539cd97ca1a108f9f5e3f611d7606d84c0aa35ea1973304e479b99025124e16","sha512":"f0754820d34842af885922f27a972d75b601368a3983d53e1f933773bc06eccec333373c63346d9caa0176c498f6f74b75c00989b3a3c5bdeedd57c2a7e4fd58","ssdeep":"","tlshash":"c7100000000000000000c0000000c000000000000030000c00c0000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:08:33Z","last_seen":"2026-07-19T06:23:16.911799Z","times_seen":1148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b8ee7577e47c352fdc097aa6a1e48c98","sha1":"18d3d20468441e16c8043c595e1ac747f23b2a35","sha256":"8e3578e5718d9a99fa0b4677b277b9399801b57f8f3c00d7d357095f1a3f92ce","sha512":"237facceadf5cf737ce313c57df32488085e69808f67e2d590edf5829e1f4c93d57b4a4b66aa215e446bf4dbbf163e870a7a6009ab6b76e41249378408d45850","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000300c0000000000000c000000000","size":2,"data":"","first_seen":"2023-03-07T13:20:55Z","last_seen":"2026-04-26T06:57:32.778884Z","times_seen":5916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"09d48f648309ce938ebff0abf946d0e8","sha1":"6a1ae16ea13a3579dc20df4a40af73f82eadec03","sha256":"a1debc347ef9a4dc91c818fa41d6683686e04b557eca80fb4e82b776266cb28f","sha512":"1cdaf6818c31b081622ba013af814fd075e07158356f677a0dc61ef0d441c1a5f3b351867c18ef496f974252a70d57020838fe37ad012ef6070f0aeaabe0090f","ssdeep":"","tlshash":"4fe02bd015232267f1551c4ff03b37151323d0daf288c55dfd4019667c644158253d4c","size":305,"data":"","first_seen":"2025-10-23T09:49:41.264106Z","last_seen":"2025-10-29T06:58:08.307703Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/our/i18next.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a80aff60a79f6c89a0a50c9eb96c645","sha1":"92d0601448dc60514d04505661cf602c3088ac9e","sha256":"95deeb4c5d331ffbf7c0afc0c53850f1a9065b00d7b91f69b3d13486ea1a6215","sha512":"28a4a0b0f9a26649e694dd28b1eb00dd9f1c269c0e5f1948d0286a63d6f1744ffe90b702cf15e55111174062d996ef0bebe2f9ea50665058ed239676e63eb879","ssdeep":"","tlshash":"67219a9920f7966450dba16a67cb3684786c805732649d003f0c4e021fb2dbba7e8fd9","size":1322,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-07-12T20:21:40.202696Z","times_seen":2890,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-27T11:59:55.833383Z","times_seen":156431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1a7a742bb38cb9426705834a5aefbcbf","sha1":"225bcaa87d2eb78c193b24ab2397d1484846eb01","sha256":"b9b859cadbdce8f953eb889086ad30de3099f69a254ec51ec31b59d18618ddb3","sha512":"f10d92a5c967eda08b412c234dd89290d0718c246a98dd4bf6980302aa2ac4cb7d8919e25b3b240d671b19ef82b1c6fb3f2e6e168e460ce1e4881e3adc7308ff","ssdeep":"","tlshash":"d6a002543d19bd445536155e576b10c440597044e2d4545551dcc15047f58494412d66","size":78,"data":"","first_seen":"2025-10-23T09:49:41.160322Z","last_seen":"2025-10-29T06:58:08.312339Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/lib/jquery.marquee.min.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2619ff525e29847f931bdfe1c428e1f","sha1":"09a10afba7ecdcba3d61de1dedc432bd8e306c28","sha256":"23b9b39ea61308052256b9921bf1c0de6698bcf0c04e3e4f2978adc86168ff6e","sha512":"041af6ae7ca726ac92ffc0047acf223a3427d9b37b93b67545c2c16c6daf5e0b31505b6cd5218ae5763593d63b77ffc5b0aa30845aba457ac578fa9dd9bd3fdc","ssdeep":"96:zcJIyUtgLICYdVun4xRx7nCbM3IJT3WHUn6cAyUMBhyv6t+ntyo2t+QE:zcZUtbDO85IT6cNfhyvj","tlshash":"52c174c5b5b5308a566b129780db07c01a794439614f8c6fb9368170bd74f881be7f37","size":5912,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-07-24T23:27:32.391012Z","times_seen":3206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b679889a0d98004c7e97231ca8ae8ca","sha1":"d72aae375b3b0995701858770e5bbf8f3436e3f4","sha256":"1adf2b9edb3a93cdfe2c470c3066b48fb5a00f87a2bea9b0d61f8b7c744c1cb2","sha512":"8c1d9b3556bfe38bcbfc641ce9bab72e8f15577a87e5f70abf0ce2dfea64572c586d618bab385b375e793095206a2f911b6c4572a7c1f732ee8c4a0ab22b946f","ssdeep":"","tlshash":"d7b0120909152c8519331438e50935c4d332b0008155059c143d971002b002e7e05aea","size":91,"data":"","first_seen":"2025-10-23T09:49:41.16958Z","last_seen":"2025-10-29T06:58:08.360138Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/particlesjs/2.2.2/particles.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bb0d713e60920e0b19da7f1ccac5abf","sha1":"c011a30f7e2d98ed72f8432610205b2bec8aef1e","sha256":"927731297aaf04300ff798331cd91ff51d4561968fd7fa4cb9a6c28a6e50e21f","sha512":"82760ade25cf7f1735cd738019bdd2cccf45a18e1df761ffc6c9c7419e3655671965a673225d25f6aa26313aaec15cc2125b6ac0cfb4a278f1b13e7f730a7dad","ssdeep":"96:5G/EE5eHg53ULbu/q5qx/rH4vh/3bnYEziywQ94az27yo7+r/e:58NUHLbCDHQiEWywQznrG","tlshash":"17d1854db8222a33930762b3213e198d3333e95da445d4b8b254c5ee5df4c416ba7b3b","size":6596,"data":"","first_seen":"2023-03-11T12:23:33Z","last_seen":"2026-07-27T11:49:48.567937Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/highcharts/highcharts.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dc936b4f5db428f2e7f273d5a78dfa5","sha1":"87dfa4ef47837b27f0e52fdce3a4a86a04f04bc2","sha256":"0075ff303b14d070e4a4bb493544498b078a489f0d4d9cde3d9207c8f77643b1","sha512":"2eb300abf31aed3a18d6f15ad05aa1e7d6ca41154ac33934a81b1838ace0f679dd3377d2d7b29f5fc265726cf9789571ed7423c2369762e16b638f3121b08691","ssdeep":"3072:FOaxFL7YAcK93YnGNYkvQR0yDgxNNSxDB3TR5skgzbr7:8a/4AcZsBvQbDUNNahWr","tlshash":"25243bc9f2513623c66733a9542f170f1133a46aa688892cbdb9c4e75d2984c367ff39","size":229576,"data":"","first_seen":"2025-10-28T12:14:45.845936Z","last_seen":"2026-07-27T11:49:48.652799Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5e20dd7b5d4cf8be3655267254a40eb","sha1":"38367e1c33afbd9baa77a8e4b2cddf79cf9916d6","sha256":"bc0cd2ae78cf793c9730040820f9655bf1ca13ba6c40ecb3e13a24316798461a","sha512":"24bc0aa0559de28841e642f67348e2d6e0e9545f3df64a77b9b8268bf207a23116747c9b4b3ea550a2a2ee859e138d761230fb1420ae9633f783ce6332d3ff96","ssdeep":"","tlshash":"94d0228212000294cb29e2f04803a9de4924a452a8090f7a9760f203ca289c7a4e7b32","size":195,"data":"","first_seen":"2025-10-23T09:49:41.24273Z","last_seen":"2025-10-29T06:58:08.296581Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5f3f5ee489af1639ff163907b9f4fbe8","sha1":"b06f40286611ef7c6803c7f097497df9dd3a8f8e","sha256":"a133f15ad595907e52f68b78b2331480e1c247375d676201a2da20c4dd743a6b","sha512":"be1f9049acb4dbe1fcb7e22d01f56d570266370ae9f0224a5396b14cc2f57305d59100ea90da6960e38496e6e61d6ea441af84173ceb6cddca9f648607fba84a","ssdeep":"","tlshash":"88a012302f654a1000405509150b03800068015dc3e0880510258aa9067c9c70032462","size":83,"data":"","first_seen":"2025-10-23T22:23:39.813741Z","last_seen":"2025-10-29T06:13:38.355615Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"38002f6dace50b57bac335d4e08191c3","sha1":"051447a1c75f728e2ef72a98a3416e0f0a116cf0","sha256":"b78b4e62109a28e506ff03e997952bf140243a971b9879a0fe39680ea16afb78","sha512":"cc5c62d3d31d1369b84117fc22185c8d2af85a051b0de0fff3575a6868eb98137c7394de7d12d8c70d7af7a19d32767400337c69c88afad209eb4d6ea2f7d268","ssdeep":"","tlshash":"f78000083c0ca022200238a0c20fa0280822e0200002c8000080088a0cb822b0802c08","size":26,"data":"","first_seen":"2025-10-23T09:49:41.192583Z","last_seen":"2025-10-29T06:58:08.339924Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"40fe070b83381ef328f0ca5d0b793828","sha1":"ac1f26f357776a519738fee8b28196f2ec015605","sha256":"196861e2fbc631f64d268e95e0f8b4c631754751c827d0f25f27658f0046341e","sha512":"52f9d4441568b644c73c7ff818d4d94966784b5b3f3438b98bd4fa3be29ae620f3398e2ab0a6a31044a05d0cd7e3ccb47f1f7f4d4b2d789c0359bfa0f2fd5e84","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-18T10:33:14Z","last_seen":"2026-06-30T13:55:23.561213Z","times_seen":885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cec8679/369.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"30b7eba39081c6885acb03c7bfc3816a","sha1":"a8464724eb1178df971681577d9849a7f149bb69","sha256":"9b0b5720603f84895b7cb5aa9e1698d5130c1100bbc91b1e1b7499d39607b214","sha512":"f4d676cbf8e509a481de019a93e14d5c87b2ec064b31727d2cd45996f93d03f9f63931a355c000f7bfacba41c73c840622561b8075cdcaf58816cbd89eb0113d","ssdeep":"","tlshash":"3ff0dc24b0c0784559a708dc527f2a0b127da1bb8a4f12a0ed25a9f02b223edc0b6cc6","size":457,"data":"","first_seen":"2025-10-21T11:41:49.879189Z","last_seen":"2025-12-08T11:04:46.44616Z","times_seen":3081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/sandbox%20eval%20code","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"db1f1d8b04db7a1543e41e85272a8e09","sha1":"f2ba9fdb924f490ab4ac63b31fc819d287579e66","sha256":"6760115119a66f9514faf1844cf29d492a51231f461999a7aba876109ba266c6","sha512":"27055411f136f35821f4651c78d6886cb9a3ca93f653d031f2d2aa202b6d5048c5c8ae5396b20792c1d1704d762cd6798a2e2c01fc89f77d40452b4730b5a38f","ssdeep":"","tlshash":"4d7000082c082a020022302c00cb800c3222000000080000002802828cf800b8002c08","size":22,"data":"","first_seen":"2025-10-23T09:49:41.206216Z","last_seen":"2025-10-29T06:58:08.381239Z","times_seen":559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d25e5ae10ec6f3c597e57b2330845d70","sha1":"4637df06e1d2bb32150e43d5107d1af664a4703d","sha256":"78994c3ed5f36dd51b0b738e7149a3b17ae911097d1422574a50c0d99fb059c5","sha512":"c97198f3051d5f33aef3ce9f828375c2211946d4449cb0b6418eb67b1acd4182da88f9be9e8f166e95bcdf604b1c172e1758e37e09054d4bfbf3014977c60072","ssdeep":"","tlshash":"93c02b09303014d101f2c412cfcbc30c534c11b1480c2abc31b0b94ccf008f0a8369c4","size":132,"data":"","first_seen":"2025-10-23T09:49:41.22785Z","last_seen":"2025-10-29T06:58:08.441937Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-07-27T12:09:30.362308Z","times_seen":295690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/parsley.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"62842dd9e1be95d8a46351ec1b6231c2","sha1":"c562933aef7b5352525ba1708b8f728c3c06e94f","sha256":"391898508a9512feaebdaa0d43fc676003dad0494eda78c687e704edb7e3277e","sha512":"d89ad3ac67bb31c49df25319c9c0766a21c8feac013872cb22fa267be70c25a752a47142017dda90abc969fb13691c7c70f87b16343c0d530a41c1af968d0384","ssdeep":"768:qX3dfyqiUXVTZ3R+a0WsQ0lgF6YClMdHoxaXA+Xni1+OY4xS8KM6fYicvI9dShJa:qp3R+a0WsQ0lKdiu8KM6fZ0J2Tz","tlshash":"e043e74a779151158eab20f92c6f71077272c725640c00d8e5adc2d2e9b9ea6d3bbf3c","size":57494,"data":"","first_seen":"2025-10-28T12:14:45.936047Z","last_seen":"2026-07-27T11:49:48.581998Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c3ee2af7ca7bbe492f11cf36a6a7cea7","sha1":"f136a6c6e6aa928d85618c0e2fee8bd048c3672a","sha256":"63ee3b90f0bc64026eafa8cde95c5f410c847be841536b7240d778688cfed72a","sha512":"2fda875abc19d928a1bdab9de6fc50e03e12e4a3088278c86f927b429b78c689949aca629545099aa796cedcdff5cb3b4a90334643bde1916e95d63165ad0f9e","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-05-16T10:27:48Z","last_seen":"2026-06-25T12:19:29.757276Z","times_seen":862,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e0ec9672be6cac914ffad34a6b077209","sha1":"de75c9fda1b02f44be79f321839ba71723d1dfe1","sha256":"9aea6f4d30f4850fad6b78383700a5b5c769326087311d4fced9d7531dcd44af","sha512":"d420244691dbb3842cf4d127f130a8ac7e7e3e1753e40687c4d4a900ab7e988aa3dbe514460e08725901e989591beeec7ebc9a1c9a60eea70fff8df2a25021e9","ssdeep":"","tlshash":"c71000000000000000000000000000030000c000000000000000000000c00000000000","size":2,"data":"","first_seen":"2023-03-11T13:35:30Z","last_seen":"2026-05-18T05:27:52.85857Z","times_seen":3394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cec8679/208.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"abc0438d493266e2733adf69d7fe9ac5","sha1":"9e807a30b82cb65facf429160ef369d20cd71dc9","sha256":"78e8409ee53cc85844dbde46a8feba275c8cdaa0aa3f4614e9def869f271ebe5","sha512":"a374d523e08ec99d8218b1d2ece6285867895c3c7a861c0990a60541ffb566d08ab3b35ca99e25cb7e9b251c69aa02fcaf6cafcf06903dd6c828cb6ab54e6983","ssdeep":"96:jZjBo+EmmfClggwnJ8/9m888OugqAw9DmN0VKe7Vv3IzrIRIe33Nh3bIotI5K6Yf:ZGaOzy8jzqTZRBvJh3xd6YSwelUiU","tlshash":"bf52ff0fef252912407f09dce8d75a61eb9c3f485820126fe1e5d8ca165ae6c4319bbf","size":14226,"data":"","first_seen":"2025-10-21T11:41:49.902078Z","last_seen":"2025-11-21T05:41:36.546026Z","times_seen":1687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cec8679/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb3236571789232e6368339efeb0d350","sha1":"0ef86b18b289800a26776baddcf82caa56cd252d","sha256":"d8c043bfb4812ace484e6199dfe3549aa0548aab66e3adba57a8341c5659015b","sha512":"c1ef24b276ef14b0cd6b647e38a4e9a6ad09629751195da969515d9f6d53c15790aefd6a16d52230b68d97a6776eb479d191bf799872b4d761df1ede92c28393","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLeRJK:C7H7ObdFkOIphZ8wjFC7K","tlshash":"8822d71ee7017f360fa613c3744e7b5376a4809592646cb5d88c826953b9bca721778c","size":10508,"data":"","first_seen":"2025-10-07T20:51:00.005061Z","last_seen":"2025-12-18T13:26:00.242365Z","times_seen":1650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"23b3e0194b2a5e69b9c307ca5b3d850a","sha1":"758e80d1ea5fd4b02fee35320a2aed9a2f627328","sha256":"09f4b9d6b4d1648e1aff2976d6fb8a6134660cfa3eb9892ecb6ac95d61123c63","sha512":"6c8ddf0cd56ad81c5f1580e08ed93b6dfd179b38d74e9cbb3918485a2777e1cbdb2f506b0e376c043fe5e113c68b86970cfc3db918614af5049a3189a734b29f","ssdeep":"","tlshash":"d1d0a7b71d44453a533b43682a37564534967414275c1f451b757455477458c56a0f03","size":224,"data":"","first_seen":"2025-10-23T09:49:41.236969Z","last_seen":"2025-10-29T06:58:08.315603Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e7bbe77e4bd5121deac337b0d37713d8","sha1":"985135fc60fd93bc2d4e786ec19d808edfdd498b","sha256":"6bb11cf48a4544e05d45233e845ea27373f2ff13bb3aba1575ac046380fe4bb4","sha512":"e8cd5b44c676ed2cfed0d9f98382ceffb3b67825f1b6ddf87d0d656acec56549e450b8a23c06559fb43278eaf62b84cc9baeb254d969f08dcb142851ff427761","ssdeep":"","tlshash":"1be0c6a2100d2014f2808abbc323639a2533bc0560478c8be802df13e8bc8c3e2b3d48","size":348,"data":"","first_seen":"2025-10-23T09:49:41.172173Z","last_seen":"2025-10-29T06:58:08.382791Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-27T12:09:30.558139Z","times_seen":57730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-27T12:09:30.377809Z","times_seen":259521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"731647e9e748865a35d0919acafaca3d","sha1":"9eb1eeb4de77eb9c787fa2d19bbceb532d690116","sha256":"36c3cac056f76f82a19fcc09dc085ef0feb359e2836083a39a4d4b5d75fbd202","sha512":"9a30155dc4196729cd2987e7a1c9b055c59db699c03f7ad1d4aad8d24be3c22b03692aacc8791926029e4c5ce72aeec923fb4a74d4a281a9dd476eee3db6e87d","ssdeep":"","tlshash":"c710000000000003000000000000000300000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-06-30T14:57:14Z","last_seen":"2026-07-11T05:46:31.238669Z","times_seen":5089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/_/translate_http/_/js/k=translate_http.tr.no.-hMpMqkA7xk.O/am=AMA/d=1/rs=AN8SPfokJoIwCp29U5JVEmLLudGQHg5D1A/m=el_conf","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef2b2b748135179c61f70910d745802","sha1":"5cde2acf310c4be643a88db9073456a255b092f9","sha256":"e468ad159728bcf94178fab4015956f124995bba98b4f74e777209706d7b3922","sha512":"805c2c0f758f9b5fd394ee0ab4f85acabf0a81946f458ceb54498319dcf65d77b9a23756dec6e19a4b8dfb93402ace335e2eb8e959eff697d2e3947ceec07220","ssdeep":"1536:XO5ccPARD+GzNeU3czwPOKJk0zRYHXVqG9fx63xyM6CdiuwNWk1:X6YzWwWKJ3YHlEFndin1","tlshash":"6173c8ccb6a674658263f5b5413f000fb23f5899e8484dacb288d8f1aeb5949413bf7d","size":76898,"data":"","first_seen":"2025-10-28T12:14:45.865963Z","last_seen":"2025-10-28T12:59:01.082568Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/infodata.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1389ffbf5c5f28f36592ddde71cc799","sha1":"d27b63158f82b1f671265631dd1b003645e7cc30","sha256":"6a61cf9a7e4023527c9fc123d1c0bb93e3ed30066d47e083adb56bfffeb13ea7","sha512":"f552964a433b77261a06747ac40476be2856e2053a3b56bf852ce398436011798b4527b20f337104301efcb71c677c034665e582a3390d0078583ede624946e8","ssdeep":"","tlshash":"d8817c18b9b5b0dc203412e1f6fc22262857e9e6f92744022f3e85cb5944b1175ff9b7","size":3876,"data":"","first_seen":"2025-10-28T12:14:45.903081Z","last_seen":"2026-07-27T11:49:48.578602Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K638SKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e5e1790a8cc8df2c1c92e64db41d40e","sha1":"f43372a0d125af9d21012d725992eba84d655df2","sha256":"b810a85fcd5e5688033076199d090bcf9566d317f04c3f675bcf29bebebc0e99","sha512":"209e2913e038d1cb138ba013783e68ed7c21daf029ca1b72e47f58c2575bf3f77f28f1dcca71d9277c5d1b4a5ca3c11f74f874db0d82e464282f8a46b2ca09ff","ssdeep":"","tlshash":"ab11926cb805763c40735b62d2bf4bac31b82593b9093d22895745fc5e316f93113c4e","size":1000,"data":"","first_seen":"2025-06-18T11:16:48.744594Z","last_seen":"2026-04-08T17:24:49.542567Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f8f57715090da2632453988d9a1501b","sha1":"6b0d31c0d563223024da45691584643ac78c96e8","sha256":"62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a","sha512":"f14aae6a0e050b74e4b7b9a5b2ef1a60ceccbbca39b132ae3e8bf88d3a946c6d8687f3266fd2b626419d8b67dcf1d8d7c0fe72d4919d9bd05efbd37070cfb41a","ssdeep":"","tlshash":"c700000000000000c00000300000000000003000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:09:42Z","last_seen":"2026-07-27T10:42:52.532297Z","times_seen":61010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1b12288cff580027a3b9431b4b9ef1ba","sha1":"1b3b95adda8c6a73951c1a8058a1eea9670e602b","sha256":"0dfea3c85c2ca5eb7e26a1e50d869b28eef0e8e4d06f7de95beed502e688d717","sha512":"5269dc9cfc27a2a9c1f9e6eca44cac9648aca8d2b7081d8111499c44687e87786a4712a319064dc6424874ac758928874a34c11d250aa85a7abab071c586d66f","ssdeep":"","tlshash":"c71000c000003000000000000000000000000000000000000000000000000000000300","size":2,"data":"","first_seen":"2023-03-12T19:03:08Z","last_seen":"2026-07-22T17:35:58.156019Z","times_seen":2288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"db1f1d8b04db7a1543e41e85272a8e09","sha1":"f2ba9fdb924f490ab4ac63b31fc819d287579e66","sha256":"6760115119a66f9514faf1844cf29d492a51231f461999a7aba876109ba266c6","sha512":"27055411f136f35821f4651c78d6886cb9a3ca93f653d031f2d2aa202b6d5048c5c8ae5396b20792c1d1704d762cd6798a2e2c01fc89f77d40452b4730b5a38f","ssdeep":"","tlshash":"4d7000082c082a020022302c00cb800c3222000000080000002802828cf800b8002c08","size":22,"data":"","first_seen":"2025-10-23T09:49:41.206216Z","last_seen":"2025-10-29T06:58:08.381239Z","times_seen":559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/setting2.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e4eb01f56d84d868639b44eb18a86b8","sha1":"fd7e8de96fc8a7c7233066e8775c0306e63a6889","sha256":"5cd353906115360ea6a5b79dc78e70d6b8b24f55a4fc51187b4cb8cd8299f063","sha512":"e7ee6bde72814f1f078442bc72a2f3eb62095ddea5fd7dcf8f7f8f973853e463760f2e7c0fc165527dbb8fcb8d1ef447bc14c511466892e0298c9adb60f1b47f","ssdeep":"192:t516hUllH5i5JvgglrR5J4zCwlq5J4zQglRr5J4zQgl15Zpu0glk576LNjv4yOT7:t1Wxs47l/Tlll5","tlshash":"608209f3724a483822ef516a212cc7892b7cb573dc621487dd192914e663792c86ef7a","size":18231,"data":"","first_seen":"2025-10-28T12:14:45.863442Z","last_seen":"2026-07-27T11:49:48.577477Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f23a3cc01b366ca9f04ef4de766d7b5e","sha1":"7c4e170e24d96e007b316ee6f35fdbe8a2c697c3","sha256":"ad563ad5c455691e2265b771b5a79b085496463ba0cc24629aa2e9436484daf1","sha512":"7bd963479285937e32e471ff0539f44a58fa10d68b1fff1d3f31087289c1267773b145f9cdac7e187d4e33bd19c0a246baa752000e06e7e5e14c9ea695703c78","ssdeep":"","tlshash":"6ae0c0db70521c72619f89b633b5e5247153260db8091c22fdfd88242f9899b481619c","size":421,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-12T20:21:40.240228Z","times_seen":2785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d20caec3b48a1eef164cb4ca81ba2587","sha1":"d160e0986aca4714714a16f29ec605af90be704d","sha256":"72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa","sha512":"242dccbd15e40f8f78cb6fc54cb9894713b7682afd1305d5230e26f2fda96fd764061713e4954e22457b37f25c328e8342c2bf6b55844610cd0756fd02271aef","ssdeep":"","tlshash":"c700000000000000c00000300300000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-07-27T07:03:40.041153Z","times_seen":83396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b679889a0d98004c7e97231ca8ae8ca","sha1":"d72aae375b3b0995701858770e5bbf8f3436e3f4","sha256":"1adf2b9edb3a93cdfe2c470c3066b48fb5a00f87a2bea9b0d61f8b7c744c1cb2","sha512":"8c1d9b3556bfe38bcbfc641ce9bab72e8f15577a87e5f70abf0ce2dfea64572c586d618bab385b375e793095206a2f911b6c4572a7c1f732ee8c4a0ab22b946f","ssdeep":"","tlshash":"d7b0120909152c8519331438e50935c4d332b0008155059c143d971002b002e7e05aea","size":91,"data":"","first_seen":"2025-10-23T09:49:41.16958Z","last_seen":"2025-10-29T06:58:08.360138Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/highcharts/highcharts-3d.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f04ad1bd13f9f28b6cf8e8f94c8e9d4","sha1":"4fe0728853f9cf43dd463e896007f7098d4b59d7","sha256":"1f512d5564e18bff6a885e77ba65f6f7850e0cfcf1332c1f8647051f4320b6df","sha512":"a038e1e07716fba721e5b0955c88e155af6b2eb923b4e179d1877ae95db42abf49b8318a80e358023572f842490e6d3c946ae4c6e62b5aa07b15aa5f1c476f2d","ssdeep":"768:awcnjDu3vbjaBUze8Rpm0HVWfMEF7sVsOINFFa8/E:UDAwUzXSm88","tlshash":"1603d965e42339ab7b2a53e9bb7b134a113f133dd009891c3449e2e60db588d572ef39","size":39759,"data":"","first_seen":"2025-10-28T12:14:45.900952Z","last_seen":"2026-07-27T11:49:48.654622Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"714c10f6202a501d26ec9bde0fa2db16","sha1":"82c8441f29c14b07b991bc69f376efb87e4fc01a","sha256":"54211fbaef13be45499c24d6574a16fce4809095283beccf3f18ee75e8b94717","sha512":"ebdaff463483d5c98bd86184fa51c49fcc1bde463f54fc35a7f6c18ee4df44d4ebec5dbe13d6cc1f5dd3e9deefeafedaaf2dfd83e05f09805d0d5f61edf6acb2","ssdeep":"","tlshash":"c71000000000000000030c00000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-11-27T17:50:43Z","last_seen":"2026-07-15T21:42:37.955681Z","times_seen":5702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a55b98088fa69fb6a7ddeb861e555ad2","sha1":"d7cafbe1a6546f89b21f1d8b3f72273cbde63c68","sha256":"bbd518f7cd6a176d7a1db4b243eea2abe670dc90855390b74073550da0fa2e9b","sha512":"3077be9c699f864d4682999cd96313ae60a3632222293ecdb40b5cd70024d078ce2f5adadab966bebcb2ceb5cbc782ac41a477f1cefd3281f4bce25c08810459","ssdeep":"","tlshash":"bbd097c26d08402a0924a21c8283a03ea894a001fdd4fb84a30003d4083e950e83bc91","size":227,"data":"","first_seen":"2025-10-23T09:49:41.198925Z","last_seen":"2025-10-29T06:58:08.377903Z","times_seen":578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c3ee2af7ca7bbe492f11cf36a6a7cea7","sha1":"f136a6c6e6aa928d85618c0e2fee8bd048c3672a","sha256":"63ee3b90f0bc64026eafa8cde95c5f410c847be841536b7240d778688cfed72a","sha512":"2fda875abc19d928a1bdab9de6fc50e03e12e4a3088278c86f927b429b78c689949aca629545099aa796cedcdff5cb3b4a90334643bde1916e95d63165ad0f9e","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-05-16T10:27:48Z","last_seen":"2026-06-25T12:19:29.757276Z","times_seen":862,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e0ec9672be6cac914ffad34a6b077209","sha1":"de75c9fda1b02f44be79f321839ba71723d1dfe1","sha256":"9aea6f4d30f4850fad6b78383700a5b5c769326087311d4fced9d7531dcd44af","sha512":"d420244691dbb3842cf4d127f130a8ac7e7e3e1753e40687c4d4a900ab7e988aa3dbe514460e08725901e989591beeec7ebc9a1c9a60eea70fff8df2a25021e9","ssdeep":"","tlshash":"c71000000000000000000000000000030000c000000000000000000000c00000000000","size":2,"data":"","first_seen":"2023-03-11T13:35:30Z","last_seen":"2026-05-18T05:27:52.85857Z","times_seen":3394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/NdZwMJwE8E","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6324a7460c27424a46c33e02585c5e2","sha1":"09daae70a17c6fc2f0502dbfd50b6020a8fc9cfb","sha256":"486cfa653a6adb758b1076d3be6689c0b02901e6e334992a8ecd68bd19ac6a82","sha512":"6bf0254038bb9d7743c8d1a09b3e0f8edd94039c6f0fc7c2ffd81ee626cd10180e18f9c5b21a75d02e5800b5cb1a90e86bcfd8d3622f4cb70c03059f3aac70cc","ssdeep":"384:boUJJkQamum040jrANKcX7HMiqJISEeJBz8U08wYWcPY4:6tMgA7X7W98UFWcPY4","tlshash":"21822b6e7959b97743b208f9606f6209733549ebd404c920a401ea4d7db8adf813fef8","size":18079,"data":"","first_seen":"2025-10-27T13:48:58.207743Z","last_seen":"2025-11-11T02:58:10.053487Z","times_seen":988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/player_ias.vflset/en_US/embed.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e08194809adeb63139c0d3edc1a4a53c","sha1":"68c6705a036587a3643784d51008a2ca26ab8ee4","sha256":"c0b1fc893f3608cf111918e74475567eb58f8d3163ad6578b2d45030ef76540b","sha512":"72a3150d0c11efcb8602fa799f9d1ac27eeaad2ded033ac5f71765fe784a68065b2f15e47606cd5a94383e2e38ce938d7a7b9bfc91e2bc9c758654a77c2a9688","ssdeep":"384:UyJAaJpr+3TDYRgyq+e8Nb/XKCcdwxEUTGX4yIdEDTLCEqF9uYUj+/pMio4G5Z20:lK+1Nby0EUTG3IdEDC8+/+ibG500","tlshash":"00e2d88e37e2e4259566e1ee2c4b1108673794cc58a0a36c763edde96db0e18707bf34","size":33155,"data":"","first_seen":"2025-10-23T13:13:48.054041Z","last_seen":"2025-10-28T15:50:21.953913Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7f70f81575bf628c531d49b5501eeffe","sha1":"04696a01293b0cc2461743451c9d82b689d36e7b","sha256":"4a34d878c49334edfdfadef9fa4e3b177208df22461e02603434f1c3940de806","sha512":"6b6aaffc0053e9c15f0da94098a5a19a6185639ef27ab0f7179eeb2246954517db5ed93d8accb3260cbbf52a144e16b654350eedac64da363cb0950f81040f73","ssdeep":"","tlshash":"57b0120809152c8519331438a60a35c5d331b000855609cc103d571003b002e5e06eee","size":92,"data":"","first_seen":"2025-10-23T18:00:22.132446Z","last_seen":"2025-10-29T06:55:58.097873Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e261ff47de98e00f58601df0f7982d4f","sha1":"14161dd448d49882be4f1f19785304bc6f4a6168","sha256":"c74fdcf7d2eb93e512d06ab79907a9b9cf64fbd294e1bbbc8ca1d20357ad42ab","sha512":"786ae56188a73c07703e2b7d2c5d615f2841207c65609d1378ecc3000ef154c39e7ad7ae421f7b514c023914a80bef8354a082e594c53feb8055a0412b5e7d8c","ssdeep":"","tlshash":"f4a022083c0cb828203330ce023f30a800e220080bc000cc808fc08a03fccc2308bcab","size":80,"data":"","first_seen":"2025-10-23T20:00:43.493099Z","last_seen":"2025-10-29T06:49:46.560782Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ea35635b801e2aa39521960170e9d215","sha1":"4b6628e924eab60965c20486fe92ed67cb048f85","sha256":"e0ec24a79a58654ae3383e645b0103d861173f251de0cb8617746c2d617c8002","sha512":"d6643cbd71bd73bd0857b966725b733bc2b1ff1ebb24e507e3447fe04ecde1e3da60cb445822092b2957dbe51f4c9ca366663e191f97418e3a1aa169b1aa509f","ssdeep":"","tlshash":"a7a022fc38022ce00c2a302e300a0000c3b3b080c8803ca8f338c8830bf028a2083c3b","size":73,"data":"","first_seen":"2025-10-23T09:49:41.197594Z","last_seen":"2025-10-29T06:58:08.302862Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"67661faa87a6c25721814edd5bfa3cfb","sha1":"f1606e5dcd2c694412c2d7db4bc50627b59ad5bd","sha256":"656873503dc94fce8b0bf168077f935d3329aa753a0bcbef7e4c814dc3b68ef5","sha512":"e5563c1e1976cb97b071a63e0ee7ed8fa48836b5f4735b45cb2e072875df307b6be54e84b1982c7744eeb9cf4047963443ff94762c289b32542d6064aed2ccf2","ssdeep":"","tlshash":"f47000882c08200000223028000b880c02aa0000000000a0032030820cb000bb00ac8a","size":22,"data":"","first_seen":"2025-10-23T09:49:41.262909Z","last_seen":"2025-10-29T06:58:08.395254Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/-OO6MGtmchM08s3sRZXyR_6lGS4ObP0hfDF-R89BwfI.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ba81f0c6d06ba16ed829e84c6e8db30","sha1":"a817c0e81a923df985f0efec4ca0b7865f3d2b01","sha256":"f8e3ba306b66721334f2cdec4595f247fea5192e0e6cfd217c317e47cf41c1f2","sha512":"fd68626761a945fa1948c09d231bd6b18fd97392bc71a1cb868f29f024d09f935fa97fbec9d08ba75f7e08cbe74011c65e766b55bbb61ce6118dfe895dbcf5a8","ssdeep":"1536:jRmTnbVuMiLcmbLCGLO4OXqlJF2lCBV0j6DjewwxHEhSIHHDr:+bVunLbGGLOklBBV0CjetIDr","tlshash":"99430acf72c673269af260e50117520966ba7844ac981c5fba19e7f05fb898f443bf34","size":57100,"data":"","first_seen":"2025-10-23T09:42:06.420442Z","last_seen":"2025-10-29T06:58:08.195977Z","times_seen":620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6b8f0029ce30f9b4d5fe0def33875511","sha1":"62bd650a8380e4c0ba1db576801b7a1f4725de18","sha256":"b4777ccc172fb07e66e76582fcbae01af9154cbdc596c1f66aeae210c9f5b3a9","sha512":"9fdac7a9a15fe0e84fd4ba43f4f4fc45cbba7e3eaed9435c26abefafb875bc6b410fd9210c3efe929848ee5eab55d337441b66a18b5a29002742e3198d2b4fce","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000c00000000c00000000300000","size":2,"data":"","first_seen":"2023-03-26T10:23:38Z","last_seen":"2026-04-17T06:31:06.643919Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1671797c52e15f763380b45e841ec32","sha1":"58e6b3a414a1e090dfc6029add0f3555ccba127f","sha256":"3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea","sha512":"87c568e037a5fa50b1bc911e8ee19a77c4dd3c22bce9932f86fdd8a216afe1681c89737fada6859e91047eece711ec16da62d6ccb9fd0de2c51f132347350d8c","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-07-27T11:52:55.900702Z","times_seen":63968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12d3e294a4b82f6c96c7a3cb70c2df76","sha1":"c9532547ed2c86c5a94d31b99b31280071c2db77","sha256":"0bf6dea8ea0958185d3c5dc20ecab8e8173470e2c3e5e109dd5c8c850798f928","sha512":"9bae3cfaa020944027e26e2e4397b44844a1964115ae751ab4ac714dabdc6862b7fbfcc28b049c413f6d1f6b7d15f2cfdff30d974eef1375b9ffc8c6d12e4565","ssdeep":"","tlshash":"3bc048c40433e2c420a767060bd715c43032990760b2880c3f5e00462fe0cce838ba68","size":171,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-06-06T06:45:08.147928Z","times_seen":2660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"00577c98fc0f6a34c3039d73784d2435","sha1":"d8c30128c6cb83b71aa1db76e5005874ea4b899f","sha256":"4b7161bca4527ec40621e68a86a9510bb76092b1c62066efe119b5df39a2a1b5","sha512":"207766ed9ac251d2f2b75cd67321c57643ebbc80390cc2ba53b46faf6e63162e39849df23109fe2741987845cf9b1207e5935e847d12bc5dbd68aed300de3a62","ssdeep":"","tlshash":"e0d02b66531c1119f184449bd313932931635c092743845ed0018e97fd5d487e0b3d0c","size":282,"data":"","first_seen":"2025-10-23T09:49:41.163684Z","last_seen":"2025-10-29T06:58:08.313114Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/template.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a5df9341c0f2ed30d7f9b320d33e6f4","sha1":"682fc6142620e0c98959d8fa1697a0b107253e42","sha256":"78eee6c6470610a3f08e49ee59eedad01a74bf08bf2a596f127e81bfa3ab496a","sha512":"418db63d678c698b6821e8ebf5cc2406560fadbb58ad103074ef6a19593e549930a425751a146cee18c4cc3692caf2fce24d58813fe53efc2b43ed7ef52475e7","ssdeep":"192:3VC1CW1CazqJQAR4aKNQtb9HJl9DZHoke:lCrFKiQBB0","tlshash":"4ae10c4db5fa208261b7707a4abf46543971602b5289de017c8f6ac01fd813cb7b6fad","size":7002,"data":"","first_seen":"2025-10-28T12:14:45.91828Z","last_seen":"2026-07-27T11:49:48.673845Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e7bbe77e4bd5121deac337b0d37713d8","sha1":"985135fc60fd93bc2d4e786ec19d808edfdd498b","sha256":"6bb11cf48a4544e05d45233e845ea27373f2ff13bb3aba1575ac046380fe4bb4","sha512":"e8cd5b44c676ed2cfed0d9f98382ceffb3b67825f1b6ddf87d0d656acec56549e450b8a23c06559fb43278eaf62b84cc9baeb254d969f08dcb142851ff427761","ssdeep":"","tlshash":"1be0c6a2100d2014f2808abbc323639a2533bc0560478c8be802df13e8bc8c3e2b3d48","size":348,"data":"","first_seen":"2025-10-23T09:49:41.172173Z","last_seen":"2025-10-29T06:58:08.382791Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"00e2f52c4ea9a4da20c30e0d8f6eadbe","sha1":"611f3ba881be4af66f17665c06dbe52dd29942fa","sha256":"71d1b26f587508a97ee80f9525d0f03aec840e8aace66b321b0509a819f80424","sha512":"8988cfe7c2da301109ad8f854771a51e46c74108393bb22288d53bd5801d855d3e91acff7fb40617b212288296f5305229c1a5fc4c6b4a37d098bb2c610bb392","ssdeep":"","tlshash":"5f90028961b160064711711502260645f596254170270f7bc1455542299a514c562e0a","size":49,"data":"","first_seen":"2025-10-23T09:49:41.252108Z","last_seen":"2025-10-29T06:58:08.317587Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"17a931ba9905835dd08db446b3d33e1b","sha1":"654dcad6b2524ec789bb7a71821360cb7f734853","sha256":"f5cbed1751cd629fd435acd5a8dcc13f4c90ceadf7388b9b39736fa79a62fd08","sha512":"53df2a68ff153757166a32807c9ceb26391cf9a68ab10b67e73aa59c7f06a73bc3bafc02c4f68776887ccca59e1de82450888e3e61cc8f913f533a01ea7176b3","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000030000000000000c00000000000000","size":2,"data":"","first_seen":"2023-05-01T20:08:09Z","last_seen":"2026-07-11T14:03:14.742515Z","times_seen":957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f2ac2b55b3858f875bfa8ff50f59dc1","sha1":"4eba6db545d8eb6f9cafde03eb62bd61e1cfb6b5","sha256":"f68707613dab1783821b6d8c3f928f60dc11b969469c74b642358b283205699e","sha512":"6746c5a04b499d891b9eed16bd338ca3c7250e9c1a4f9c5d72c15f73e578c44098409e0496bfa8d66bece155e0637a7c12725911a0ffeb5a3d226479a81f1644","ssdeep":"","tlshash":"3da0220c0f20ac0c833a20be222f00c08020200002f200ace08ec2e803f83ec3bc0ece","size":78,"data":"","first_seen":"2025-10-23T09:49:41.273178Z","last_seen":"2025-10-29T06:58:08.384677Z","times_seen":564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"09d48f648309ce938ebff0abf946d0e8","sha1":"6a1ae16ea13a3579dc20df4a40af73f82eadec03","sha256":"a1debc347ef9a4dc91c818fa41d6683686e04b557eca80fb4e82b776266cb28f","sha512":"1cdaf6818c31b081622ba013af814fd075e07158356f677a0dc61ef0d441c1a5f3b351867c18ef496f974252a70d57020838fe37ad012ef6070f0aeaabe0090f","ssdeep":"","tlshash":"4fe02bd015232267f1551c4ff03b37151323d0daf288c55dfd4019667c644158253d4c","size":305,"data":"","first_seen":"2025-10-23T09:49:41.264106Z","last_seen":"2025-10-29T06:58:08.307703Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1091c7cb8745ba07537e9a643a922dff","sha1":"405338fa2512c979e6cd7c3c8824dd8f23f72631","sha256":"96ba366409ec45a9a63110c0e0daaedde104add732df7036b35756f043e4963e","sha512":"d00066f8caa31b2e213e7e8cbeaa6b15c96a8e713eebded5df2c14a131a61b3aed999aa3f849172b7ec3e3c2565d5fa2d2ffe087de17fef8afc593b83566b229","ssdeep":"","tlshash":"b221668a7b457b47a6b144cd8aeb12281168f439947c7c8fdc8093750984357402af0b","size":1376,"data":"","first_seen":"2025-10-23T09:49:41.15097Z","last_seen":"2025-10-29T06:58:08.333514Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"49aa3c5e88aa4f7af6adbcd284295ea7","sha1":"62b446ddc8db907f3e87f5c0b94c471315109a9c","sha256":"5abda9f2055b6cdb671dfeeb4be764509f7825c5ad503c50334839136f0b6c8d","sha512":"c1330d8dec261f96969e33002a516dc968d1c73bd2e71b104a7fc7b6ea54b072370c83a2197461529f1ed3da5bed5daf14fe791b136705d887c43866787268ae","ssdeep":"","tlshash":"c710000000000000000000000000000000003000000000003000000c00000000000000","size":2,"data":"","first_seen":"2023-12-01T21:29:02Z","last_seen":"2026-03-24T06:46:41.023481Z","times_seen":1239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1f4836eac76eb4214c31e5cc9a68d273","sha1":"9999dab16a0647656dc57e2b39a2e0d5cf8f835c","sha256":"529b57f0e0db6cc6316c779bf36649119534a3668abe4e1a85018ca3234d99e2","sha512":"788206c0c8a607f8efd0bdba8b657d604e184e8fe7f6efa5a2d60d7a85501832c8689d58cfd7b6da61b1200f16f9b3483f4376dbd24472913afe18c1cbcb5a3f","ssdeep":"","tlshash":"c710000000000300000300000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:08:33Z","last_seen":"2026-04-17T06:31:06.64187Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b7a37bb8a8c7be1af62746f3b1f483b2","sha1":"8f40ca6f7de4ce11d19e84fedd6772c7de1771bf","sha256":"18a99a340adaa54193189679ed39694dd1db82cda6639fc7ef0893d639abb464","sha512":"f68513b62de6c3ab16d8347edf036142f764ee34c75775e3fe40bcabed65f1b27f0cb656ab7ce23066d8b8d217ecb08d16e005dce1305c711a5179a8a5ebc658","ssdeep":"1536:zYTnbVuMqLcmbLCGLq4OXqlJFKlCBV0j6DjewwxHWhSIHHDz:CbVurLbGGLqkldBV0CjejIDz","tlshash":"f44309cff2c663269af260f901175209667a6444ec981c5fba19e7f05fb898f443bf24","size":59296,"data":"","first_seen":"2025-10-28T12:14:46.009168Z","last_seen":"2025-10-28T12:14:46.009168Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b774effe4a349c6dd82ad4f4f21d34c","sha1":"51e69892ab49df85c6230ccc57f8e1d1606caccc","sha256":"0bfe935e70c321c7ca3afc75ce0d0ca2f98b5422e008bb31c00c6d7f1f1c0ad6","sha512":"58007911bf9f66711ef65e807b26c396a2d6fb464f4381520c5d4a575dbb81510f79d35e349604128a771acf2a117a2afdedc012d83b0eb822668aee0def4747","ssdeep":"","tlshash":"c7000000000c00c0c000003c0000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-27T10:42:52.634778Z","times_seen":47290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"31be0d5246cd8b12009b47c15c1f099f","sha1":"ed73009c3454cf1bd35017dff605cf153804314b","sha256":"7165f0855ecf150a13b351543362f94f2c22dd47685b75ceeb89c2e59400d36e","sha512":"e1381c2159c9719d515b23993dfab84dc3e9296dc24ba1056bcf5ddee9deb4d8a13ce6f458f9f898d1cfc4d057ee819e97e6175b52833d2807d3e46da5f7de3c","ssdeep":"","tlshash":"47c08c2a3a6da589798511f9939f274e866fa400d41e28d4808096512bf096a2823c1c","size":163,"data":"","first_seen":"2025-10-23T09:49:41.179152Z","last_seen":"2025-10-29T06:58:08.313928Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7c724ed206ca80c866b31e688de466a5","sha1":"3a328c9e2c22267126f8cf58e0e4e8c01ef88480","sha256":"8a29603e8c40a787e8c7377e495f1c20531c050b36b4e84d7371dbaa81d88205","sha512":"0b1eec515cdc595b8be52d8b83e60a9580f778136e62d21a55c799e484c999e8c50e076f5e00c3690b9dc86cade968f8dc42a626f2318d4020105fb053d58bba","ssdeep":"","tlshash":"87a0220c0f20ac0c803a20be222f00c08020200002f0008ce08ec2e803f83ec3bc0ece","size":78,"data":"","first_seen":"2025-10-23T09:49:41.23837Z","last_seen":"2025-10-29T06:58:08.326165Z","times_seen":570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-07-27T12:09:30.530622Z","times_seen":266494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1837f943e45276041318f380711d9d46","sha1":"244c954f93ebf7e4e5ae446b5f7b48d60e39dd8b","sha256":"7ef0fe1d58f3400ac78e89ac6a1023e4e234d9afc69f58b4c7bf55f07a772e40","sha512":"208c2361b300a5150c70931765a56652556f55eb0b70fe2f44ceb9fa3759f42aff61521c0bd68f8fdd9f6ee1ea9cc7effd64a66ccf2c940ab03267bddfe1a306","ssdeep":"","tlshash":"c710000000000000000000000000000000030000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T12:48:39Z","last_seen":"2026-07-23T20:03:36.208823Z","times_seen":7093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfcf28d0734569a6a693bc8194de62bf","sha1":"a36a6718f54524d846894fb04b5b885b4e43e63b","sha256":"333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3","sha512":"da637b3f32d7c7e410ab619520e0cf4529169a5c326ecbf4ca7a3bc2330ad49a84fba4d6c8919264eec5dc75ef80137f78cda40e26f3f741b5c9ff259d6efdbf","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000300000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-27T07:03:19.144823Z","times_seen":67922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b9ece18c950afbfa6b0fdbfa4ff731d3","sha1":"c2c53d66948214258a26ca9ca845d7ac0c17f8e7","sha256":"e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3","sha512":"b2396a002fe7aec008808687d7cbacb340b7f7a090008382f3c95870f6fb10415f61f5737c102d4bfec58fe525407ea2001e761dab1da8a501d9523921f0ec21","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000c0000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-07-27T12:09:30.576194Z","times_seen":53411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"06f336ca4fbbb523a7ea02d3f8544408","sha1":"17944edb2edf27afc1a6d7eb5fff9d216ede0fb5","sha256":"5d9de131a6d444658eb762d0ff8089ece30a5897102608f31bdc5e8df2767499","sha512":"2aa3c0cecd3c534164e40a0b1d3481789860222173dbeab07f162da40b9288753acb1b2a631efca36917feaddf088dc77514e6199edfbfd3202be02c4b1476f3","ssdeep":"","tlshash":"f8c012965286906597c0546741236234e4d71489dc0915f75302f61de5b150a2426a41","size":180,"data":"","first_seen":"2025-10-23T09:49:41.195449Z","last_seen":"2025-10-29T06:58:08.45523Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-27T11:52:55.935311Z","times_seen":63457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"42eb9ed18abc3b3ec8b926e54ba0d7aa","sha1":"08289098e3af978fda58729202ee7469a939fedc","sha256":"78c2ce83ac6dc6b016d571553e1ce0143b31b775c5c6c60a67df060f1602af2f","sha512":"cb2ab491d0bf26cb1628cbad297ffa47661040fce6c908cfe98dd78263e46fd43bbf61f0e40e00b834d5b7b5dd1c0d221f9f673a678f01147d14e755951102b6","ssdeep":"","tlshash":"69b02b9500a2ac112631d0c0131e4283353b6880f0080d5b63c0c3301a4000d8331a48","size":129,"data":"","first_seen":"2025-10-24T02:53:21.027043Z","last_seen":"2025-10-29T06:48:20.382404Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/_/translate_http/_/js/k=translate_http.tr.no.-hMpMqkA7xk.O/am=AMA/d=1/rs=AN8SPfokJoIwCp29U5JVEmLLudGQHg5D1A/m=el_conf","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef2b2b748135179c61f70910d745802","sha1":"5cde2acf310c4be643a88db9073456a255b092f9","sha256":"e468ad159728bcf94178fab4015956f124995bba98b4f74e777209706d7b3922","sha512":"805c2c0f758f9b5fd394ee0ab4f85acabf0a81946f458ceb54498319dcf65d77b9a23756dec6e19a4b8dfb93402ace335e2eb8e959eff697d2e3947ceec07220","ssdeep":"1536:XO5ccPARD+GzNeU3czwPOKJk0zRYHXVqG9fx63xyM6CdiuwNWk1:X6YzWwWKJ3YHlEFndin1","tlshash":"6173c8ccb6a674658263f5b5413f000fb23f5899e8484dacb288d8f1aeb5949413bf7d","size":76898,"data":"","first_seen":"2025-10-28T12:14:45.865963Z","last_seen":"2025-10-28T12:59:01.082568Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68a9e49bbc88c02083a062a78ab3bf30","sha1":"dc1885915a8902bc29de6d834477a26d748b60b8","sha256":"ac0f09c0f8bf5e7a4b063d863255f16d8ce9abe600e288d934cf313bcbff63eb","sha512":"6602e08c09c6865e743271e8ce9006021afc91d0c7b89b5ecde757b5517e6e004a86024e4b78f8a184beaa8dca513a9d2d5cae93634d29a34c5d75ef7c74e210","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000000c0000000000003000000","size":2,"data":"","first_seen":"2023-03-07T17:31:48Z","last_seen":"2026-04-19T17:57:58.650236Z","times_seen":738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d8bc311638ed969fc9d07b523f2e8db4","sha1":"41c89d9fa3f82192bdb577b2f4a89dd65c7169aa","sha256":"8e27025edef1e871b17af0890504e9487d41caf3f6651b86f8f48a823a46fced","sha512":"c54810dd7068a660e2e052d097acc2e62fb8bf39260a6433ab645fc136ee1b690961f2ab424ba481cd108a4f439cb635d25ba9760ec594f01e238260a6e05420","ssdeep":"","tlshash":"bfa011282c28a828203230ee022b208800a220082bc000cc808a800203bcc822083c2b","size":79,"data":"","first_seen":"2025-10-23T09:49:41.166036Z","last_seen":"2025-10-29T06:58:08.394369Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0afeb2678ef2690e93da3dc086123b65","sha1":"903f697bcedf1c2105b04112c8711d5eac3058f4","sha256":"450ce697d6a9f4f9b8b00646f60895db6a49f973cc6d282338bc606425697bff","sha512":"a51e66d175d9a6c3eab6dea26d65aae5691892e7aef3371729179f1e06f5bf74e63c0ab855b170874434a889a943a941d115128f640a4b6793a71ffb9ea3960d","ssdeep":"","tlshash":"d6e0201a73570057569a2485b4170ecc9bb22556fc693cdf86556fa05458dd2009d941","size":327,"data":"","first_seen":"2025-10-23T09:49:41.16715Z","last_seen":"2025-10-29T06:58:08.465194Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf7074ea243907393cfd52402d53087a","sha1":"d069372d92a3e8ea0bb79dbf836ada859cb07cab","sha256":"113dbb7af0fd458b2dffc0f98fa4f530e18cd1d3429a251497b9184901e39d33","sha512":"3518dfdc6dffa01366583555051c213d5f34901418a7b88944369c76e2fea47022746c2ecaf69908f0229c2c2939b759f03d7948f74af6d912aa25c17db6c3f9","ssdeep":"","tlshash":"cdb09bcd5b191843543555795017116dd131600095d0f7c4452cd17487f10d32805f19","size":119,"data":"","first_seen":"2025-10-23T18:16:10.784675Z","last_seen":"2025-10-29T06:52:56.45173Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/highcharts/highcharts.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dc936b4f5db428f2e7f273d5a78dfa5","sha1":"87dfa4ef47837b27f0e52fdce3a4a86a04f04bc2","sha256":"0075ff303b14d070e4a4bb493544498b078a489f0d4d9cde3d9207c8f77643b1","sha512":"2eb300abf31aed3a18d6f15ad05aa1e7d6ca41154ac33934a81b1838ace0f679dd3377d2d7b29f5fc265726cf9789571ed7423c2369762e16b638f3121b08691","ssdeep":"3072:FOaxFL7YAcK93YnGNYkvQR0yDgxNNSxDB3TR5skgzbr7:8a/4AcZsBvQbDUNNahWr","tlshash":"25243bc9f2513623c66733a9542f170f1133a46aa688892cbdb9c4e75d2984c367ff39","size":229576,"data":"","first_seen":"2025-10-28T12:14:45.845936Z","last_seen":"2026-07-27T11:49:48.652799Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-27T12:09:30.558139Z","times_seen":57730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-27T11:52:55.935311Z","times_seen":63457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd7536794b63bf90eccfd37f9b147d7f","sha1":"ca73ab65568cd125c2d27a22bbd9e863c10b675d","sha256":"a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c","sha512":"32b1786eca2b9f815b4c52b999e2b34dae877a86c00e8f745e7ac23388665c0703a947085bd7f975c5210ffab9b5a8f3931ab40b26cd7bccc4d7690cd19a4277","ssdeep":"","tlshash":"c700000000c00000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-27T12:05:28.88845Z","times_seen":54840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e50eb7598b580311bab8f39bb8f4815b","sha1":"2c7c1a727ad282aaae5b102dd7e4e463fae22dd5","sha256":"b70a14ee1e15d7aa94bd810ec06f4cb77a346e8f33aef6bfeae3d7c4442d7a93","sha512":"c6b718aea4f8f4c915f55a1f2c992750f0f379c0dd6f43dad19ef323b40c3fe603513dd13eab3dda7f6731d13edb545d2c26b05ef191b01a8875477d753d0d82","ssdeep":"","tlshash":"c7100000000000000000000000c0000000000000000000000000000000000003000000","size":2,"data":"","first_seen":"2023-03-11T12:42:02Z","last_seen":"2026-04-30T06:07:33.636082Z","times_seen":901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68a9e49bbc88c02083a062a78ab3bf30","sha1":"dc1885915a8902bc29de6d834477a26d748b60b8","sha256":"ac0f09c0f8bf5e7a4b063d863255f16d8ce9abe600e288d934cf313bcbff63eb","sha512":"6602e08c09c6865e743271e8ce9006021afc91d0c7b89b5ecde757b5517e6e004a86024e4b78f8a184beaa8dca513a9d2d5cae93634d29a34c5d75ef7c74e210","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000000c0000000000003000000","size":2,"data":"","first_seen":"2023-03-07T17:31:48Z","last_seen":"2026-04-19T17:57:58.650236Z","times_seen":738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"13f955e78a57edead993e4615c9ac9d2","sha1":"f633fb029fda78cf8e3a4dd8d89343dda6a35e0d","sha256":"c758ba18bbe1f6a381a90c5a143ebdedfa35b27ddf7d527e048820179c687c62","sha512":"e95b5c65325e06f700cdc8b00313eba41e5f11a5d8038234f5900883539007cf4488ffae8d42c7fe67d32f57c826a838d402969c79d73108cfa5ed36e1681564","ssdeep":"","tlshash":"aca01221340a460402a1401e125720c00050304cbba48101160cc204c7acdc20001d75","size":83,"data":"","first_seen":"2025-10-23T10:21:30.836062Z","last_seen":"2025-10-29T06:54:12.590242Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3cb391362864bd9ca96db48a799de232","sha1":"7b6cd342ebc6b33e09089be72d1cb49fc4777ea4","sha256":"ba6072a973482604f08ff15000cae94a112c2882c9b6f5d0155614e4333d306d","sha512":"e38987cc3c30729d3e662537f90d74173f849cf8bdd4e498592a2c3e91118df69ede30094c4ca64e54826c8966010f465f7d7e1f31b8ac40e4755a23d916e643","ssdeep":"","tlshash":"f18000383e0ca022200238a8a30fa2288022800020028800888208820eba00b2a22c08","size":26,"data":"","first_seen":"2025-10-23T09:42:06.380248Z","last_seen":"2025-10-29T06:58:08.314774Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"992da57882c7bf21ffec2101804e77de","sha1":"c6a322a31540526398537a2d22db197b35c85adb","sha256":"37e80e382d53e957d1758b79b4a13a71630c740d695c7034ceaf30f9c5a12c87","sha512":"d566e58afd1736db71b8feb1006a74b4fd947a0d3f5251267c29a40cfea790a3b7cdbde00e4ad2739d2f3062157650f53a53b15cb7027a1179175ec7c6dad52c","ssdeep":"","tlshash":"86c08cdab0889034cb81a9e390738208e5eb289994480aa3824af55ca9aa2091835f11","size":151,"data":"","first_seen":"2025-10-23T09:49:41.190139Z","last_seen":"2025-10-29T06:58:08.310764Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-27T12:09:30.523922Z","times_seen":338983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_our.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"000b4aa1fdecdd7f05fac90a172bff2e","sha1":"83fe2b4a92fd967d4ae10a66ab9c9f7cfb8db75c","sha256":"b80e46aa15043724f1c2c9cffb3a41fa4540d2ab531feef3f127ce3b03170e1b","sha512":"59ae80276f20cc7a35b7299ca4a2705b38e44f2c579a8170a6d7795d4dde531bf25506696825037a65481f97b2434b25b232ec13560953699eb422c2b667e2a7","ssdeep":"768:/z5PUWzyZNKSzTuoDTE2E8jHVemd1Hsng3Oh8gvwZfeUnatOuOPGdjH/AAu5P/:9OZNKSI2E/mdFYoBZRhPWjYAu1","tlshash":"6193922de8f72031603371b98b7f61047a69a0274a44ed057e1c57d02f86ab8b6f5fad","size":90641,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-07-12T20:21:40.115094Z","times_seen":2766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1a7a742bb38cb9426705834a5aefbcbf","sha1":"225bcaa87d2eb78c193b24ab2397d1484846eb01","sha256":"b9b859cadbdce8f953eb889086ad30de3099f69a254ec51ec31b59d18618ddb3","sha512":"f10d92a5c967eda08b412c234dd89290d0718c246a98dd4bf6980302aa2ac4cb7d8919e25b3b240d671b19ef82b1c6fb3f2e6e168e460ce1e4881e3adc7308ff","ssdeep":"","tlshash":"d6a002543d19bd445536155e576b10c440597044e2d4545551dcc15047f58494412d66","size":78,"data":"","first_seen":"2025-10-23T09:49:41.160322Z","last_seen":"2025-10-29T06:58:08.312339Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfcf28d0734569a6a693bc8194de62bf","sha1":"a36a6718f54524d846894fb04b5b885b4e43e63b","sha256":"333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3","sha512":"da637b3f32d7c7e410ab619520e0cf4529169a5c326ecbf4ca7a3bc2330ad49a84fba4d6c8919264eec5dc75ef80137f78cda40e26f3f741b5c9ff259d6efdbf","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000300000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-27T07:03:19.144823Z","times_seen":67922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plug/chart.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c63fec8cabd4763ca0a3c1157a2b03f","sha1":"0f9020a623bc21dc198b9acaecd6dbf12f096998","sha256":"f968e0779a8ace73f1eb498e2205a0895d9e0b2c3691416b19b0da7a93e09af0","sha512":"dc8767b7c2c17602fd7101d39a5383b681f9707cde86b7af2e723ab5e0e0f800d20c1ec3f4a84dc20eb932f572d596c41385bbd8045f4908e39e2aec649404e4","ssdeep":"","tlshash":"6d014117c6099252ce21508ef0826a852ca2e307fc514774b8f8a9f880c10d3e739b1c","size":799,"data":"","first_seen":"2025-10-28T12:14:45.886746Z","last_seen":"2026-07-27T11:49:48.605367Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b0de8152897621491a02ff8e50bdc0d1","sha1":"f4181184085439894a25dbe5c448ad3d4f724ab2","sha256":"41ea5e866d475c5deed982e2dfac1e911046bb0919d6c53099d0e0161ca34415","sha512":"356fa974406a131e4f678974312ae1381c2924bcfb905aa42625e1fcd33d569c54fd2f16adeb78ee27cf964daa2541ad2016720f48a667f7101243f5b427ed53","ssdeep":"","tlshash":"c710000000000000000000000000c000000000000000000000c0000003000000000000","size":2,"data":"","first_seen":"2023-03-07T23:17:27Z","last_seen":"2026-07-23T19:41:38.792266Z","times_seen":1106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ba1c187a2c94ec25fbc9d1e899b9f442","sha1":"b2baf58abbaf8ed090064d8c44718333e3a495b4","sha256":"b4ef1711582ba922705ed6f9c1d057f11124c408b21678eae78cc94bbe2287e1","sha512":"076f9d408c5e247883fdf80dc4982e865432c0980624d98b56fde662f76d5778c50b29c16982bedbc13b53fb05301cbd24f5acfe673cc5c05259a3453b216e26","ssdeep":"","tlshash":"31d097631082ea214221e37014220643e1823840ad2c0606b2bc530012a717cc806e13","size":221,"data":"","first_seen":"2025-10-23T09:49:41.230883Z","last_seen":"2025-10-29T06:58:08.357872Z","times_seen":559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b0de8152897621491a02ff8e50bdc0d1","sha1":"f4181184085439894a25dbe5c448ad3d4f724ab2","sha256":"41ea5e866d475c5deed982e2dfac1e911046bb0919d6c53099d0e0161ca34415","sha512":"356fa974406a131e4f678974312ae1381c2924bcfb905aa42625e1fcd33d569c54fd2f16adeb78ee27cf964daa2541ad2016720f48a667f7101243f5b427ed53","ssdeep":"","tlshash":"c710000000000000000000000000c000000000000000000000c0000003000000000000","size":2,"data":"","first_seen":"2023-03-07T23:17:27Z","last_seen":"2026-07-23T19:41:38.792266Z","times_seen":1106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"decc386b3d197eb9ce08434f6438b93c","sha1":"5c02b5dc0ae02e4773be7f540e35649917bd7319","sha256":"2fb71b8e5cbbb02c7113ce03c4439ff620198c53974b99096bf69937a569bb99","sha512":"bc811effd4b9c30e8b9422b1e43e594bfaed881323a8f0d4ba12f5d92106c791b380c28e8850f90da10a0c30e32a5f67b4ded94b5c5dfc50b52287a83cb4d4b8","ssdeep":"1536:YkiKlUOfg0gccyIbv/ZuIQhi7HDg3GtKlkxd1vxZ79kxKzUfvS:8fy13i7jg3G4kJxZJEECvS","tlshash":"eca3d8240868a876d893e447ddb5ff3e9cf4067a0ac89a6dbdbac75c01ec6510e9f413","size":106858,"data":"","first_seen":"2025-10-28T12:14:46.02696Z","last_seen":"2025-10-28T12:14:46.02696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"415290769594460e2e485922904f345d","sha1":"95cb0bfd2977c761298d9624e4b4d4c72a39974a","sha256":"a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa","sha512":"121b4774a759924a2929c4a412fb6e31b9aaa746466840efcc4a76d69a94149e2364e3983d646feafaa1b511785e5c9e90aedc30da6a6bead5520ecc99c6626a","ssdeep":"","tlshash":"c700000000000300c0000c300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-07-27T09:12:39.247052Z","times_seen":64040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"83a77a8fa8101ab38a74167392abf2af","sha1":"ecad96d097ab2adb9729e0b0c5f8063e6445e4c7","sha256":"7e8c17ebc1c4489f3752972cf347c83e9eaf85dea4b84c375746377e5216d9d3","sha512":"f2250fb803e1cab98bdeabfe1cf415d3c7a2f3daf7d4d2e650196e709a5aff915427825b1f5e403dcefd704b290b091b69cb1fb437f6e5f69c7a1023a23f0c5a","ssdeep":"","tlshash":"c71000000000000c00000000000000000000000000000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-26T05:54:38Z","last_seen":"2026-07-27T07:00:44.949685Z","times_seen":7712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/www-embed-player.vflset/www-embed-player.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47a692e08a0499888ff37401ecceb8a3","sha1":"8d97e7f845a86f90fb8c43aa728d42f89917657a","sha256":"07bf6498c5bba79019d52ddda61570f24b39ad3a0bd73b877cf18a06c7548f69","sha512":"743ac6a6d0b39055579cd0b935dfec30d3619d8ee932583b5e960e18aad04478abaef44e6fcd7e04487d3c2e121072022043ca85580be99fbd4b042f1fc6cbd5","ssdeep":"3072:VJJCm+0gKL+fXEKj2eV+ISEYr2V+jgR93uPTfjVb8atjiGKRpX7VSYjdfs6:g2q/v2bLr2V+jY9ePTLVJ5mX7Vrs6","tlshash":"60844bcdb692706352a3a5b4403f110b713ab8aab80cc8b8f595d9d92e7495d8337f3d","size":392686,"data":"","first_seen":"2025-10-22T15:40:37.592186Z","last_seen":"2025-10-28T15:50:21.958776Z","times_seen":2270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f8f57715090da2632453988d9a1501b","sha1":"6b0d31c0d563223024da45691584643ac78c96e8","sha256":"62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a","sha512":"f14aae6a0e050b74e4b7b9a5b2ef1a60ceccbbca39b132ae3e8bf88d3a946c6d8687f3266fd2b626419d8b67dcf1d8d7c0fe72d4919d9bd05efbd37070cfb41a","ssdeep":"","tlshash":"c700000000000000c00000300000000000003000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:09:42Z","last_seen":"2026-07-27T10:42:52.532297Z","times_seen":61010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"139745081f0f44ce58636bdb22e3c03f","sha1":"c77e02dc8ebc5f0cf6ea424c4f19c8cdb0d40c3a","sha256":"30bfbb8160bc556150b53cf45880f150d43f27725bbc685881c9ee88e5092bc4","sha512":"5b8f1e08ef14aaf9a538a425d7b260e78c8110812fc360d0e5aeaae5386a44e30484fced9e5811119b394a19610dcdf43c3e683461e051ebbd1c9239a8bd9b52","ssdeep":"1536:7YTnbVuMqLcmbLCGLq4OXqlJFKlCBV0j6DjewwxHWhSIHHDz:6bVurLbGGLqkldBV0CjejIDz","tlshash":"f95309cff2c663269af260f901175209667a6444ec981c5fba19e7f05fb898f443bf24","size":62975,"data":"","first_seen":"2025-10-28T12:14:46.029386Z","last_seen":"2025-10-28T12:14:46.029386Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"962dfa2b3c48205b1a20cfdbefa0c533","sha1":"4fd7c8324738580e905317a71ec0d21d82a7f737","sha256":"079125d6ce0d7f29554edd63277981d959675cfafe09fbad938277b71c817986","sha512":"791d254b535d0520e350980d0567a1d7101fff12dfb73edea99330dc2b8733645dc92ade0247aac19f9bb435642158daab6370f9ba99694b8303abaaa1a318ed","ssdeep":"","tlshash":"3ee0c026937a6c45593630f19be3b4a88d010f334a48ec3c42c182d012914fba6c4540","size":347,"data":"","first_seen":"2025-10-23T09:49:41.183265Z","last_seen":"2025-10-29T06:58:08.308508Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"731647e9e748865a35d0919acafaca3d","sha1":"9eb1eeb4de77eb9c787fa2d19bbceb532d690116","sha256":"36c3cac056f76f82a19fcc09dc085ef0feb359e2836083a39a4d4b5d75fbd202","sha512":"9a30155dc4196729cd2987e7a1c9b055c59db699c03f7ad1d4aad8d24be3c22b03692aacc8791926029e4c5ce72aeec923fb4a74d4a281a9dd476eee3db6e87d","ssdeep":"","tlshash":"c710000000000003000000000000000300000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-06-30T14:57:14Z","last_seen":"2026-07-11T05:46:31.238669Z","times_seen":5089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"67661faa87a6c25721814edd5bfa3cfb","sha1":"f1606e5dcd2c694412c2d7db4bc50627b59ad5bd","sha256":"656873503dc94fce8b0bf168077f935d3329aa753a0bcbef7e4c814dc3b68ef5","sha512":"e5563c1e1976cb97b071a63e0ee7ed8fa48836b5f4735b45cb2e072875df307b6be54e84b1982c7744eeb9cf4047963443ff94762c289b32542d6064aed2ccf2","ssdeep":"","tlshash":"f47000882c08200000223028000b880c02aa0000000000a0032030820cb000bb00ac8a","size":22,"data":"","first_seen":"2025-10-23T09:49:41.262909Z","last_seen":"2025-10-29T06:58:08.395254Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"af82d18d820e7be5af6d5818326d8811","sha1":"293a99bfd8e3d27129dd2d7ff56ea06f5306f1b0","sha256":"3eddd1c1733fcedb1feb40720774e3a836d92a88e2785cc9581ae600754528aa","sha512":"8c577019d83f763ea4808c040bd800600ca7daa8998429c9c72ab3892066247736be4556d1398592956c757246629c6f273801a8c2747b27243479381d179d2f","ssdeep":"","tlshash":"767000882c08200000223228000b800c02aa008000008028032030828cb080b8802c8a","size":22,"data":"","first_seen":"2025-10-23T09:49:41.162585Z","last_seen":"2025-10-29T06:58:08.477778Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e3d4b2d283b653a502044a14117a1cf","sha1":"eaf49333a78c1d015e6ad72185455e4fda5512a8","sha256":"efb1af90e255186dd7533e5925e67c31782bfd10054a848d12a50b95116e1845","sha512":"c6e58a92f222163d98e9a7449bc9be6e4add0903e57da3ab8bd16cbe1764c02556b0983692448b2e2bbdb727abe4edb3580dd043032af8102e752fd733bd8797","ssdeep":"","tlshash":"0cd04c47b570554a0485e109d386458c7178450a453a0e25365d60ca3fb3f9d174d1ac","size":205,"data":"","first_seen":"2023-10-24T01:05:43Z","last_seen":"2026-06-07T05:13:46.972679Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"40fe070b83381ef328f0ca5d0b793828","sha1":"ac1f26f357776a519738fee8b28196f2ec015605","sha256":"196861e2fbc631f64d268e95e0f8b4c631754751c827d0f25f27658f0046341e","sha512":"52f9d4441568b644c73c7ff818d4d94966784b5b3f3438b98bd4fa3be29ae620f3398e2ab0a6a31044a05d0cd7e3ccb47f1f7f4d4b2d789c0359bfa0f2fd5e84","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-18T10:33:14Z","last_seen":"2026-06-30T13:55:23.561213Z","times_seen":885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-07-27T12:09:30.503411Z","times_seen":174199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-27T12:09:30.523922Z","times_seen":338983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e0ec9672be6cac914ffad34a6b077209","sha1":"de75c9fda1b02f44be79f321839ba71723d1dfe1","sha256":"9aea6f4d30f4850fad6b78383700a5b5c769326087311d4fced9d7531dcd44af","sha512":"d420244691dbb3842cf4d127f130a8ac7e7e3e1753e40687c4d4a900ab7e988aa3dbe514460e08725901e989591beeec7ebc9a1c9a60eea70fff8df2a25021e9","ssdeep":"","tlshash":"c71000000000000000000000000000030000c000000000000000000000c00000000000","size":2,"data":"","first_seen":"2023-03-11T13:35:30Z","last_seen":"2026-05-18T05:27:52.85857Z","times_seen":3394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf3f7b09e08c4e2ac0bcf5d2d312a33b","sha1":"2f6adee3d87a4e01f5c89a2357d3ed151a238c47","sha256":"a0cea2dd8800d002d525083738e53184fbf7e4f6fc0634ad921f3d0da4177d07","sha512":"a750eb74b8c3d1839b7160b73a0635caf46e2c60e15a1193dcd8f192a837ccc1af1e20e4b436ac16f3de3f46ceef9c94f506ad423e375387897105585bfae939","ssdeep":"","tlshash":"bad02bc012087c97c8d7519d4323636840753045b5b9a449221e79e332ccca729c0c78","size":265,"data":"","first_seen":"2025-10-28T07:04:56.754456Z","last_seen":"2025-10-29T06:49:46.611317Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1f4836eac76eb4214c31e5cc9a68d273","sha1":"9999dab16a0647656dc57e2b39a2e0d5cf8f835c","sha256":"529b57f0e0db6cc6316c779bf36649119534a3668abe4e1a85018ca3234d99e2","sha512":"788206c0c8a607f8efd0bdba8b657d604e184e8fe7f6efa5a2d60d7a85501832c8689d58cfd7b6da61b1200f16f9b3483f4376dbd24472913afe18c1cbcb5a3f","ssdeep":"","tlshash":"c710000000000300000300000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:08:33Z","last_seen":"2026-04-17T06:31:06.64187Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"af82d18d820e7be5af6d5818326d8811","sha1":"293a99bfd8e3d27129dd2d7ff56ea06f5306f1b0","sha256":"3eddd1c1733fcedb1feb40720774e3a836d92a88e2785cc9581ae600754528aa","sha512":"8c577019d83f763ea4808c040bd800600ca7daa8998429c9c72ab3892066247736be4556d1398592956c757246629c6f273801a8c2747b27243479381d179d2f","ssdeep":"","tlshash":"767000882c08200000223228000b800c02aa008000008028032030828cb080b8802c8a","size":22,"data":"","first_seen":"2025-10-23T09:49:41.162585Z","last_seen":"2025-10-29T06:58:08.477778Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e5ao1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e85912893309b1071647dc5822e39a23","sha1":"c0c4d4f8e3944960bc77d68562c920bda845f2a8","sha256":"0c4b5af366fe83b12eb49e5a067fae069850d4203f2c3ff8a30f3af0b35fb3a6","sha512":"bfe4a80d52455e4c13f857a3b6494abd6e7ca8748b1aaf8f9c23fda7b1e88084e6184904a557be6ce2f752f582c53210a8c13fc854a10acafa856dd69c909aa8","ssdeep":"","tlshash":"43111c1af00da8b7c062eb71f19f6585723e80f2575c350087aa84ec2db48b9342b71f","size":1000,"data":"","first_seen":"2025-06-18T11:16:48.738799Z","last_seen":"2026-04-25T05:02:45.276781Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-27T12:09:30.559888Z","times_seen":235242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a40d29846fb9cac00a3acfa2194b5e8c","sha1":"6ca97729f60b4015ad4e82270a7ae0e95f368ec8","sha256":"3cd40a33683c1fd0d7a83cfe0f8198ff76be89b8abc2a19d5be3a43a57286468","sha512":"408e089e95738f9287a1e793b7d571ec14fb6c31413bc6ab69d6cd4b6fc91abddd7e40e4866e69e6f79e53d69d644fcacce53026d583ff543bb20f4dce07daa6","ssdeep":"","tlshash":"0aa0220c0f20ac0c803a20be222f00e08020202002f0008ce08ec2e803f83ec3bc0ece","size":78,"data":"","first_seen":"2025-10-23T09:49:41.186956Z","last_seen":"2025-10-29T06:58:08.347374Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1671797c52e15f763380b45e841ec32","sha1":"58e6b3a414a1e090dfc6029add0f3555ccba127f","sha256":"3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea","sha512":"87c568e037a5fa50b1bc911e8ee19a77c4dd3c22bce9932f86fdd8a216afe1681c89737fada6859e91047eece711ec16da62d6ccb9fd0de2c51f132347350d8c","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-07-27T11:52:55.900702Z","times_seen":63968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3e7c6325f9869ef6576e3310c0a00dfc","sha1":"7c5d66228ac6649982ab2a222673a573d1c4d382","sha256":"92e4451dbd3f0ae304628a719ed3bb92c8ffba1b4ccc149535ef03df6d8477b8","sha512":"5eae2bf69a258572831faa868843fb8bd36d9b92d95a2f96d3defa5a01ebe5d9e295779847babac922393a84d70287f479e6082d7330743c28edbcfd4b8d2743","ssdeep":"","tlshash":"52c08cc6e142c03887d498ab40222228d1982488e80e4ae39201e14e7b72209093ae49","size":158,"data":"","first_seen":"2025-10-23T09:49:41.234664Z","last_seen":"2025-10-29T06:58:08.322646Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a3943f9892e943931c87f7675f39f431","sha1":"42e881887477c4940f6ad27806396b9f0083350a","sha256":"961b249a3adf919875db61c24850029da3f5ea5f46bc85c72c5a8ba40617374a","sha512":"c3e3508436e3e88b53547e7ca32759e8f96429da5e6840942cede98556f2d9fa18ee15194cd7e67f38be24631365e5da289a0870b422ddd03019ced358bd6a1b","ssdeep":"","tlshash":"1cd02289f38e30fd3c3421ae408cb21a8beaea61eb882409e21080f002e20001153d29","size":212,"data":"","first_seen":"2025-10-23T09:49:41.145519Z","last_seen":"2025-10-29T06:58:08.425517Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/player_ias.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e4473ba4ceacb856afdad1e1bf8aaf0","sha1":"1ccaadb783444e0ad59503ff22c0d7aab1c7f41d","sha256":"a7bc99cfe46da0099fc819d6d5e5dd8e301e6d5506e0ee1f0aea0a3696cb8f10","sha512":"9eeaa32fd0d99f487a45d9206f6d19fd2c8ce7c9db98d257cfcade46c942519162463de5817d961fac7bcf0696ecf78b70166642a9c7b23766f635bbb2bc6bf8","ssdeep":"49152:Opzv7/qBH5lSF8I1pbXsza9lXRtc3I3nxj:in/ylSF8I1RtHxj","tlshash":"afc54bccb2e2b4613257f0b8547f510ab63b348c884c8b2cb56adad65db0d1a513bf79","size":2649790,"data":"","first_seen":"2025-10-23T13:13:48.170425Z","last_seen":"2025-10-28T15:50:21.999865Z","times_seen":503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.-hMpMqkA7xk.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfoLy_Ch9LIhpDxvM1vo649yldjXwQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfbbfd00331e02f257095ef46392323d","sha1":"1f5b36054fe3080a9e97e9fc08b932c2185cd368","sha256":"c24f037123fd227510c1e5787b4e30f032d7caa1efe7db0a78cac87f1cd28da9","sha512":"8ccf0aaac3e225a3a8b4460aff951fda442d698939f870d02ba50bbc2ff5259cd22e4b61c62b828d5afd32f51567f27b586f0c19993f14ee3c26d1525ae354ec","ssdeep":"","tlshash":"13118ce833d670255123b5e4446fc04ba27b9ddad5b81499930827c12cf410fc8aff2b","size":1000,"data":"","first_seen":"2025-10-16T20:47:41.492666Z","last_seen":"2026-05-05T00:33:05.401985Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"17a931ba9905835dd08db446b3d33e1b","sha1":"654dcad6b2524ec789bb7a71821360cb7f734853","sha256":"f5cbed1751cd629fd435acd5a8dcc13f4c90ceadf7388b9b39736fa79a62fd08","sha512":"53df2a68ff153757166a32807c9ceb26391cf9a68ab10b67e73aa59c7f06a73bc3bafc02c4f68776887ccca59e1de82450888e3e61cc8f913f533a01ea7176b3","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000030000000000000c00000000000000","size":2,"data":"","first_seen":"2023-05-01T20:08:09Z","last_seen":"2026-07-11T14:03:14.742515Z","times_seen":957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"753ef2bb5074e00fdbe482ddb8dba95a","sha1":"6a8bf20aee47921965246e691f4648d3cdbcdd3b","sha256":"51afc6632e96d51b91b50e41dec09ff2b79fb0660accdfae58efa8c4582e9a20","sha512":"cf94e7447382d158feb52e9ee256d1786c8dd6e738a655cffba3b1630517c468843e57f675e43132f4d8db99e344d5c8a2fde681ccfc2b3275af8e754aadf908","ssdeep":"","tlshash":"d7d02b348b3d34307496a0135067181c4763c2134531f416a54ca6739540112bbf4f2c","size":253,"data":"","first_seen":"2025-05-17T11:43:08.8697Z","last_seen":"2026-07-27T11:49:48.720803Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/jquery.min.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T11:49:48.646611Z","times_seen":98429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a76a8761b64702e2504b16d18126580a","sha1":"a207ab1d307987bc013f5034177669818471029a","sha256":"a5e84ec6e99b07dbf119b4ec12e5eb6b28007b2dc968ee799da3efb904b2261d","sha512":"510151b7a19a0b9ce41fc4be2949b6ae989605460bbf9910d16eab0569348c99797ac5e08f72ce2542505e6de3c875700e84ff7a9519fae1c756b4cc1204cbe6","ssdeep":"","tlshash":"d7e0c2f80162bc9a3011be0e8e97648f11acf8e6b35cba06f4149aa63615885b833d09","size":292,"data":"","first_seen":"2025-10-23T09:49:41.219767Z","last_seen":"2025-10-29T06:58:08.303657Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4f28cec85f2a13c96ee6fbdacdc41dc6","sha1":"17dc12361232969ff56d1e804ce15e4ee3f5a60e","sha256":"25fa7e6b6c35472f443eb98be26ad47d852e591eea1749233f1db9541d391935","sha512":"8bcce856568d8ade51cb663f69d390ad20af53d7b32a6abcf0d2160cd2cfa546bd34ce37a8cc770310a4c0273a67fd550808f28980d0e4d37c3b394c57f49e1e","ssdeep":"","tlshash":"b7c08ceab0889034cb81a9e390738208e5eb289994480aa3824af55cb9aa6091835f21","size":153,"data":"","first_seen":"2025-10-23T11:17:33.993975Z","last_seen":"2025-10-29T06:54:44.426289Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b9884d9c846186c2a5426d7f46393de8","sha1":"16b489dd5824c0653b318a4d274b492564b8c92a","sha256":"25f682044b5badaff8b296bf6fd676214968b238fcff5559e64f38c88bb9790f","sha512":"a7fae1c57c697fbc247faa1a83807fc0bc2889fdcb9af77ce9d9abb385e2911f544a998b23cb57550e552c5c4ce7fa1ddeabcb2a9bc1008e96b85fbf3b373023","ssdeep":"","tlshash":"c7100000000000000000000000000000000c0000000000000000c00000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:08:31Z","last_seen":"2026-07-11T05:46:31.127435Z","times_seen":2876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"32a548c953541ee0c551627e37d01d16","sha1":"22bcc51c0febe8425e429deaa28b408a99fdf97a","sha256":"4c0a4f32d5f4868bce79d2791a6450b52fc0c3bbac49dd87f2820032a5a426f0","sha512":"997590804fc10bbb357a70499f60a64b2247225b85a3cca92747cca1c57980a3cb18d29fb361cafcd6ad15b2a5d718390f4589c1cf751b3e3fde49c04b985765","ssdeep":"","tlshash":"6ec09b1d0b495018e17511585e9706549df166416d0c9d3a465050e555f1f9500dddc4","size":135,"data":"","first_seen":"2025-10-23T09:49:41.249392Z","last_seen":"2025-10-29T06:58:08.306995Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"11ccfd5597548ed4312406227cc6df6c","sha1":"8636d9f9c3d62b2c3e00cb1ed409d774fb44451c","sha256":"29e2e48eb2d0d31aa882a4c97463a0952db73390b00d4ee23f8537c995895aa7","sha512":"6260e32073783dc7b19262ba95a065dda14689514d7d5864df54886c35933cd009203978a5e12abdd310eae28a7d494672341f4b3ae052de79c873a4050561a1","ssdeep":"","tlshash":"7ad0979278d270d6bc2f733e82c8826c43f400280ef59c86526a21e08b8f4817c80c00","size":241,"data":"","first_seen":"2025-10-23T09:49:41.258398Z","last_seen":"2025-10-29T06:58:08.304391Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/setting2.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a03cf40ba0da83baf1351a414497ea49","sha1":"34b26eec5b9f4204dc122e5b6cdca36f6b2c8c43","sha256":"237a3bebd73caf60b5b48aee58de7e6c01a3585a602062d386de6871e16bbb11","sha512":"58a84d8916f0c274e8e08651a83e832de534d092fae323b89a9b5e4535413e154b931a58d629fc83b749acaab6f52ec10c4dcab25c222ca12a5d38b6f12ed14f","ssdeep":"","tlshash":"1f11bdb7b44504b5b36b2332300d425a26f065a1e8621141d92eed1cba91ba3c83fe79","size":1000,"data":"","first_seen":"2025-10-28T12:14:46.039326Z","last_seen":"2025-10-28T12:14:46.039326Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3cb391362864bd9ca96db48a799de232","sha1":"7b6cd342ebc6b33e09089be72d1cb49fc4777ea4","sha256":"ba6072a973482604f08ff15000cae94a112c2882c9b6f5d0155614e4333d306d","sha512":"e38987cc3c30729d3e662537f90d74173f849cf8bdd4e498592a2c3e91118df69ede30094c4ca64e54826c8966010f465f7d7e1f31b8ac40e4755a23d916e643","ssdeep":"","tlshash":"f18000383e0ca022200238a8a30fa2288022800020028800888208820eba00b2a22c08","size":26,"data":"","first_seen":"2025-10-23T09:42:06.380248Z","last_seen":"2025-10-29T06:58:08.314774Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ba81f0c6d06ba16ed829e84c6e8db30","sha1":"a817c0e81a923df985f0efec4ca0b7865f3d2b01","sha256":"f8e3ba306b66721334f2cdec4595f247fea5192e0e6cfd217c317e47cf41c1f2","sha512":"fd68626761a945fa1948c09d231bd6b18fd97392bc71a1cb868f29f024d09f935fa97fbec9d08ba75f7e08cbe74011c65e766b55bbb61ce6118dfe895dbcf5a8","ssdeep":"1536:jRmTnbVuMiLcmbLCGLO4OXqlJF2lCBV0j6DjewwxHEhSIHHDr:+bVunLbGGLOklBBV0CjetIDr","tlshash":"99430acf72c673269af260e50117520966ba7844ac981c5fba19e7f05fb898f443bf34","size":57100,"data":"","first_seen":"2025-10-23T09:42:06.420442Z","last_seen":"2025-10-29T06:58:08.195977Z","times_seen":620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e44d967f3e8a44f6a7fee562af4d82f4","sha1":"fbce2c364a46f4c8162dfc1f0473ca824a2a2195","sha256":"7aa5ae9ecf82f6fc5208ecd0940fd71d50cd4ac596fccac2ede05af806a87b6e","sha512":"713f70fc13f67223002248c5df5f220dd5494c98fc132d6b7e44efddeeb921d3f73aaa56d61015c1cccd564b71a297746b845de6a5c092d8f9139e9d44a52be6","ssdeep":"","tlshash":"c710000000000000000000000000000300000030300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T13:42:56Z","last_seen":"2026-04-23T23:07:37.679401Z","times_seen":2090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d25e5ae10ec6f3c597e57b2330845d70","sha1":"4637df06e1d2bb32150e43d5107d1af664a4703d","sha256":"78994c3ed5f36dd51b0b738e7149a3b17ae911097d1422574a50c0d99fb059c5","sha512":"c97198f3051d5f33aef3ce9f828375c2211946d4449cb0b6418eb67b1acd4182da88f9be9e8f166e95bcdf604b1c172e1758e37e09054d4bfbf3014977c60072","ssdeep":"","tlshash":"93c02b09303014d101f2c412cfcbc30c534c11b1480c2abc31b0b94ccf008f0a8369c4","size":132,"data":"","first_seen":"2025-10-23T09:49:41.22785Z","last_seen":"2025-10-29T06:58:08.441937Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a40d29846fb9cac00a3acfa2194b5e8c","sha1":"6ca97729f60b4015ad4e82270a7ae0e95f368ec8","sha256":"3cd40a33683c1fd0d7a83cfe0f8198ff76be89b8abc2a19d5be3a43a57286468","sha512":"408e089e95738f9287a1e793b7d571ec14fb6c31413bc6ab69d6cd4b6fc91abddd7e40e4866e69e6f79e53d69d644fcacce53026d583ff543bb20f4dce07daa6","ssdeep":"","tlshash":"0aa0220c0f20ac0c803a20be222f00e08020202002f0008ce08ec2e803f83ec3bc0ece","size":78,"data":"","first_seen":"2025-10-23T09:49:41.186956Z","last_seen":"2025-10-29T06:58:08.347374Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1837f943e45276041318f380711d9d46","sha1":"244c954f93ebf7e4e5ae446b5f7b48d60e39dd8b","sha256":"7ef0fe1d58f3400ac78e89ac6a1023e4e234d9afc69f58b4c7bf55f07a772e40","sha512":"208c2361b300a5150c70931765a56652556f55eb0b70fe2f44ceb9fa3759f42aff61521c0bd68f8fdd9f6ee1ea9cc7effd64a66ccf2c940ab03267bddfe1a306","ssdeep":"","tlshash":"c710000000000000000000000000000000030000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T12:48:39Z","last_seen":"2026-07-23T20:03:36.208823Z","times_seen":7093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cec8679/665.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"123b6fde11b94f4246d329fefbf9eeea","sha1":"54355e4e26019278a0252b3f143026bd954427cf","sha256":"e300aeb8b1cee196f847805fdc3036b95d22d39c6c88879aebfb345eb9eb8c33","sha512":"27f52911d0bef09a89733ab97c9e94d001b786d3431648cd615b245326ede7ff02042862e6e06385d87e34a01f2d5cb597d43ff5d142f55037618c7fa8625496","ssdeep":"192:zdkpVXmS9CM4jXDJEuKLDbjrsIHvBJcewQimEFFfBTH2BXBCXj+V:zdQT3DT70elilFd9WBxCT+V","tlshash":"9122d619ba80b22014ef00e6923f598fb2b2c43ca799d1b0711ad6fd1af981dc117fd6","size":9970,"data":"","first_seen":"2025-10-21T11:41:49.886771Z","last_seen":"2025-11-21T05:41:36.541353Z","times_seen":1690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"661172d34b5b6403ce269e182914607e","sha1":"654ee0b42e6f4de92358e3fc8fefc3b8fd19abee","sha256":"9b184cefd7246eabf1e2121fcb1996cac319506862843fb1142deec1dcce5df3","sha512":"7e701a3bca6432da7a8a37c5b846e5fda6c89856dea31a4dee7ae8d9cd22d20bac65d053070b3a6d1079a197c9b06089f5b2da6c181568c6236f1bdebd7907b7","ssdeep":"24576:s7ZYrlR7D1c7IyxYfS+W4dFqx2xOzsQ4Po/dCASp90pmz8k5n2Xcn1:sNYjymS+W4dFIgpbPoVCASp90g8k5n2Y","tlshash":"4b655bd1b2c5f4a603d301e6943b1005a33a2c2a740da458fbbcdcd7aa5a58e6377f79","size":1522439,"data":"","first_seen":"2025-10-27T13:48:58.288941Z","last_seen":"2025-11-10T13:49:41.645306Z","times_seen":900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"31be0d5246cd8b12009b47c15c1f099f","sha1":"ed73009c3454cf1bd35017dff605cf153804314b","sha256":"7165f0855ecf150a13b351543362f94f2c22dd47685b75ceeb89c2e59400d36e","sha512":"e1381c2159c9719d515b23993dfab84dc3e9296dc24ba1056bcf5ddee9deb4d8a13ce6f458f9f898d1cfc4d057ee819e97e6175b52833d2807d3e46da5f7de3c","ssdeep":"","tlshash":"47c08c2a3a6da589798511f9939f274e866fa400d41e28d4808096512bf096a2823c1c","size":163,"data":"","first_seen":"2025-10-23T09:49:41.179152Z","last_seen":"2025-10-29T06:58:08.313928Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3d038c59c615ff247fbd448d79ea563","sha1":"f398f540cd461a70378e6005022f9c9fc7438ef1","sha256":"18607c0f690ccf374bab5477dfa15f274b9c502f5d09cd3b1584a78e34dc47ce","sha512":"5c697501e8c47a164f7724db7ca592eb8a9951fbea43dfca30a762f70b1a6fcd5d505991824f784e3d60948e5a3a22569c326efb12ed81bfeebf63808f3e4d97","ssdeep":"","tlshash":"3ec048bd40030c8030e660106b872e802802a20712ec88003baecb20afe38db8542ba9","size":153,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-06-06T06:45:08.148722Z","times_seen":2613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"31be0d5246cd8b12009b47c15c1f099f","sha1":"ed73009c3454cf1bd35017dff605cf153804314b","sha256":"7165f0855ecf150a13b351543362f94f2c22dd47685b75ceeb89c2e59400d36e","sha512":"e1381c2159c9719d515b23993dfab84dc3e9296dc24ba1056bcf5ddee9deb4d8a13ce6f458f9f898d1cfc4d057ee819e97e6175b52833d2807d3e46da5f7de3c","ssdeep":"","tlshash":"47c08c2a3a6da589798511f9939f274e866fa400d41e28d4808096512bf096a2823c1c","size":163,"data":"","first_seen":"2025-10-23T09:49:41.179152Z","last_seen":"2025-10-29T06:58:08.313928Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.-hMpMqkA7xk.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfoLy_Ch9LIhpDxvM1vo649yldjXwQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfbbfd00331e02f257095ef46392323d","sha1":"1f5b36054fe3080a9e97e9fc08b932c2185cd368","sha256":"c24f037123fd227510c1e5787b4e30f032d7caa1efe7db0a78cac87f1cd28da9","sha512":"8ccf0aaac3e225a3a8b4460aff951fda442d698939f870d02ba50bbc2ff5259cd22e4b61c62b828d5afd32f51567f27b586f0c19993f14ee3c26d1525ae354ec","ssdeep":"","tlshash":"13118ce833d670255123b5e4446fc04ba27b9ddad5b81499930827c12cf410fc8aff2b","size":1000,"data":"","first_seen":"2025-10-16T20:47:41.492666Z","last_seen":"2026-05-05T00:33:05.401985Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"83a77a8fa8101ab38a74167392abf2af","sha1":"ecad96d097ab2adb9729e0b0c5f8063e6445e4c7","sha256":"7e8c17ebc1c4489f3752972cf347c83e9eaf85dea4b84c375746377e5216d9d3","sha512":"f2250fb803e1cab98bdeabfe1cf415d3c7a2f3daf7d4d2e650196e709a5aff915427825b1f5e403dcefd704b290b091b69cb1fb437f6e5f69c7a1023a23f0c5a","ssdeep":"","tlshash":"c71000000000000c00000000000000000000000000000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-26T05:54:38Z","last_seen":"2026-07-27T07:00:44.949685Z","times_seen":7712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d8bc311638ed969fc9d07b523f2e8db4","sha1":"41c89d9fa3f82192bdb577b2f4a89dd65c7169aa","sha256":"8e27025edef1e871b17af0890504e9487d41caf3f6651b86f8f48a823a46fced","sha512":"c54810dd7068a660e2e052d097acc2e62fb8bf39260a6433ab645fc136ee1b690961f2ab424ba481cd108a4f439cb635d25ba9760ec594f01e238260a6e05420","ssdeep":"","tlshash":"bfa011282c28a828203230ee022b208800a220082bc000cc808a800203bcc822083c2b","size":79,"data":"","first_seen":"2025-10-23T09:49:41.166036Z","last_seen":"2025-10-29T06:58:08.394369Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b8ee7577e47c352fdc097aa6a1e48c98","sha1":"18d3d20468441e16c8043c595e1ac747f23b2a35","sha256":"8e3578e5718d9a99fa0b4677b277b9399801b57f8f3c00d7d357095f1a3f92ce","sha512":"237facceadf5cf737ce313c57df32488085e69808f67e2d590edf5829e1f4c93d57b4a4b66aa215e446bf4dbbf163e870a7a6009ab6b76e41249378408d45850","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000300c0000000000000c000000000","size":2,"data":"","first_seen":"2023-03-07T13:20:55Z","last_seen":"2026-04-26T06:57:32.778884Z","times_seen":5916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ba1c187a2c94ec25fbc9d1e899b9f442","sha1":"b2baf58abbaf8ed090064d8c44718333e3a495b4","sha256":"b4ef1711582ba922705ed6f9c1d057f11124c408b21678eae78cc94bbe2287e1","sha512":"076f9d408c5e247883fdf80dc4982e865432c0980624d98b56fde662f76d5778c50b29c16982bedbc13b53fb05301cbd24f5acfe673cc5c05259a3453b216e26","ssdeep":"","tlshash":"31d097631082ea214221e37014220643e1823840ad2c0606b2bc530012a717cc806e13","size":221,"data":"","first_seen":"2025-10-23T09:49:41.230883Z","last_seen":"2025-10-29T06:58:08.357872Z","times_seen":559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2a207891368cb41d50433d3ff38003ca","sha1":"14a5eb955db0e9f53b0f1e4b9ee60ba29152b66c","sha256":"4c227a10eef61806b8aa660d3a1bc5c2631c2b65c7628e8995c84de4a45e752a","sha512":"6976c6d534971f9c9b43305379ff654c7f569016e9f22cfd1de421983b602d92a29d09ffa08725cebef22541fd903b6372d8717290b703caac648d93040442bd","ssdeep":"","tlshash":"c710000000000003000000000000000000000000000000000000000c00000000000300","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-06-24T11:37:54.038771Z","times_seen":887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"00577c98fc0f6a34c3039d73784d2435","sha1":"d8c30128c6cb83b71aa1db76e5005874ea4b899f","sha256":"4b7161bca4527ec40621e68a86a9510bb76092b1c62066efe119b5df39a2a1b5","sha512":"207766ed9ac251d2f2b75cd67321c57643ebbc80390cc2ba53b46faf6e63162e39849df23109fe2741987845cf9b1207e5935e847d12bc5dbd68aed300de3a62","ssdeep":"","tlshash":"e0d02b66531c1119f184449bd313932931635c092743845ed0018e97fd5d487e0b3d0c","size":282,"data":"","first_seen":"2025-10-23T09:49:41.163684Z","last_seen":"2025-10-29T06:58:08.313114Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f2ac2b55b3858f875bfa8ff50f59dc1","sha1":"4eba6db545d8eb6f9cafde03eb62bd61e1cfb6b5","sha256":"f68707613dab1783821b6d8c3f928f60dc11b969469c74b642358b283205699e","sha512":"6746c5a04b499d891b9eed16bd338ca3c7250e9c1a4f9c5d72c15f73e578c44098409e0496bfa8d66bece155e0637a7c12725911a0ffeb5a3d226479a81f1644","ssdeep":"","tlshash":"3da0220c0f20ac0c833a20be222f00c08020200002f200ace08ec2e803f83ec3bc0ece","size":78,"data":"","first_seen":"2025-10-23T09:49:41.273178Z","last_seen":"2025-10-29T06:58:08.384677Z","times_seen":564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3f7aff681ce4fae79c00f735d51e4ca","sha1":"3200f8247b5cc210e4e954d205f6efe9ff29499b","sha256":"08a0becdcbe4ebeefa71e951db1695caeabc3769669a0b3b424334bbe6e9abbe","sha512":"d7fb952985ec1eb7895df1ff1805b35a6e697280ecc292bf981924e9ab41304db4618fc9679a058ffa3a8c13dda6cf9876598f246519b5b7afe01429a9f84ecb","ssdeep":"","tlshash":"98515f350f6ec173c4b314e457ca37002e2224e71e45bac27d5f87889f91a5a934beb5","size":3162,"data":"","first_seen":"2023-05-11T08:07:22Z","last_seen":"2026-04-28T06:20:17.343607Z","times_seen":2045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"49aa3c5e88aa4f7af6adbcd284295ea7","sha1":"62b446ddc8db907f3e87f5c0b94c471315109a9c","sha256":"5abda9f2055b6cdb671dfeeb4be764509f7825c5ad503c50334839136f0b6c8d","sha512":"c1330d8dec261f96969e33002a516dc968d1c73bd2e71b104a7fc7b6ea54b072370c83a2197461529f1ed3da5bed5daf14fe791b136705d887c43866787268ae","ssdeep":"","tlshash":"c710000000000000000000000000000000003000000000003000000c00000000000000","size":2,"data":"","first_seen":"2023-12-01T21:29:02Z","last_seen":"2026-03-24T06:46:41.023481Z","times_seen":1239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e50eb7598b580311bab8f39bb8f4815b","sha1":"2c7c1a727ad282aaae5b102dd7e4e463fae22dd5","sha256":"b70a14ee1e15d7aa94bd810ec06f4cb77a346e8f33aef6bfeae3d7c4442d7a93","sha512":"c6b718aea4f8f4c915f55a1f2c992750f0f379c0dd6f43dad19ef323b40c3fe603513dd13eab3dda7f6731d13edb545d2c26b05ef191b01a8875477d753d0d82","ssdeep":"","tlshash":"c7100000000000000000000000c0000000000000000000000000000000000003000000","size":2,"data":"","first_seen":"2023-03-11T12:42:02Z","last_seen":"2026-04-30T06:07:33.636082Z","times_seen":901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b9884d9c846186c2a5426d7f46393de8","sha1":"16b489dd5824c0653b318a4d274b492564b8c92a","sha256":"25f682044b5badaff8b296bf6fd676214968b238fcff5559e64f38c88bb9790f","sha512":"a7fae1c57c697fbc247faa1a83807fc0bc2889fdcb9af77ce9d9abb385e2911f544a998b23cb57550e552c5c4ce7fa1ddeabcb2a9bc1008e96b85fbf3b373023","ssdeep":"","tlshash":"c7100000000000000000000000000000000c0000000000000000c00000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:08:31Z","last_seen":"2026-07-11T05:46:31.127435Z","times_seen":2876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"11ccfd5597548ed4312406227cc6df6c","sha1":"8636d9f9c3d62b2c3e00cb1ed409d774fb44451c","sha256":"29e2e48eb2d0d31aa882a4c97463a0952db73390b00d4ee23f8537c995895aa7","sha512":"6260e32073783dc7b19262ba95a065dda14689514d7d5864df54886c35933cd009203978a5e12abdd310eae28a7d494672341f4b3ae052de79c873a4050561a1","ssdeep":"","tlshash":"7ad0979278d270d6bc2f733e82c8826c43f400280ef59c86526a21e08b8f4817c80c00","size":241,"data":"","first_seen":"2025-10-23T09:49:41.258398Z","last_seen":"2025-10-29T06:58:08.304391Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-06-07T08:19:02.155739Z","times_seen":241207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd7536794b63bf90eccfd37f9b147d7f","sha1":"ca73ab65568cd125c2d27a22bbd9e863c10b675d","sha256":"a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c","sha512":"32b1786eca2b9f815b4c52b999e2b34dae877a86c00e8f745e7ac23388665c0703a947085bd7f975c5210ffab9b5a8f3931ab40b26cd7bccc4d7690cd19a4277","ssdeep":"","tlshash":"c700000000c00000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-27T12:05:28.88845Z","times_seen":54840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"00e2f52c4ea9a4da20c30e0d8f6eadbe","sha1":"611f3ba881be4af66f17665c06dbe52dd29942fa","sha256":"71d1b26f587508a97ee80f9525d0f03aec840e8aace66b321b0509a819f80424","sha512":"8988cfe7c2da301109ad8f854771a51e46c74108393bb22288d53bd5801d855d3e91acff7fb40617b212288296f5305229c1a5fc4c6b4a37d098bb2c610bb392","ssdeep":"","tlshash":"5f90028961b160064711711502260645f596254170270f7bc1455542299a514c562e0a","size":49,"data":"","first_seen":"2025-10-23T09:49:41.252108Z","last_seen":"2025-10-29T06:58:08.317587Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a55b98088fa69fb6a7ddeb861e555ad2","sha1":"d7cafbe1a6546f89b21f1d8b3f72273cbde63c68","sha256":"bbd518f7cd6a176d7a1db4b243eea2abe670dc90855390b74073550da0fa2e9b","sha512":"3077be9c699f864d4682999cd96313ae60a3632222293ecdb40b5cd70024d078ce2f5adadab966bebcb2ceb5cbc782ac41a477f1cefd3281f4bce25c08810459","ssdeep":"","tlshash":"bbd097c26d08402a0924a21c8283a03ea894a001fdd4fb84a30003d4083e950e83bc91","size":227,"data":"","first_seen":"2025-10-23T09:49:41.198925Z","last_seen":"2025-10-29T06:58:08.377903Z","times_seen":578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"32a548c953541ee0c551627e37d01d16","sha1":"22bcc51c0febe8425e429deaa28b408a99fdf97a","sha256":"4c0a4f32d5f4868bce79d2791a6450b52fc0c3bbac49dd87f2820032a5a426f0","sha512":"997590804fc10bbb357a70499f60a64b2247225b85a3cca92747cca1c57980a3cb18d29fb361cafcd6ad15b2a5d718390f4589c1cf751b3e3fde49c04b985765","ssdeep":"","tlshash":"6ec09b1d0b495018e17511585e9706549df166416d0c9d3a465050e555f1f9500dddc4","size":135,"data":"","first_seen":"2025-10-23T09:49:41.249392Z","last_seen":"2025-10-29T06:58:08.306995Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/player_ias.vflset/en_US/remote.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e616306ed28a3b3e23ee2c706b4d4e","sha1":"6ce09c22ac3a303538ee5100faa6a9afd8ce3204","sha256":"3446f907c511d155d4a2e5891a6f6300900a3017da17dd7abb0e86b2713e0089","sha512":"83c9bcc676d33041146a872a1d373f7cd201e7c17469edbf002a47f7e5a270079656198c10c8a1af19de526fb49bf8acd6c85b9b0e2fa08d7c8c66b3e0fca1a6","ssdeep":"","tlshash":"0511abaf3661e5108ad2c1b3aa1d9138bcbb0e087856843f702175c0bdb9d26dd2663a","size":1000,"data":"","first_seen":"2025-10-23T15:43:46.474752Z","last_seen":"2025-10-28T15:02:27.387133Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/magnific-popup.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c1eed43a7ff7b3891ec03f0c9e374c3","sha1":"923e7e8a25002c9566d8b0a488cbaffb6e4bfb73","sha256":"40888936f3dc9567204785d9d55fdaf5506d753e25ed5e45f7bd199501a0b1db","sha512":"2228a275e69773fd42cf65e10856b5cbbb1c5c9ec6b00e06443ef0d2a286fadb7630cdffd7f87916503cbf16fcbf812b68c744bb84a978dfc8fc5124c5cb0108","ssdeep":"384:DPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:DPBIt8I5h5t1qkOLCMst","tlshash":"32921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20215,"data":"","first_seen":"2023-03-07T01:40:56Z","last_seen":"2026-07-27T11:49:48.656344Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-27T12:09:30.511242Z","times_seen":278927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"415290769594460e2e485922904f345d","sha1":"95cb0bfd2977c761298d9624e4b4d4c72a39974a","sha256":"a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa","sha512":"121b4774a759924a2929c4a412fb6e31b9aaa746466840efcc4a76d69a94149e2364e3983d646feafaa1b511785e5c9e90aedc30da6a6bead5520ecc99c6626a","ssdeep":"","tlshash":"c700000000000300c0000c300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-07-27T09:12:39.247052Z","times_seen":64040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"714c10f6202a501d26ec9bde0fa2db16","sha1":"82c8441f29c14b07b991bc69f376efb87e4fc01a","sha256":"54211fbaef13be45499c24d6574a16fce4809095283beccf3f18ee75e8b94717","sha512":"ebdaff463483d5c98bd86184fa51c49fcc1bde463f54fc35a7f6c18ee4df44d4ebec5dbe13d6cc1f5dd3e9deefeafedaaf2dfd83e05f09805d0d5f61edf6acb2","ssdeep":"","tlshash":"c71000000000000000030c00000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-11-27T17:50:43Z","last_seen":"2026-07-15T21:42:37.955681Z","times_seen":5702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a3943f9892e943931c87f7675f39f431","sha1":"42e881887477c4940f6ad27806396b9f0083350a","sha256":"961b249a3adf919875db61c24850029da3f5ea5f46bc85c72c5a8ba40617374a","sha512":"c3e3508436e3e88b53547e7ca32759e8f96429da5e6840942cede98556f2d9fa18ee15194cd7e67f38be24631365e5da289a0870b422ddd03019ced358bd6a1b","ssdeep":"","tlshash":"1cd02289f38e30fd3c3421ae408cb21a8beaea61eb882409e21080f002e20001153d29","size":212,"data":"","first_seen":"2025-10-23T09:49:41.145519Z","last_seen":"2025-10-29T06:58:08.425517Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9340ae2b11fcae6bda385c6e1400d1e5","sha1":"fb8111db574b2f8740eaba838ae11a9bfbb6e7a9","sha256":"ddc58012a8e2d8b34674211bf44c26580d32e63fde51212f9a0a048799c77d52","sha512":"4544cce6b812a534d84a2e825bfd71d8e96782ff0d9b8f06a6ff3b7f05223ac4340c5e8d786c81617e6ceeefcb27d096b67f9c84d1e75352695a744f389fa520","ssdeep":"","tlshash":"b6d0228212000295cb29e2f04803a9de4924a452a8090f7a9760f203ca289c7a4e7b32","size":197,"data":"","first_seen":"2025-10-23T10:21:30.814905Z","last_seen":"2025-10-29T05:43:26.611421Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aa0c98f118c0c3cfdba7a58caaefeb5d","sha1":"91174b1a57a6d10f920996010c49a2a79dab29c1","sha256":"e70e8da14483cd83e07587a6fa3953ce431eb527aa34fc71fa1022641fdba855","sha512":"309964f39f183f829feb3fa675f960ecc0bd6d11f1ba35df1f6994b8f8142cebe81a2243edce0565a527c6a450f8d49741ef258af5d5f953531b79fdee072055","ssdeep":"","tlshash":"8fc012a65286906597c0546741236234e4db1489dc0915f75302f61df5b150a2426a51","size":182,"data":"","first_seen":"2025-10-23T20:25:38.961473Z","last_seen":"2025-10-29T06:48:20.379528Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/main.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c38611a4b1df10880a7c306465c3f207","sha1":"9988a511213e8cf3227d5ca3100fed01b6535edd","sha256":"c9fde4e903f1e08fc34247e862ae245257745ea191c524155576492427d5ade3","sha512":"0642f24a55e68b6814eef2759ab3e717bc6afea9d3591b1b73b014b510d6a25a74c6c73eac9409732a2544bf914f831ee9f8122600732eddac0b15f743eea54a","ssdeep":"","tlshash":"7851374a76f03bba81b720166e7eb71136764972264618d1c0f8ccfc69f2c593369c85","size":2914,"data":"","first_seen":"2025-10-28T12:14:45.844564Z","last_seen":"2026-07-27T11:49:48.578063Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"06f336ca4fbbb523a7ea02d3f8544408","sha1":"17944edb2edf27afc1a6d7eb5fff9d216ede0fb5","sha256":"5d9de131a6d444658eb762d0ff8089ece30a5897102608f31bdc5e8df2767499","sha512":"2aa3c0cecd3c534164e40a0b1d3481789860222173dbeab07f162da40b9288753acb1b2a631efca36917feaddf088dc77514e6199edfbfd3202be02c4b1476f3","ssdeep":"","tlshash":"f8c012965286906597c0546741236234e4d71489dc0915f75302f61de5b150a2426a41","size":180,"data":"","first_seen":"2025-10-23T09:49:41.195449Z","last_seen":"2025-10-29T06:58:08.45523Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-27T12:09:30.396419Z","times_seen":257580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"372fff7592da632f474211f21f697e97","sha1":"088fce0f732a78b962ec691d31fd87b0d9876a93","sha256":"7ce2b168f2c816d35dc7356d553dba34b1b6b4a89efea819a96cb3e59aece1a8","sha512":"8945961510b0897c23423bb082e6cfe9d79fda6e6b495b27aa00fdb1fb4064386fb94baf5d9919f1f50f89349c853306850bcd83709cf30ec1648ddeb417cf93","ssdeep":"","tlshash":"c4f0590c0648288cd80a9d9cc5506a609b8c927bba413051f82e054db9e3beb5870557","size":522,"data":"","first_seen":"2025-10-23T22:52:45.393643Z","last_seen":"2025-10-28T23:37:39.446179Z","times_seen":2181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-109558606-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0498274b300a25f77a181b50e2a5ae44","sha1":"2cc43cceb98dc2d1c395ff763c69c022bd61d1c3","sha256":"052810ed06b9dd63664abc79d6a675ec253dde8e892da319697e071cd788c43e","sha512":"7be0be8c6b316d6c54171b0ab568cb8fbed031ead530dc250ca62b694da72982898b03a0deb2c0145319ac9afd09fbae51b89ca263917f5cad77905f33cf611c","ssdeep":"6144:gRJDX484O9Z8nP5D6GN8xKlc/UEA1gxPSF0010X:oJD6O9Z8nP5umdgx2nQ","tlshash":"856407cd73d674268393a478503f018ba17b69d2f84cc895f186d8d82e70aaa4277f7d","size":313925,"data":"","first_seen":"2025-10-28T11:02:25.606048Z","last_seen":"2025-10-28T12:14:45.948412Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ea35635b801e2aa39521960170e9d215","sha1":"4b6628e924eab60965c20486fe92ed67cb048f85","sha256":"e0ec24a79a58654ae3383e645b0103d861173f251de0cb8617746c2d617c8002","sha512":"d6643cbd71bd73bd0857b966725b733bc2b1ff1ebb24e507e3447fe04ecde1e3da60cb445822092b2957dbe51f4c9ca366663e191f97418e3a1aa169b1aa509f","ssdeep":"","tlshash":"a7a022fc38022ce00c2a302e300a0000c3b3b080c8803ca8f338c8830bf028a2083c3b","size":73,"data":"","first_seen":"2025-10-23T09:49:41.197594Z","last_seen":"2025-10-29T06:58:08.302862Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"992da57882c7bf21ffec2101804e77de","sha1":"c6a322a31540526398537a2d22db197b35c85adb","sha256":"37e80e382d53e957d1758b79b4a13a71630c740d695c7034ceaf30f9c5a12c87","sha512":"d566e58afd1736db71b8feb1006a74b4fd947a0d3f5251267c29a40cfea790a3b7cdbde00e4ad2739d2f3062157650f53a53b15cb7027a1179175ec7c6dad52c","ssdeep":"","tlshash":"86c08cdab0889034cb81a9e390738208e5eb289994480aa3824af55ca9aa2091835f11","size":151,"data":"","first_seen":"2025-10-23T09:49:41.190139Z","last_seen":"2025-10-29T06:58:08.310764Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d20caec3b48a1eef164cb4ca81ba2587","sha1":"d160e0986aca4714714a16f29ec605af90be704d","sha256":"72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa","sha512":"242dccbd15e40f8f78cb6fc54cb9894713b7682afd1305d5230e26f2fda96fd764061713e4954e22457b37f25c328e8342c2bf6b55844610cd0756fd02271aef","ssdeep":"","tlshash":"c700000000000000c00000300300000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-07-27T07:03:40.041153Z","times_seen":83396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f0fd041c663148fd89e8ee97c9b7bc2","sha1":"58b8b456cb52206b49df4415fe3d7b3b3642f4a8","sha256":"0ad4dcabcb0a3048d806e83cd2f0bb17c3b641660c774eb3a166fffb16cdf246","sha512":"f63fb9eefa2688f6b3d0528f245674e9f13b7b5be154f8c4f88811fa5a2965fc54445b07e44d2cf850fbfa46555d04b8e30a241d00ea73d51af11f1b580a6aa0","ssdeep":"","tlshash":"3de07d9d3ea775781061a90c8d271106e82b0f566d1a276ff12346d52c39e3b9033fbe","size":350,"data":"","first_seen":"2025-10-23T09:49:41.240345Z","last_seen":"2025-10-29T06:58:08.388693Z","times_seen":574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/bootstrap.bundle.min.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c723f3a80b935e5e37ec46940bad17f","sha1":"2fddaeb8c5996f0bf7eee5c1b8ba30882f056609","sha256":"3126158d682bafa50bffd7907d0bcecadebf82cc5be9da70235cea3390db2c2b","sha512":"ba8d010cae55f7bda38e3a3c674be884e6ba58e4c83da4463c8fcf83718bcc4adc7ce2bc6e46696376877c6d56c12dae67a709e8672b4623b89910898c658e85","ssdeep":"768:tTYD4yp1HVeg3ZehUp0N4LnUXI5bkqTGAdQ+fZMQndVwkqUNF6JUhz+lcy+f9uBT:tTdimqTvZPzf4Fi7L8JPMU","tlshash":"3073c549b240b8b2069fa066807f460fb33b68daa50b815cb55dd8dd2d7cd89316bf7c","size":76308,"data":"","first_seen":"2023-03-07T12:03:55Z","last_seen":"2026-07-27T11:49:48.594427Z","times_seen":1157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/plugins.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e65010aad32214836dbacce6990fa7eb","sha1":"81ebe144920b215e897caac6655c478f4f4ae3e1","sha256":"acc0fd3559e18ad38e66e10bfa32deb4a1e7977dee7d47ae47edb3c0fcb44a72","sha512":"3c238f4c50ce0c0d341c980470ce5d448b8d3912c75a2fe4df2fcc102bab5e0b1598d5562743a110e3339112b00336aeca4e6a67020ec9c8f6f7b571b6403368","ssdeep":"768:TISLC7T6uYvn8wRxwyryVOEKXWMPBEEGjePGEVuiuQ:AT6uYvn8wkJgEKXW0f5","tlshash":"a9e2c50d73f73f7623d771e04aeae1128735a4e1794b0478f93ca6fda52984600aa7b4","size":32322,"data":"","first_seen":"2025-10-28T12:14:45.880257Z","last_seen":"2026-07-27T11:49:48.584527Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/owl.carousel.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"10301aea8bfa2cd5f8385d5ca22bbd82","sha1":"e1d1f7aec0763ed3ce0ecaac83543f87f0af86f4","sha256":"2c8420cb34017f3dd63097575bc6156c880097adb5af120d7e64d4dc6a106ad7","sha512":"e881cb6a5431a172715967acb323eb8cdcda63ddd7672ef49f0ecb3398940ae0f3f5a2aca4fea5fe91e3f26942c4ff92ae23431a47550ee55be645272bdcfe1c","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOP:oUMNlPBqJTuOGQOotEhKOP","tlshash":"a79393c1f36c261b422631785eae23ce723d412ad91118af7ca8e5dc29d5468437eff9","size":91472,"data":"","first_seen":"2025-10-28T12:14:45.944069Z","last_seen":"2026-07-27T11:49:48.628908Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-27T09:08:58.19924Z","times_seen":337610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53bdf76356abd3bce249982ebf333b7","sha1":"a5e71f212787edcfefffb154914c19a55979dfc6","sha256":"5ac084ec8860fa9472b4af0e372c275294f54ce2b02a1289e86d9a0c99702e39","sha512":"81418bde10e734062cbcac01583aa8eb5d55699a9e416ab6ec031ced12f4526ebdac1e6d378ed3522b17f3dccee5f26ce17df308d77a207ff9e76fbd253a1384","ssdeep":"","tlshash":"30e07d59bc69868c895b162e957bc7a8a58100492d90982300d1dac97f21ece029b99c","size":327,"data":"","first_seen":"2024-11-22T12:45:12.805491Z","last_seen":"2026-07-12T20:21:40.372515Z","times_seen":2217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5e20dd7b5d4cf8be3655267254a40eb","sha1":"38367e1c33afbd9baa77a8e4b2cddf79cf9916d6","sha256":"bc0cd2ae78cf793c9730040820f9655bf1ca13ba6c40ecb3e13a24316798461a","sha512":"24bc0aa0559de28841e642f67348e2d6e0e9545f3df64a77b9b8268bf207a23116747c9b4b3ea550a2a2ee859e138d761230fb1420ae9633f783ce6332d3ff96","ssdeep":"","tlshash":"94d0228212000294cb29e2f04803a9de4924a452a8090f7a9760f203ca289c7a4e7b32","size":195,"data":"","first_seen":"2025-10-23T09:49:41.24273Z","last_seen":"2025-10-29T06:58:08.296581Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-27T12:09:30.400949Z","times_seen":254246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_lib.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a781036bff64b8fdb1f64d73a110c40","sha1":"5b9f645eea9d940f98aefe62a2ebb215a1b1b419","sha256":"d5a4117a99579fbd511260552f0d103d3c3c9e983889d853ab245d95dd9ca7e3","sha512":"991c5ff93e85e56777fab81a4f68c5b1a89da86e277b84d9d5f4c0fa032fa646cec282fded57a00f7636fcfa2eda10fd8c83faa89b98963b2d1996434687512c","ssdeep":"6144:9RzEOQ0+iea98Hr9STVvCgfkvGnxjR9aSrp7wwL0kYlP:cOz+iiSTVv7oGjw2eBlP","tlshash":"53741a8d72a2707182bb307a456f410fb13a946f6409c8a4f56cc5e82fb8d6c61b7f79","size":353286,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-07-05T18:53:23.091465Z","times_seen":2759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1b12288cff580027a3b9431b4b9ef1ba","sha1":"1b3b95adda8c6a73951c1a8058a1eea9670e602b","sha256":"0dfea3c85c2ca5eb7e26a1e50d869b28eef0e8e4d06f7de95beed502e688d717","sha512":"5269dc9cfc27a2a9c1f9e6eca44cac9648aca8d2b7081d8111499c44687e87786a4712a319064dc6424874ac758928874a34c11d250aa85a7abab071c586d66f","ssdeep":"","tlshash":"c71000c000003000000000000000000000000000000000000000000000000000000300","size":2,"data":"","first_seen":"2023-03-12T19:03:08Z","last_seen":"2026-07-22T17:35:58.156019Z","times_seen":2288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f0fd041c663148fd89e8ee97c9b7bc2","sha1":"58b8b456cb52206b49df4415fe3d7b3b3642f4a8","sha256":"0ad4dcabcb0a3048d806e83cd2f0bb17c3b641660c774eb3a166fffb16cdf246","sha512":"f63fb9eefa2688f6b3d0528f245674e9f13b7b5be154f8c4f88811fa5a2965fc54445b07e44d2cf850fbfa46555d04b8e30a241d00ea73d51af11f1b580a6aa0","ssdeep":"","tlshash":"3de07d9d3ea775781061a90c8d271106e82b0f566d1a276ff12346d52c39e3b9033fbe","size":350,"data":"","first_seen":"2025-10-23T09:49:41.240345Z","last_seen":"2025-10-29T06:58:08.388693Z","times_seen":574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1091c7cb8745ba07537e9a643a922dff","sha1":"405338fa2512c979e6cd7c3c8824dd8f23f72631","sha256":"96ba366409ec45a9a63110c0e0daaedde104add732df7036b35756f043e4963e","sha512":"d00066f8caa31b2e213e7e8cbeaa6b15c96a8e713eebded5df2c14a131a61b3aed999aa3f849172b7ec3e3c2565d5fa2d2ffe087de17fef8afc593b83566b229","ssdeep":"","tlshash":"b221668a7b457b47a6b144cd8aeb12281168f439947c7c8fdc8093750984357402af0b","size":1376,"data":"","first_seen":"2025-10-23T09:49:41.15097Z","last_seen":"2025-10-29T06:58:08.333514Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e44d967f3e8a44f6a7fee562af4d82f4","sha1":"fbce2c364a46f4c8162dfc1f0473ca824a2a2195","sha256":"7aa5ae9ecf82f6fc5208ecd0940fd71d50cd4ac596fccac2ede05af806a87b6e","sha512":"713f70fc13f67223002248c5df5f220dd5494c98fc132d6b7e44efddeeb921d3f73aaa56d61015c1cccd564b71a297746b845de6a5c092d8f9139e9d44a52be6","ssdeep":"","tlshash":"c710000000000000000000000000000300000030300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T13:42:56Z","last_seen":"2026-04-23T23:07:37.679401Z","times_seen":2090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e44d967f3e8a44f6a7fee562af4d82f4","sha1":"fbce2c364a46f4c8162dfc1f0473ca824a2a2195","sha256":"7aa5ae9ecf82f6fc5208ecd0940fd71d50cd4ac596fccac2ede05af806a87b6e","sha512":"713f70fc13f67223002248c5df5f220dd5494c98fc132d6b7e44efddeeb921d3f73aaa56d61015c1cccd564b71a297746b845de6a5c092d8f9139e9d44a52be6","ssdeep":"","tlshash":"c710000000000000000000000000000300000030300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T13:42:56Z","last_seen":"2026-04-23T23:07:37.679401Z","times_seen":2090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"debb4038984a971834e5f2efbd0afc26","sha1":"6e7c7c777600cf5fcef9a742a16fcca7d823f79f","sha256":"db1dccb35670a8597ca2cde1505e3b0f72868d9a6976420915c52a9b155de754","sha512":"5dfa7ac751aa1188ca03685e8457bbad42ead20eda71ae2295b7e21a2825c4933b3d68010b17c2e78fe50df2699e0be68b8046cc8220a25394a06e4dd3820909","ssdeep":"","tlshash":"94d0a7742496101163bff1944e5e700023a39207e40bec50780d47641fc5718e4f3bd4","size":261,"data":"","first_seen":"2025-10-28T12:14:46.048648Z","last_seen":"2026-04-11T08:37:21.317714Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"648bb30185255e1320f64975deb1840d","sha1":"9c77df2ffc30e2bc7a15294ddc8e05c1134d71d3","sha256":"6132febc27812dd918060cbadfb5bb05fd311b90c46afb3461fd04e60e58f3f3","sha512":"a6abb4e0044b3c7478c407fe5f4aca6267a11c6dc483d591c8d052fd2917ce71440bf181e5005645ebd682ca94f2afbee38af66fec91471b130fd9670f40417a","ssdeep":"","tlshash":"16a00273c629c6570038966065a73116e12c57608816a01c435a568975ed41bfe9859a","size":62,"data":"","first_seen":"2023-12-28T10:07:33Z","last_seen":"2026-07-27T11:51:10.59718Z","times_seen":5546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9421daa32818de1351b6c0b4594567a3","sha1":"abab15b62e4165624fd0790ba89d8af08efdc7e8","sha256":"c84108bdf3d878badc951a9d26221f337a23760ef991fbaeed48effef8ee7968","sha512":"3c03fa5a566f1f2bc5d8fd15505f3e49286495787cbcfb9529e9063eb0ecc44eef767a66ea521b2b04d842a811246244b024232c4af6907c861fb43f47fb906e","ssdeep":"","tlshash":"36b09286f9958aa030b26b92c50b321f14e029169800e5a9f00c9a254b0698908069fe","size":122,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-04-28T06:20:17.369951Z","times_seen":2407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2a207891368cb41d50433d3ff38003ca","sha1":"14a5eb955db0e9f53b0f1e4b9ee60ba29152b66c","sha256":"4c227a10eef61806b8aa660d3a1bc5c2631c2b65c7628e8995c84de4a45e752a","sha512":"6976c6d534971f9c9b43305379ff654c7f569016e9f22cfd1de421983b602d92a29d09ffa08725cebef22541fd903b6372d8717290b703caac648d93040442bd","ssdeep":"","tlshash":"c710000000000003000000000000000000000000000000000000000c00000000000300","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-06-24T11:37:54.038771Z","times_seen":887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"393fc6ca298cc2a614dd3c22ead1fd37","sha1":"dd2e3f5584578ea2a7474844d1ebce92efe4fafa","sha256":"823aabcbe0e1f29ac1932e63039cec53100d580f1436a79780cde25d0c7cdf3a","sha512":"d956dd7a074d9dff5ae9dcbb84ceb5fd0f97baa66593e86f7869c8e7802b09e4227a633cb1e94867716602b6ca55029813293ab4d553fd37b4bd2aee080f04bf","ssdeep":"","tlshash":"5a5130a2605ca01b4543d5d0f8a23eeef4de0058c77569d07e1c29efdadacb7049716d","size":3010,"data":"","first_seen":"2025-10-16T19:01:50.955702Z","last_seen":"2025-10-30T18:36:34.372984Z","times_seen":1137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0473369a4d1b85135ba23f1008de16b1","sha1":"e7ab9b05c8ddcf607375abacaea7717a7a0ccdf3","sha256":"d73de45d07342ee413e5649fcf9e386b29f7947056b8ea6d0ef57ab1a7d4c4d2","sha512":"2512835e8d71320dc56bdb30a84053d750c8b32eae84036fa682dcd5ddf627e0e259a9ddb1271b46d685f0a918fe2b4ddd66a10b77d107b4be4dc4c80f23a828","ssdeep":"24576:i7pYrlR7D1c7IyxYfS+W4dFqx2xOzsQMLA/d2AnG9Apmzvk5n2XcnB:iNYjymS+W4dFIgpNLAV2AnG9Agvk5n2G","tlshash":"26656bd1b2c5f4a603e341e6943b1001a33a2c1a740da458fbbcdcd7aa5a58e6377f79","size":1520633,"data":"","first_seen":"2025-10-27T13:48:58.293215Z","last_seen":"2025-11-10T13:49:41.747229Z","times_seen":841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/our/i18next.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/js/our/i18next.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 557\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"52a-5f8aa4d7204c0-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 12:46:51 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otvnNskwBruO50uqt4aTrixJBvKqI4IOggXk8ARiZFvciv73QnapfAjOphdaqTEy%2FObd6TFt0i2cIg1mru%2B4SeT%2BVtnor06Iw2mwx0TZZOTU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996a811120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"1a80aff60a79f6c89a0a50c9eb96c645","sha1":"92d0601448dc60514d04505661cf602c3088ac9e","sha256":"95deeb4c5d331ffbf7c0afc0c53850f1a9065b00d7b91f69b3d13486ea1a6215","sha512":"28a4a0b0f9a26649e694dd28b1eb00dd9f1c269c0e5f1948d0286a63d6f1744ffe90b702cf15e55111174062d996ef0bebe2f9ea50665058ed239676e63eb879","ssdeep":"","tlshash":"67219a9920f7966450dba16a67cb3684786c805732649d003f0c4e021fb2dbba7e8fd9","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-07-12T20:21:40.202696Z","times_seen":2890,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/vet.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/vet.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2118\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"c2048e55a7a97c140d0f126610298c52\"\r\nlast-modified: Mon, 24 Apr 2023 15:43:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA7FDDD5\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpMgpt0R6ul9fNao8F6ETyBqm3b3NTMFDHwdhLWKrYF%2Fnx%2F7NK58xQAolzDUWc2mqUC3Jxx7YR4LS0%2FC6TdDGp5x3Az8nge89PfiRDHBTOzU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997194d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"c2048e55a7a97c140d0f126610298c52","sha1":"0b5df5b1166c69617ee3ef9a7df009c512957bad","sha256":"522f9f44e9bf63e030177217a59dc5d66f4d4a880ebe4a5f90fd0111b20e4a46","sha512":"b7142d41440e56ba36f0a3fab30fc95085ce38734a9b4460129d3679f93f0741346efdf758ce3350dd146c2eb23ea6ea2fb0f2b15df95bb643e359f684a6ed38","ssdeep":"","tlshash":"e34109a799d81a6abb460550022e5368fd257f23c070a9ea8abff00d147c81524466b1","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.09519Z","times_seen":2374,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:59.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1761653639544\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtWbVM4MmFNd1E2YyiD54LIBjInCgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiA4\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20251022.22.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 822776121\r\nX-YouTube-Page-Label: youtube.player.web_20251022_22_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1761653635736\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 11989\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/GmOzih6I1zs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Tue, 28 Oct 2025 12:13:59 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-07-27T12:09:30.27366Z","times_seen":282155,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/png/pyusd.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/png/pyusd.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 3500\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 137 x 32, 8-bit/color RGBA, non-interlaced","md5":"69455973adc4a1630cf210271e023495","sha1":"6782aa7bfa146414ff5732e620e029c276b4505e","sha256":"18c60dd8061a79ecb856776bb566525ebf0da2c447bb6ecab87467db75e104f0","sha512":"cab9e9c3eba7e6a45f36fc350029779cf9876bd470c1abf446a936d5966ea1076bb892233073df046b36c9b356c93323789ebbff78d94c35d30a6f2e6f2eea0a","ssdeep":"","tlshash":"50715d8c38d3e491948ea3916cfb401370ea8944b5c4e9696dabc0429ba62ba554d1f3","first_seen":"2025-10-28T12:14:45.83589Z","last_seen":"2026-07-27T11:49:48.570257Z","times_seen":12,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":785,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/atom2.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/atom2.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4739\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"33662df79008a19c386b166304b791f5\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA66BB27\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wHXcm0kPe4hp0hi%2BGed1VyOJ19CO%2FAZyKOveHbNf15UFW2vw%2FXw1bjyyIEj48f1SravG8MGWUqQAlGwdEX0QWh5pgZ4p9DdHqEWSfUg7wt0M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59971946120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"33662df79008a19c386b166304b791f5","sha1":"88ae1d0db783522cbd76a781702c0673564bd60b","sha256":"1aba6311f701d7c49b88bb49ea53459f2ab3a6868c29c5e95353e14016ad43a5","sha512":"ce3ab81afc302c13e9c2238d831c486a94fe8de265b81a190a5d8c03a44a2f19f63253c48f41c698691644e265a7f57f259843f833fbe3330b5400f544d1ef35","ssdeep":"96:hk8ISdnQRxt0rRAIIgejoUNAKWxr/yqhfNaRYu57Hk2VE/:NzQHIVejoTx/yqFUYuiJ","tlshash":"2ea18ebf05ed01726eb8055cc6bc0851c48a01261eea8617bc06e1c5a2fd91fa2fcfd7","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.085577Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xem.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/xem.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1896\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f50314d62ddab04623e41b8c05fabb41\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5F042D36D\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2YfnUI4tqnCHiDiwhmtAG1XjXxNcXeKb68y5UXVHaPxUdbFO2%2FjEijojWZWHYAvyNwacv9Lm9GujZ1rPePuJVbjl3KcQbiAJDr3P7inv%2BPWR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997baba120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"f50314d62ddab04623e41b8c05fabb41","sha1":"aaee0c0c2e947e863da578849f8e62ea1c04b0c2","sha256":"2a4fc5b1951a0841abf245af2a759e5393a252e8f7f943975fee9b67785279a0","sha512":"6bbc02ed18adb43e8cf00a4ba8f83de8ff618331c363375b54e022e28c5a14f354a27fd4bfc2b622913a6d4da5d8f9b7599047d8dc25c94dcab00f4082fb084c","ssdeep":"","tlshash":"9b413bc92e0cb8d76ee8fb712125f5217ab2df2fa5955d9c010bf4bab0455820505d05","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.105464Z","times_seen":2393,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/webfonts/proximanova-regular-webfont.woff2","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/webfonts/proximanova-regular-webfont.woff2 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/static/css/merged-widget-style.css?25799\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32688\r\naccept-ranges: bytes\r\netag: \"7fb0-5f70afa528940\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nserver: cloudflare\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nage: 4692\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSFli6dYccAN3hkVhhARlttCsqUx3l2M2B6hbG1Q%2Bgav2DNVmKvqMCqNPNrPF0vsDUOCTyzRbqtBkyYuMYTdK0Su5HUY7y6NinUlQwURscgI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a599bece2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":32688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 32688, version 3.917","md5":"cf4a3df7970f0b16199e148034bb2c37","sha1":"f5501fb2d774e46756b23f034ebb5890c0dbf2a8","sha256":"ceb4ce0bba67a12e21af094eb24293d7ea8bffaffc237a1cd90394c7588eaec9","sha512":"e5e7c7b238f6927a5fab2b1b80210ab1e5be8d86a5bc93328084dd17edfcc5580c3d42a32e051679b28c100977a5d37304e81f0a5d8e7dd2b35f453fe5383497","ssdeep":"768:aql0Gwnrpz7x1Zj5sTzCbxiOJ9Yyv6uWSuCtjeruUm:aqlkz7xps4iiT6ZzYv","tlshash":"63e2f247c8820efc3f84423de6767153b5aa8351749be21799fba9740aeba2edc51900","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-07-16T15:25:12.471608Z","times_seen":2880,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yt3.ggpht.com/ytc/AIdro_mA5cBiwEUe9lN5xRm0xqR-mhbkQnNv8obqiCnVEpb4iw=s68-c-k-c0x00ffffff-no-rj","fqdn":"yt3.ggpht.com","domain":"ggpht.com","tld":"com"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:56.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:33:53 GMT","end":"Wed, 24 Dec 2025 14:33:52 GMT"},"fingerprint":{"sha1":"DD:9F:C9:E5:86:0D:58:3C:A2:54:E5:B3:6A:85:3A:67:2E:6B:01:32","sha256":"70:67:CB:37:75:D4:DC:75:3D:35:D0:E5:15:E0:5B:7E:12:75:F1:AA:1D:A5:3E:0B:52:C8:17:7C:4E:49:44:01"}}},"request":{"raw":"GET /ytc/AIdro_mA5cBiwEUe9lN5xRm0xqR-mhbkQnNv8obqiCnVEpb4iw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1\r\nHost: yt3.ggpht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 1511\r\nx-xss-protection: 0\r\ndate: Tue, 28 Oct 2025 11:41:10 GMT\r\nexpires: Wed, 29 Oct 2025 11:41:10 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 1966\r\netag: \"v1b\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1511,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3","md5":"46100dce8281e9c2427c6efcb5db01a8","sha1":"203328fea2098ee6757e73f9771704301f0174b7","sha256":"06abede84e61d434a54e83beb555ec771560f3cf1bdf6904de442b5e471d5c7d","sha512":"81db51c5ad665b84b2a4c0bdde79dcf83b2cc7cc5ffab1e37ff68bc2556db4270e8bf49ac28e6d78511ab43a7e13494e10d3bcfe5251af9d36fe44a70852d95f","ssdeep":"","tlshash":"d531c95132910d43e8956cfd2198124a665dc6f98c21c3c2a355b428673d5672bd7b54","first_seen":"2024-12-10T07:13:46.600081Z","last_seen":"2026-07-21T21:21:02.396904Z","times_seen":46,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":173,"dns":72,"connect":12,"send":0,"wait":9,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/favicon/favicon-16x16.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:58.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/favicon/favicon-16x16.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:58 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-07-27T12:14:02.126504Z","times_seen":146488,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/css/flag-icon.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/css/flag-icon.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 33836\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33836,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33836), with no line terminators","md5":"a2cf3008420f6a1ec82eddeb382e0b0a","sha1":"b0a51b352e79ed21cd5bdcc64fc66922d4ee5018","sha256":"e40236d3db9dc69a19623646ee83ceaf54fb60ead21c2a7c57760b33890ed6f4","sha512":"0d7bbe89360ded38c110aa95b6f0a04ee034f46a83e33ad14acd81a1f9bd98a17d7672fd46a95150402b5f9a8710120d65e3a71996875c4dbba384c3c10302b2","ssdeep":"192:c5B9y1dbzi85+DkROJup2j0S+iSM2nTMVZVJggtfQxK/dyeOKeOW:RdK85+DkROJup2j172nTeVJgAfQxOpW","tlshash":"0ce2f963da83e41fb60756337a167618a3df2492db814f2a34bf62b1d576244343afb0","first_seen":"2025-10-28T12:14:45.83971Z","last_seen":"2026-07-27T11:49:48.598115Z","times_seen":12,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":183,"dns":0,"connect":114,"send":0,"wait":202,"receive":3,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/dash.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/dash.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 18136\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8d6a01e28c3410051de22bb296816af1\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EED693F8\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNLjLYGx%2BGv%2FmHoU%2BqL%2F9lr0b7JDQInbuHNvs%2BMz5zoJU2MSi8MHbjQpfAkueIRccUTB4gJ4C1Od%2FibOE%2FLHy6XY0l%2B0j1%2Bii0MGeRta2kZT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59979a86120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":18136,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8d6a01e28c3410051de22bb296816af1","sha1":"0764d9b321860b8f76ddfd5d5255e994ec9891e9","sha256":"a55ae33ff02e8cbe15724e191a8769aa183127ca306c3837381f02dccdf4a9ba","sha512":"53075b5ecce625006cf8735feed0b1584695c60314eb4cd1b2facfd1cd1faaaeedadedbe89f07cf5b9638d0524ab7d58c3ea9e718c2fb197e562014ab64953f3","ssdeep":"384:4uvh35wBCnThhIrd5JR1m/T9VkoI3e7IJDHhLa:R9kCnTrIR5JKL9IhHc","tlshash":"8982cf063eb4672eca7c17b12e420562ce2fbe112a14132bf39f1956539d13720ad6da","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.042177Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AMA/d=0/rs=AN8SPfp725l7vLLQI0dDpE9EOAvognzfug/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 09:58:24 GMT\r\nexpires: Tue, 27 Oct 2026 09:58:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 94533\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-27T12:15:03.393404Z","times_seen":72053,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Oct 2025 18:55:34 GMT\r\nexpires: Wed, 21 Oct 2026 18:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 580703\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-07-27T12:15:03.392621Z","times_seen":76966,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251026","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251026 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 28 Oct 2025 12:13:58 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy: script-src 'nonce-nP_6BlictNzmKw1j8jrqVQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw1ZBiEOLmaHvedIJNYMfGTg4lpaT8wviSosS84pzEktTi1KKy1KJ4IwMjU0MDIzM9A4v4AgMA76IRrA\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=29.SE=T8nwjlPr1IfyWxhe_l8bkZef113aJwx0gyN7eCT1XpANl3yn0tUBXrAQiPlXQoUeheXVfX_heosBxnW7xqfR6hAorBoEEEnLosr7L0zBKi5O3urfc2LyMDuvHlI3v3mIXoVn7USzibXRQJcuEcTKOzXQvqtC41cQPHF2iI4P9kj4eSJQ5uOf0D7zQ9dVQMfLpz9eXJ3y5NxrQ-x4ngMHprLRSSdkYVQD_3VzqlfTSnbWlNEESHcQC-HdLzpbsQ; expires=Sat, 28-Nov-2026 04:32:16 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T12:15:30.756688Z","times_seen":17562751,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/cec8679/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:58.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/cec8679/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 18508\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68fb2935-484c\"\r\nexpires: Thu, 06 Nov 2025 13:55:57 GMT\r\nlast-modified: Fri, 24 Oct 2025 07:22:29 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-27T13:55:57+00:00\r\nx-node: m9p-up-gc53\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113996,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dddf55b8f16ec587cc137175c877da48","sha1":"25054abfe547c42b9bfaaea73fd4a217d4bbce11","sha256":"662c0d9910b78b99659f74088ddf3353628cbcf9fb9b1b983fc0303ae70d9218","sha512":"66c884b3bebd83f2a9dbc6db9e4ec4b0749876e9fd213aee62e23f5622e8dfa8d8213e6b285b3a881f949e70a6369d5647f56fa3e6751d8d1271297fdbe059fe","ssdeep":"1536:uL52TKFyX6c6Rrh1DuVy22A22S6p6yK6D67+tlm4gUG64FnPQliJOpOSDU6CcpoA:GiHcuESb","tlshash":"85b3b76aead2a53ce51e941ac9c5aa3c663dd102df230daff344f3e147c76e21276405","first_seen":"2025-10-27T13:48:58.275331Z","last_seen":"2025-11-10T13:49:41.582265Z","times_seen":924,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/hashrate-main.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/hashrate-main.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 605\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":605,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"340725158184f893f44e55e4560fcb40","sha1":"103e46ce57b085a1ad5c54627eacb8d30c15110a","sha256":"730135710211b6d8fd95daeea76e0e838ba04de1bb7eec7ec8d25c6111c4832f","sha512":"229c288e646d3fd5afc97a3312b06c85ee16a266678c7e9e0041a08dfd4d52b5715601d8a836039e656fde0390beac1993faf10e9c6fff39f606551c6e769b87","ssdeep":"","tlshash":"39f0ac0dbd2601b93634209ad87cb32463b2f31ab4cec14d3534419b57c8e643ae820c","first_seen":"2025-10-28T12:14:45.843237Z","last_seen":"2026-07-27T11:49:48.594988Z","times_seen":18,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":429,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/player_ias.vflset/en_US/embed.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:55.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /s/player/25f1a420/player_ias.vflset/en_US/embed.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/GmOzih6I1zs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 9442\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 08:25:09 GMT\r\nexpires: Tue, 27 Oct 2026 08:25:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 23 Oct 2025 04:20:06 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 100126\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33155,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"e08194809adeb63139c0d3edc1a4a53c","sha1":"68c6705a036587a3643784d51008a2ca26ab8ee4","sha256":"c0b1fc893f3608cf111918e74475567eb58f8d3163ad6578b2d45030ef76540b","sha512":"72a3150d0c11efcb8602fa799f9d1ac27eeaad2ded033ac5f71765fe784a68065b2f15e47606cd5a94383e2e38ce938d7a7b9bfc91e2bc9c758654a77c2a9688","ssdeep":"384:UyJAaJpr+3TDYRgyq+e8Nb/XKCcdwxEUTGX4yIdEDTLCEqF9uYUj+/pMio4G5Z20:lK+1Nby0EUTG3IdEDC8+/+ibG500","tlshash":"00e2d88e37e2e4259566e1ee2c4b1108673794cc58a0a36c763edde96db0e18707bf34","first_seen":"2025-10-23T13:13:48.054041Z","last_seen":"2025-10-28T15:50:21.953913Z","times_seen":487,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/main.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/main.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2914\r\nConnection: keep-alive\r\nLast-Modified: Mon, 24 May 2021 05:29:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2914,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1711)","md5":"c38611a4b1df10880a7c306465c3f207","sha1":"9988a511213e8cf3227d5ca3100fed01b6535edd","sha256":"c9fde4e903f1e08fc34247e862ae245257745ea191c524155576492427d5ade3","sha512":"0642f24a55e68b6814eef2759ab3e717bc6afea9d3591b1b73b014b510d6a25a74c6c73eac9409732a2544bf914f831ee9f8122600732eddac0b15f743eea54a","ssdeep":"","tlshash":"7851374a76f03bba81b720166e7eb71136764972264618d1c0f8ccfc69f2c593369c85","first_seen":"2025-10-28T12:14:45.844564Z","last_seen":"2026-07-27T11:49:48.578063Z","times_seen":11,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/ltc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/ltc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 26929\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"61c5df66e88adb4561f3618d2ae8bb8e\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E87C3672\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9l%2Bae61niDt0JfnmNQa2V%2Fgk%2F%2BPYjwcBCB8NC67IzXYIlMNHd66I7HHv4sBnruqbqCQmmYyqp1QgYZWJz3OJkW%2BjXtXwhiPo%2Bguj9n44CCH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996e8ba120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"61c5df66e88adb4561f3618d2ae8bb8e","sha1":"7fe126725bef41bcd996a49569407d9a98faeb33","sha256":"c3e3ed970a9a8ef0357b51ce0efe061dccbfc75dc4b219614b682f2459a1a809","sha512":"10a7850d7ba5c279faaf6601557ccc02ef1385db3802c1c60c774139508444d90577b179d55e51ac7643c702062cd85c443a617c7b372c4825bd76275409fd50","ssdeep":"384:cn4UWxfWMxc6vpRbw0RkCbvAl4O66PE97dmgbQORNO6Evw+bGR9q0wAjsiiXmEW4:cnFEWf8X4hBPErmgbNNOFCjzj7hO/B","tlshash":"ccc2af3f76e5dde97c3c844865f2be89669404b0d7c2db00455f3b689843b8360e22bc","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.073027Z","times_seen":2441,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/highcharts/highcharts.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:56.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/highcharts/highcharts.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:56 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 229576\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229576,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26049)","md5":"7dc936b4f5db428f2e7f273d5a78dfa5","sha1":"87dfa4ef47837b27f0e52fdce3a4a86a04f04bc2","sha256":"0075ff303b14d070e4a4bb493544498b078a489f0d4d9cde3d9207c8f77643b1","sha512":"2eb300abf31aed3a18d6f15ad05aa1e7d6ca41154ac33934a81b1838ace0f679dd3377d2d7b29f5fc265726cf9789571ed7423c2369762e16b638f3121b08691","ssdeep":"3072:FOaxFL7YAcK93YnGNYkvQR0yDgxNNSxDB3TR5skgzbr7:8a/4AcZsBvQbDUNNahWr","tlshash":"25243bc9f2513623c66733a9542f170f1133a46aa688892cbdb9c4e75d2984c367ff39","first_seen":"2025-10-28T12:14:45.845936Z","last_seen":"2026-07-27T11:49:48.652799Z","times_seen":18,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cec8679/665.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:58.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/cec8679/665.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4028\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\netag: \"68fb2936-fbc\"\r\nlast-modified: Fri, 24 Oct 2025 07:22:30 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-27T13:55:57+00:00\r\nx-node: m9p-up-gc89\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9970,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9970), with no line terminators","md5":"123b6fde11b94f4246d329fefbf9eeea","sha1":"54355e4e26019278a0252b3f143026bd954427cf","sha256":"e300aeb8b1cee196f847805fdc3036b95d22d39c6c88879aebfb345eb9eb8c33","sha512":"27f52911d0bef09a89733ab97c9e94d001b786d3431648cd615b245326ede7ff02042862e6e06385d87e34a01f2d5cb597d43ff5d142f55037618c7fa8625496","ssdeep":"192:zdkpVXmS9CM4jXDJEuKLDbjrsIHvBJcewQimEFFfBTH2BXBCXj+V:zdQT3DT70elilFd9WBxCT+V","tlshash":"9122d619ba80b22014ef00e6923f598fb2b2c43ca799d1b0711ad6fd1af981dc117fd6","first_seen":"2025-10-21T11:41:49.886771Z","last_seen":"2025-11-21T05:41:36.541353Z","times_seen":1690,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:55.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Oct 2025 08:14:22 GMT\r\nexpires: Sat, 24 Oct 2026 08:14:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 359973\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-27T12:15:27.15504Z","times_seen":947422,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/webfonts/proximanova-semibold-webfont.woff2","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/webfonts/proximanova-semibold-webfont.woff2 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/static/css/merged-widget-style.css?25799\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33124\r\naccept-ranges: bytes\r\netag: \"8164-5f70afa528940\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nserver: cloudflare\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nage: 4692\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04LvZMb7caUOC8XexDo9J6%2BRC1VKhD8oM1Fji7%2FdsC7vNaTpXQJbf676zZYbqM4t9WJnH9QMgfBAY6W3QcSOVKp8JoBziwNVz0K6UiJb5e21\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a599beced120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":33124,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 33124, version 3.917","md5":"fdda429a1a07541b0bb84ad21d01be10","sha1":"2db29ef19561eff816a5aaf28d069420511ca03d","sha256":"ae55c313220f063fdb3dc157a89a22e6a20a400cdd5b639a5aabfa4ae91e476a","sha512":"fbcad7a1cb265e90d7dd3a1685e6b28b28ca42ea7313c82769debf013c26d4f50f89700d6601450e1c065659a78fbdbf355aef573ae3b9b86a7b37698456afb5","ssdeep":"768:kN7vTV7/L5e897e3qf9h73sTv+nZDym77GWbJkr:kN7VTde3aw+hBegu","tlshash":"9de2f15ac3119ea2bb2947705f923c819536ea5486bd78cd3306cf74de74422bc79387","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-07-12T20:21:40.047407Z","times_seen":2799,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xmr.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/xmr.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2025\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"b1e731922e54fee58383e9386d40b570\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:09 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E9402E5C\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kFRNFePe%2FXsM%2FcHP36zucIhcXminfLoWUyVexIAFgfGdXzLkyFRSf4rbtROPriEAcIA%2FHHTo2JQEwqiba88apABCJunJ8pFX3B1rMvOk2qz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996f8f9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 79, 8-bit/color RGBA, non-interlaced","md5":"b1e731922e54fee58383e9386d40b570","sha1":"fff19bf88f4d633e83f7e4f6d4301ac8a6a2dd93","sha256":"4481f79af008865dd6f9982ff1a674af3ee40cd1a4b495e8b481001b40bd0fe7","sha512":"f3b58f553a9556b2f13ff65a3951ee0abd74bac221d9b3286437b1ad8375f3226cb660ee6183289989590294f25b8100ff7791b2aa0b68cbac137cc64204500b","ssdeep":"","tlshash":"de412a5a0508c03a3f0139a9520704b1b6ea8d2d0bc346c5ecacb429bc4b5f1befd08b","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.04362Z","times_seen":2382,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xtz.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/xtz.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2358\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"07cc10b45abbc1813fdda4f1ff5ea8ef\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA68A1F6\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2G6MiTKShdJqSfd28o%2Bt9qemO3DDRq4aeo3%2Fbvb0cH%2FZnGNawwQtNiCLfBuvqlzuaHWukF6SybZBpICTuC%2BV7SMnPWrY%2Bo%2FQ7w6gryyOG9nW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59971953120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"07cc10b45abbc1813fdda4f1ff5ea8ef","sha1":"a58d7cc10263a0aad0b239747b75c331cdd77d73","sha256":"d13fcc3d207e2f211d14ff9c0685829131d3e1d15f0553ee1950c28132aa20ea","sha512":"5db8c5f024d9151a24310ddfbbcc9b2193712333e04fd36079bee4312d31e5bc0d98beeedb5b4a5679511c46b2e3ae84e160c4ee9901eb623e6772fef36eb14f","ssdeep":"","tlshash":"63413d5393338e0b6d406892073cb59694653782433b5e53f78438379ef219c2b49517","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.110207Z","times_seen":2380,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://widget.coinlib.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 995a599858bb7129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-27T09:08:58.19924Z","times_seen":337610,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":21,"connect":1,"send":0,"wait":22,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:59.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:59 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68e66124-16b0\"\r\nexpires: Mon, 10 Nov 2025 08:22:06 GMT\r\nlast-modified: Wed, 08 Oct 2025 13:03:32 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:22:06+00:00\r\nx-node: m9p-up-gc7\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-26T18:12:33.159884Z","times_seen":16635,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/zil.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/zil.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2393\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4ca6449ecc17fae3d40de6f0548a344f\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5F023324B\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iisu7zibY%2BSwN8LqA4zYMMtB4FiRCg%2F6Yg3nFPOu%2FxSWwzZGSY09Xtjbc%2FvO9pas8ws2momGPGIZ%2FW6NZ4CtQyFKYNQVufAAm%2FfjLbsNNdTS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997bab0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"4ca6449ecc17fae3d40de6f0548a344f","sha1":"ebe7009274ed22c41dede26c1f788500df4b4ed7","sha256":"e6116216199944975ef0d971401ed6fb5f29919ea196da1e2e8fc8e4ceae98db","sha512":"3f657c4b48d4f20d20e05054c887c9dbc42e87a2632f3bef75cf894b0de128e3e8b06455453a58473e5fe4748affe0be7a46d01b4e2e699971ad28c7e5347b0e","ssdeep":"","tlshash":"b2413bffca8124ec2f9d4436ddd7d022486afa053241ec852ee3a43367212392f2325c","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.134387Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/player_ias.vflset/en_US/remote.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:56.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /s/player/25f1a420/player_ias.vflset/en_US/remote.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/GmOzih6I1zs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 36583\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 08:31:31 GMT\r\nexpires: Tue, 27 Oct 2026 08:31:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 23 Oct 2025 04:20:06 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 99745\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124356,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (540)","md5":"1184b7f2daffdb8d3c9a832eee17cd03","sha1":"56ff4ef9d47690a0bc809ad29187070a31821f10","sha256":"3ffb589f655286ee4b8d40022aaf4543d8e2ad19c956bb5a51da22ac736bf45f","sha512":"a95afdd22af2beb85858ec1095dd733d496f1f47856c3f70fccc1f90aff1b1e7ec088ae946bbb45dc7a820193766056ed0de1105a1ae156c31cd611c8f7d65cf","ssdeep":"3072:9dgYJKeE4eRUpcJnhwTicUkucBZVPBxVbpXv8f:9dgYJKeE9RUpcJnhwTicUkucBZVPBxVW","tlshash":"78c319ccb2d1747122a3f4b1287f100d9a3b65cca888062d7649dcd25db8a5e427bfbd","first_seen":"2025-10-23T13:13:47.949244Z","last_seen":"2025-10-28T15:50:34.101949Z","times_seen":436,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/css/merged-widget-style.css?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/css/merged-widget-style.css?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 14809\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"13a14-5f89b5974cf00-gzip\"\r\nlast-modified: Wed, 05 Apr 2023 18:56:28 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BiFbIOiJnsMw6fot9I%2B99RzMHgJB4VUfrVEsUXVPtDiDj15iIyK6PWrNup0Xs5WlRjEVHGkiILvhCqDp7qO1c7P9WAP75sVBwvoyeUMOSpW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996a82c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":80404,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65356)","md5":"28bd4be37fdf2213a32eaadad9f0dd18","sha1":"291514eeba5a75459e474d4873a29ebb3d18de8a","sha256":"46fd83a7ec1d27a1e09a5fa35a5eb29a729b77e1e606c6693c1ac45e69dc5c24","sha512":"7143f467aaa16489810117557970e0f1a4c1315e790c036600f158a6c26a01655dc815867d63a1cfedd795bf93fa8fcdb8ce18c4349b5e10a83247b5ca7aed07","ssdeep":"1536:wPiYVZxYXeRCV37exCwC1yJOT6Pc8E3rKUtix:CiXht7XS","tlshash":"70739552e540211ff0178559f584bee9366dd593f60a0bbffe7932b08e465ab2a33b00","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-06-09T00:21:53.222382Z","times_seen":2759,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/algo.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/algo.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5104\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d737571240e08413e9ef6d92ffdd9916\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:24 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA642A74\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oL3FPyw2WN27Tv9%2F8G%2BsfJ8qtkn2ukKyYgr2XEK%2F9C8lriMVoOnecu1ThCLqEXZ1VhOOJRH9GPTaKFKClxSYHoCZS78pUj19TePT5Cglxjvp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997194a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"d737571240e08413e9ef6d92ffdd9916","sha1":"9ae866fcd05f06cde67b0bf28b7d4763b704e88a","sha256":"2aa85f4f80ee00632181f6fca04749b8b6cd10a00f65eb3a40e28148a2255b15","sha512":"9a78e167526468c8126ebb12dfd640edb94b2e637e834c5b19c8b88c4aea40d889d80e1de2d2a0b90466934522d52e7caa148767c83ab791119d77af5971976d","ssdeep":"96:TB6sIhfxaYmLDxGeacKEHD5W+f5U5CYWv1fUYDLXp:TAs6fxaYmLpaHEjy5anDjp","tlshash":"41b18ea5fbdcc7f4dd702a68b2e210814c61702e8f52c3ae8e4044e960459283fbcab9","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.052035Z","times_seen":2375,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/snx.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/snx.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 10681\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"efad452c761f8e466a2922b6ff583c48\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EFE34CE9\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAS%2FnpRUw69ZyKZ%2FUN4hRolV5R2YF%2BJF6m9YPJFJvNesskewDKcmq4GaqfHUu28rkgsSMo0Pna4vb0srytTbsb9pO2Ne6aEzS2OiUcjGYstH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997aaa3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, interlaced","md5":"efad452c761f8e466a2922b6ff583c48","sha1":"33435b401b5384a9400a85286ce04416f0d7f758","sha256":"e805352489efd80a7cc1e8372984c8c2c8547f290fd5233df05d5c821cf5acac","sha512":"5c9092471088a53cea5971608c6ecf6838db6cf6edab920ae320909d7c6d0b2d7d66e916472e0a542a520e9a29eb06dc485afb3e6439d8f1a7a03ad1c9105090","ssdeep":"192:HB9F3QwL0dUpKZXT8y+vfBbnxbKjAt9MGyjPtJ/ET7+Zu9nq7VDEJzM:h9SwLLKdPG1IAt+Gy7tJ/2iZu9KVDEJg","tlshash":"0c22cf4eb3af55de4f2d95bc1858c8317b6b4e142f44c5995fbef0020ad241932be0d6","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.118949Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/NdZwMJwE8E","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:56.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/NdZwMJwE8E HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:56 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 685\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Tue, 28 Oct 2025 14:13:56 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc68\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"4e9ca4988d42d17051b3f3788f1a7abc","sha1":"bd6c10d9623c0e89e4310ac0fc3c61b6a2077225","sha256":"45d3c0e3dacd14ae888cf87069bf2be01e3a0afd88c07d2fc8f6e7350d06f1c9","sha512":"a8c13d6c47e7c4c92a906f22504e662f1da12d89c3b3eabf7a184fe02064bbac0c5101fb3782baf5cba5611d2f3f4105a7510160db33ba1bfb4efe4734912ac7","ssdeep":"","tlshash":"c02115b20d5c58330985bec7632bae03253c8666fe814f75db945c3c11973d9231b74a","first_seen":"2025-10-28T12:14:45.852692Z","last_seen":"2025-10-28T12:14:45.852692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":1,"dns":1,"connect":58,"send":0,"wait":280,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/GmOzih6I1zs/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIGUoZTAP\u0026rs=AOn4CLBFkrdpQNFz3RnEr0pq9q8wqeiJhw","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"172.217.21.182","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:56.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:03 GMT","end":"Wed, 24 Dec 2025 14:32:02 GMT"},"fingerprint":{"sha1":"F9:A4:9C:95:76:59:CB:5A:5D:8A:BD:F7:EE:EA:05:73:5E:F5:D6:42","sha256":"6A:85:E0:6C:E1:69:CB:A5:7B:29:76:30:88:69:7E:17:F3:AE:06:36:A4:81:63:BD:DC:C0:1C:BE:C7:E3:77:BA"}}},"request":{"raw":"GET /vi/GmOzih6I1zs/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIGUoZTAP\u0026rs=AOn4CLBFkrdpQNFz3RnEr0pq9q8wqeiJhw HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1625\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Oct 2025 12:13:56 GMT\r\nexpires: Tue, 28 Oct 2025 14:13:56 GMT\r\ncache-control: public, max-age=7200\r\netag: \"0\"\r\ncontent-type: image/jpeg\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1625,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"f906fc2e8cf6951abcd4152fa77d1d10","sha1":"7e4ed3bded4bfb9e71a7ba8408b65b54dbe2439c","sha256":"0ad099702886851c988097375547ce170bc17f3baf853fab1eca52b3bd90e21d","sha512":"3910f7f7f9427635af5978ce37bb10f9ff3bbaf95112943eb0f515921518a7b8e0f2171977a4102fb8b862a3eb370a778b56cb16867066444a17b26b4248ae0f","ssdeep":"","tlshash":"c631ead19bbac32be99e4e7c0d1c2bb4074af7d5f304e1794780c9063885951dc9056c","first_seen":"2025-10-28T12:14:45.853728Z","last_seen":"2026-07-27T11:49:48.64549Z","times_seen":17,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":142,"dns":38,"connect":23,"send":0,"wait":43,"receive":1,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/favicon/apple-touch-icon.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:56.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:56 GMT\r\nContent-Type: image/png\r\nContent-Length: 9129\r\nConnection: keep-alive\r\nLast-Modified: Mon, 11 Jul 2022 22:28:41 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9129,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 219x256, components 3","md5":"0010c37b0321f8d01589dd8152e7b4f7","sha1":"c1ef82eae69ae58b396114e79a55f43c13a2fea2","sha256":"90c9972fc74a1b6460607b1af9ee92df35c81fe6d5353a1421fe6df3311dc3e9","sha512":"304b170119d0c157e38fa3e8f1dd65c0aeb3374470ff90d4ee76df6ffc6f081b22f4d29743c6c9aec2eab54694ed1ecf36c87640565e76a33d5ff708b67acbd9","ssdeep":"192:A9333k+9/ogHJZSQ/un080K5NUXqpGlUJA9Q3:A9333XQgHJZV/un080YNUXFliAi","tlshash":"6612f6fabfd7e7108b1f949d46bd7c778304d5e198c9421319b31ee092a1bb5a01322d","first_seen":"2025-10-28T12:14:45.85452Z","last_seen":"2026-07-27T11:49:48.619675Z","times_seen":9,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/css/style.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/css/style.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 84030\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84030,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e405e9aea27573b9bb703cd6c46820ee","sha1":"d981f9c62ea55904c404c36cfbc243a02cf769b3","sha256":"d7e1fbb38e21be3c16a3d9e905b69db7c71be5db4f4c66f6ff481f58878c4e40","sha512":"c6ad440a3867810ba957468febc82d72aab34ab53dca1126432aae2aa6b610b28d88be9e9468baeb2f4aecf020afdf873b2be857263c7208d29d949ef9cf4615","ssdeep":"1536:Dzk2phfqeRfgU6s1+Lg/NHOb9y4WJbGtgibjFnOf:D423DtiFA","tlshash":"7583527b8ab3190570178808abdf576573785043980eedad7b8d7798cfc62e4a2f2748","first_seen":"2025-10-28T12:14:45.855277Z","last_seen":"2026-07-27T11:49:48.646085Z","times_seen":9,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":173,"dns":0,"connect":100,"send":0,"wait":190,"receive":101,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/images/1002.gif","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /images/1002.gif HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2142\r\nConnection: keep-alive\r\nLast-Modified: Sun, 26 Jan 2025 22:40:23 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2142,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 44 x 17","md5":"d1912efb78b12791bc12ed797fb63e33","sha1":"79aba1a1a0930009c14ada7c4efbb6b6f83ca5d1","sha256":"6784a277a083b68344e4fb6f1ecf546df965fe10dfde1bdde7653c5d32c138b5","sha512":"8eef1cb653fd449f060884703c56954c7fe1bdab564607fdc75042d703f49303994850f79cad5b95f412c2ba8029b0b70a037603ab8c1697b9758ab03ddce0a8","ssdeep":"","tlshash":"4c41621b52b0dc80c2d8442698eee5690a5c990190f5e4e73ec1db668f2427ec129df2","first_seen":"2023-05-18T21:27:31Z","last_seen":"2026-07-27T11:49:48.6472Z","times_seen":143,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":1039,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.-hMpMqkA7xk.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfoLy_Ch9LIhpDxvM1vo649yldjXwQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:56.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.-hMpMqkA7xk.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfoLy_Ch9LIhpDxvM1vo649yldjXwQ/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 77225\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 17:45:10 GMT\r\nexpires: Tue, 27 Oct 2026 17:45:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 01:11:01 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 66526\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":223279,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2601)","md5":"1cb7c85b9a2dc31bd15b276934dfa2f0","sha1":"636da6c31799a78e674b8127feb4d359cb35cd01","sha256":"8dbc05afacccdd45fa1490a45251d400329f94e3483145caef32a395053c9a89","sha512":"d2f518a68e3f1d17468160e66e4f8d6bae86b82d89d9731f217347bad83fc0741a4fd0621f4fc23461719d70de458252d746e15e53ef3cf056ddd472e1d4b3dc","ssdeep":"3072:0AARxQjJq7YIoO3Lo/AHqjxICMVCGJflwRuQYcBLjZrbyiB:dOBYIhHq6Jgz","tlshash":"fc24e8d9b35270669363f4a6813f000ab13b68a9f9484d6cb28ce8e25df4d19457bf7c","first_seen":"2025-10-20T19:52:11.063724Z","last_seen":"2026-05-10T22:35:04.518251Z","times_seen":2661,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":67,"dns":55,"connect":21,"send":0,"wait":63,"receive":28,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/jquery.min.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/jquery.min.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 86659\r\nConnection: keep-alive\r\nLast-Modified: Mon, 24 May 2021 05:28:24 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86659,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T11:49:48.646611Z","times_seen":98429,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":235,"dns":0,"connect":0,"send":0,"wait":190,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zThY6A%2BqYL99sGrTZUlvzoPRgulJhENPXwmm1ifWnBKDGH7N6Kk2GqTc0HQoB5AheqCKVjbUvU7Ir%2BkNIke3HtKlTwvPP6EJ21juE5%2FAz5Zp\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: User-Agent,Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 54\r\nx-robots-tag: all\r\nx-xss-protection: 1\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=4,cfOrigin;dur=104\r\ncontent-encoding: br\r\nset-cookie: IDENTITY=343f41f4596735338f58d31b5f7f24a385f8b906\r\ncf-ray: 995a59946ab0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":33734,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23790)","md5":"ec0c29437ce80775a99855715231a199","sha1":"155dccc667d68543084a53264e83a7446dd1e74f","sha256":"1a512874290ce8d5cd93e1e50c980ceeb196a153d4b50f9dfbe10b1ef1f121c3","sha512":"4d43fe55784a35d7c8c9e8ba77970232cffc5e3378045f38fb38b62bf2bcf6fdd9a89d386893d6f790032ddc893e87385a62e6b2762186a3958d3acd37f41949","ssdeep":"384:Ari8HJaYhgVZMH3JQAZYqjRm8cwI9N/KqOOU6Kh:2qYhgVZKTw59N/K376Kh","tlshash":"a9e2e1958ba7ac39113a52caf1a27f75b6a51146d1220863f3fc2f7f6bacc23150245f","first_seen":"2025-10-28T12:14:45.857617Z","last_seen":"2025-10-28T12:14:45.857617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":49,"dns":27,"connect":1,"send":0,"wait":113,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/bat.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/bat.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2777\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f574a0cf998b4da103bc0387415e6bd4\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:27 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5ECB7B1D1\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDF3Nw4HHZPbf5J9iG7LTD%2FbfR62lzFao0Dr2S31MrmBr4yx0O6pe0WNAATkpKjkxuAA0Q8CZCPUKZxl41hAEcUAvJCjEtWilQN6BHlBv1dg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997aaa1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f574a0cf998b4da103bc0387415e6bd4","sha1":"95e08279250df539fa5005f331a33ed84f97a425","sha256":"1e1c79472ac407f3abc54e8ff8815cf0798e906e3c20e99c5a221da5443ad9dc","sha512":"e617038c426efaa8bf8e88d9541934924f47e9a1e8be1cda1ad70c6be0b3cc923d072cf4d8a105ab9cd085ec4446e60f39731fc297f04358e36cc1862e78fd29","ssdeep":"","tlshash":"f7513bd74cf0acc3e46c555241bea37e98e1428b4d24654fa3733169010ab49f6a0d0f","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.093224Z","times_seen":2375,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/-OO6MGtmchM08s3sRZXyR_6lGS4ObP0hfDF-R89BwfI.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:56.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:29 GMT","end":"Wed, 24 Dec 2025 14:35:28 GMT"},"fingerprint":{"sha1":"3A:25:85:17:1F:EC:DB:36:25:21:AC:60:1E:FE:19:41:06:4D:BB:61","sha256":"12:E2:B9:FD:0A:C2:10:A5:CD:15:ED:F1:44:A2:48:77:21:A6:08:E1:BE:65:2A:06:2D:F3:8C:D3:95:D8:82:A5"}}},"request":{"raw":"GET /js/th/-OO6MGtmchM08s3sRZXyR_6lGS4ObP0hfDF-R89BwfI.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 21775\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:32:59 GMT\r\nexpires: Fri, 23 Oct 2026 17:32:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 09:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 412857\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57100,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (55866)","md5":"8ba81f0c6d06ba16ed829e84c6e8db30","sha1":"a817c0e81a923df985f0efec4ca0b7865f3d2b01","sha256":"f8e3ba306b66721334f2cdec4595f247fea5192e0e6cfd217c317e47cf41c1f2","sha512":"fd68626761a945fa1948c09d231bd6b18fd97392bc71a1cb868f29f024d09f935fa97fbec9d08ba75f7e08cbe74011c65e766b55bbb61ce6118dfe895dbcf5a8","ssdeep":"1536:jRmTnbVuMiLcmbLCGLO4OXqlJF2lCBV0j6DjewwxHEhSIHHDr:+bVunLbGGLOklBBV0CjetIDr","tlshash":"99430acf72c673269af260e50117520966ba7844ac981c5fba19e7f05fb898f443bf34","first_seen":"2025-10-23T09:42:06.420442Z","last_seen":"2025-10-29T06:58:08.195977Z","times_seen":620,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":172,"dns":25,"connect":8,"send":0,"wait":9,"receive":2,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/svg/comodo.svg","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/svg/comodo.svg HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 15563\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7918a13d266308e21474fb357fb8b028","sha1":"de5d767ae0e23a42c262c57943f66f1add85c190","sha256":"840710a5b5f254f82e11d0201e668568e295d8f49c3dfcc20bdba7ac45695a53","sha512":"7481d9db6c9795a4a5cf46f77242f6ee8e1eb718d72ca477e5f9c15186d0ae02b01f453a18d697d108dff6568dfbd0ec86eb9a7415c5d0d073088c11d6fd9fae","ssdeep":"192:WQAMqqf1AQoX44yFfhRFvimIxgRMa5OqXXOM4DG8+urpbMZZSN3seRSTRBsf6A37:WQAMq/X5yrvvblZOMCGRWy06aF37","tlshash":"8562868f133cc2e4759921fa5c3a3ac73fbce9e945b4a094d31aad116047efa612cd64","first_seen":"2025-10-19T08:21:15.643263Z","last_seen":"2026-07-27T11:49:48.65198Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":1139,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/css/plugins/simplelightbox.min.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/css/plugins/simplelightbox.min.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/styles/assets/css/style.css\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 4692\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4692,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6e8347ae8d6b93f61cc934a56cab7620","sha1":"4a13ce14d6190bf2628a7ff09c45f12930adb402","sha256":"f24165fe05c803388d2fc7027789ac548d868162f090089af04c5ba19a7a81fd","sha512":"da6ad70c80a21c5068d92f8ff40196f23ca1bcafb91e1d8c1578a0a27277003fdac3fbabe6331e979c93d7a64ed0cb25018d24fc9358921daa5f26b54767c0fb","ssdeep":"48:iX+MFu6Rty5Ij8j7sJ+88pf9Q6x4d6CiIt+TiJaK4uoFDpBxA8Ek4SJNK1ZPhpF:p+R8PsJ84MCiItKtjKjpF","tlshash":"68a1433c1bb10600601fc26c22eaeb196b284063291fcc6eb7d25045bfde6d4b69a75a","first_seen":"2025-10-28T12:14:45.860075Z","last_seen":"2026-07-27T11:49:48.606137Z","times_seen":22,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/matic.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/matic.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2554\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d21304cb80dd678815a4e7efa2c413ab\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E83B3658\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tL1%2BjS0tFq1JdTAkcm2OK5ycs0AKA3JxTFkNeCyPq8Qce%2BjyxtxFAvjSnhUW7DTSdUrioId55W62djN%2BZmoYZphjh5kD2YNkFRMPl0xXAlv3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996e8a8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"d21304cb80dd678815a4e7efa2c413ab","sha1":"e6914c189acbdc4b3332496f550b612826cba418","sha256":"8070fecfc63868553395fd61f45338bff7b8ebf91b2dbe640885385b34787b86","sha512":"fe0e8bcccaf63109d6f3ce8a6e9439d96d44c562b2961d83eb2d508a272c94fae4495603e9a79f79612060124bfaa650742091929558b3fd46638d39e70ca3e4","ssdeep":"","tlshash":"88514a939f939ccf632f0238806bb47d21eb0da16169e205c5ce99ac4c9b36c01e8ac1","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.166374Z","times_seen":2439,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/theta.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/theta.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 3033\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"1c0e9fb825e0ddf33d9d6a312e8b036a\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA5FDE1C\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9c%2Bl06MAlgtMe66%2BcaZMt6rxoRp1NU8pwBOzDryqaIsVoEjmtlPeFWH1N5xtBqHDK6Nf51dbMkeH6psRsc%2BczqzJe333yXr4eWLKYPZluCg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997194e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3033,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"1c0e9fb825e0ddf33d9d6a312e8b036a","sha1":"a8456f10e47dafda1bdeffc1c7b7f79d190fb0bd","sha256":"f22584eb83adb69a641fa4e3159c214a928e6c164d53fe057d62a4b0e7c3dc7c","sha512":"7d82402d1599e26a3dc1e4da94d0e428c4e43ff164dba0c72b1071a8784874773306ec21964132bbaf364a6cdb1b6a3f179822f747721cfe007de56956616ab0","ssdeep":"","tlshash":"58513ace154bb9eb34e3f234a602cf92c116f76511c54237a55ef03685bb0b998e6363","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.095844Z","times_seen":2375,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/iot.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/iot.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 3250\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f378da86ad05333ce592e95915d59ce9\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5ED0F313B\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0jZF0YwiubeordmW5dagzRdjnVm1W7i0ye5ybLTvqjxaMez0hx4OnULg2mkIR96BsMpZ7ElHP%2ByYDI%2BhxETP3zhbj5IJnIL%2B81uHRajqUA7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59976a00120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit gray+alpha, non-interlaced","md5":"f378da86ad05333ce592e95915d59ce9","sha1":"9521e410074327f4af43b763e9e0d80699931e92","sha256":"98b70338daa355862d5b0c98839ac13a6526771a5288ae93c69df82fb5ba2188","sha512":"79d7b72200e2ba47cce65ad617649092c745db7e1086175c53dd760155220c67cc40ed3bde82ec0cc4ce9c4ca763ab7c618e8104d8159f0832ec98bcd58efcbc","ssdeep":"","tlshash":"81611cb255457d5fa48be2a6f5d25c9a2cf32c8cbe630152a16cb05c314eb34e9b1334","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.147597Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/fonts/fontawesome-free/css/all.min.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/fonts/fontawesome-free/css/all.min.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 53810\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53810,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53625)","md5":"b8858bbcb9444da853d4ab0a5c2b1871","sha1":"85d9467752a46c4e719b2adc0183b720560899cd","sha256":"82710c16238a0ff45bcc01ff05bcd76892bc494c3713618baf03e6b6d1dd5f1a","sha512":"ece47dc28166d6a9c5b3d8d362bc85536645aa26d6b71e46c0f197d5c6780e516aa41c80f8148616ddaefdb2da071434a93bca1f4e69e2c718c45c072ad666b6","ssdeep":"768:8VV316z1MPq4lQuU63HJgkQCZ/mMQyjJKp7CzuNnQz2:8VizGC4lvzH6BCQgu7cum6","tlshash":"5d330bb8e54c41c9a731c44bff82b2bc61baf73ce5910d95f00e691c2ad26a811c5fb9","first_seen":"2025-10-28T12:14:45.862519Z","last_seen":"2026-07-27T11:49:48.587578Z","times_seen":11,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":168,"dns":0,"connect":99,"send":0,"wait":191,"receive":100,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/setting2.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/setting2.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 18231\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18231,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"8e4eb01f56d84d868639b44eb18a86b8","sha1":"fd7e8de96fc8a7c7233066e8775c0306e63a6889","sha256":"5cd353906115360ea6a5b79dc78e70d6b8b24f55a4fc51187b4cb8cd8299f063","sha512":"e7ee6bde72814f1f078442bc72a2f3eb62095ddea5fd7dcf8f7f8f973853e463760f2e7c0fc165527dbb8fcb8d1ef447bc14c511466892e0298c9adb60f1b47f","ssdeep":"192:t516hUllH5i5JvgglrR5J4zCwlq5J4zQglRr5J4zQgl15Zpu0glk576LNjv4yOT7:t1Wxs47l/Tlll5","tlshash":"608209f3724a483822ef516a212cc7892b7cb573dc621487dd192914e663792c86ef7a","first_seen":"2025-10-28T12:14:45.863442Z","last_seen":"2026-07-27T11:49:48.577477Z","times_seen":12,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":460,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/lib/jquery.marquee.min.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/js/lib/jquery.marquee.min.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2025\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"1718-5f70afa528940-gzip\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vTjt3dQAtkdKX34%2B%2BVrxXn9ltvIHcU1iOWTp4dCtEvnygmRs4PL77Z%2BFuyAUweDQbEZDEk7QUMbA7QsGTGrfI%2BYR1EhvsllTD5EjCy8ZtxX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997db14120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5912,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (516)","md5":"f2619ff525e29847f931bdfe1c428e1f","sha1":"09a10afba7ecdcba3d61de1dedc432bd8e306c28","sha256":"23b9b39ea61308052256b9921bf1c0de6698bcf0c04e3e4f2978adc86168ff6e","sha512":"041af6ae7ca726ac92ffc0047acf223a3427d9b37b93b67545c2c16c6daf5e0b31505b6cd5218ae5763593d63b77ffc5b0aa30845aba457ac578fa9dd9bd3fdc","ssdeep":"96:zcJIyUtgLICYdVun4xRx7nCbM3IJT3WHUn6cAyUMBhyv6t+ntyo2t+QE:zcZUtbDO85IT6cNfhyvj","tlshash":"52c174c5b5b5308a566b129780db07c01a794439614f8c6fb9368170bd74f881be7f37","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-07-24T23:27:32.391012Z","times_seen":3206,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Oct 2025 00:34:58 GMT\r\nexpires: Sat, 24 Oct 2026 00:34:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387537\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-27T12:14:02.203039Z","times_seen":543720,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":95,"dns":3,"connect":30,"send":0,"wait":33,"receive":4,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/bchsv.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/bchsv.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 7774\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"543f8d55202d1d0e054b04b12676da17\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EE2FFC67\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6GxQXCYhbRwXsV14S6f8AgGC6DOjts0oDL%2F5gy4%2BSFLe%2BWg%2BjAMsWw1zMexIth3KZnmGmFj7RURR5Eo6FsT7dZyGa%2BGxNr%2BGrCbPZlnSAKV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59977a33120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7774,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"543f8d55202d1d0e054b04b12676da17","sha1":"311a262ed26cceff0fec5e30321262a2d3204c04","sha256":"fd819d2abb51b4cd7ba3e418c9ee51a722ef67c3bb7b6cc894ea185953f427be","sha512":"3f08b1efc9b96e8afb278b95b4376db8f6ef114636aad2ac69f912773986d10b6391d26f3a49c3ea6df5c4fffe394ddcbed8124b03a80693e12a158bc70edd67","ssdeep":"192:gNzngtHMPiEjGbXLnIXBuh4aHB5GI0dHe19cW5:izng98iEjG/4aHqdHe19cq","tlshash":"3bf1af8b7fad7bae352a7950e3a34d79504650e41e676acf058d0e3f482ef309d41ac2","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.233062Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76898,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1782)","md5":"eef2b2b748135179c61f70910d745802","sha1":"5cde2acf310c4be643a88db9073456a255b092f9","sha256":"e468ad159728bcf94178fab4015956f124995bba98b4f74e777209706d7b3922","sha512":"805c2c0f758f9b5fd394ee0ab4f85acabf0a81946f458ceb54498319dcf65d77b9a23756dec6e19a4b8dfb93402ace335e2eb8e959eff697d2e3947ceec07220","ssdeep":"1536:XO5ccPARD+GzNeU3czwPOKJk0zRYHXVqG9fx63xyM6CdiuwNWk1:X6YzWwWKJ3YHlEFndin1","tlshash":"6173c8ccb6a674658263f5b5413f000fb23f5899e8484dacb288d8f1aeb5949413bf7d","first_seen":"2025-10-28T12:14:45.865963Z","last_seen":"2025-10-28T12:59:01.082568Z","times_seen":7,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":40,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:55.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /s/player/25f1a420/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/GmOzih6I1zs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 59564\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 07:09:07 GMT\r\nexpires: Tue, 27 Oct 2026 07:09:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 23 Oct 2025 04:20:06 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 104688\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":511834,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"2d8c818f863ab8041eba87b69d1836c0","sha1":"203cf5edf90469fc0db7e82f95fa207853e70a4e","sha256":"e13873d21eaca7946538f1ff09a0cc26caea30c42974887657e8b58e3d84599a","sha512":"bd23021b44d14ed6b101781ee13eddba2e20f58d864fd3e01784ecf81e8324ba04f07a3666a315d4fced0dceb87c4fa09ad3bcca7308bbf2273c62bc79b12b4b","ssdeep":"6144:Rg/+vh2kqMMg7UFBhBYoMuf5mh5To6okm:zZUMMg7UF2o3f5mh5To6oV","tlshash":"1fb4e972f0d1233cf21b8d9997d9964d7239d983e2e22aeff11165dacbc77811326206","first_seen":"2025-10-22T15:40:36.309731Z","last_seen":"2025-10-28T15:50:34.080391Z","times_seen":2630,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/png/aff.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/png/aff.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 101756\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 644 x 400, 8-bit/color RGBA, non-interlaced","md5":"f5f5809d50926dd16f2025dc359e7e41","sha1":"753d39271fb3f209d7554dc8dd3dde0b73be85a9","sha256":"5ed0d8ce505319f4bcc59a10d5a91d71f7a20b20687e7d8cfac30b5a5bf34831","sha512":"8ff681a94373cea28f1e85f6a4d8a0ced9b35a973bf6a82e6a03011a8f252d62240964cff3a24cdf014eb5a951f90a1d0925ae13369ffe45017078d140d74493","ssdeep":"3072:lu1pSslPk5oVwUjK9LGWcRqMbYhuT4oK71qHGT:AL5GsjK9LL8UhuTLyOGT","tlshash":"e9a3013a618cf6c4e2fb1439c308d9d430f6ac4e2852ece69d417ea52e512881e57f7d","first_seen":"2025-10-28T12:14:45.86723Z","last_seen":"2026-07-27T11:49:48.570775Z","times_seen":11,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":97,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.-hMpMqkA7xk.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfoLy_Ch9LIhpDxvM1vo649yldjXwQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:56.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.-hMpMqkA7xk.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfoLy_Ch9LIhpDxvM1vo649yldjXwQ/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 77225\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 17:45:10 GMT\r\nexpires: Tue, 27 Oct 2026 17:45:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 01:11:01 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 66526\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":223279,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2601)","md5":"1cb7c85b9a2dc31bd15b276934dfa2f0","sha1":"636da6c31799a78e674b8127feb4d359cb35cd01","sha256":"8dbc05afacccdd45fa1490a45251d400329f94e3483145caef32a395053c9a89","sha512":"d2f518a68e3f1d17468160e66e4f8d6bae86b82d89d9731f217347bad83fc0741a4fd0621f4fc23461719d70de458252d746e15e53ef3cf056ddd472e1d4b3dc","ssdeep":"3072:0AARxQjJq7YIoO3Lo/AHqjxICMVCGJflwRuQYcBLjZrbyiB:dOBYIhHq6Jgz","tlshash":"fc24e8d9b35270669363f4a6813f000ab13b68a9f9484d6cb28ce8e25df4d19457bf7c","first_seen":"2025-10-20T19:52:11.063724Z","last_seen":"2026-05-10T22:35:04.518251Z","times_seen":2661,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":64,"dns":2,"connect":21,"send":0,"wait":22,"receive":42,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/png/141-1410100_free-ripple-cryptocurrency-faucets-litecoin.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/png/141-1410100_free-ripple-cryptocurrency-faucets-litecoin.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 17137\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17137,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 712 x 190, 8-bit/color RGBA, non-interlaced","md5":"e3845374b973fa9997d391034ed4b733","sha1":"e26632b71c711135bb2210a4e1c38a4fde5596d1","sha256":"2538d84adf930d45a44733f6fcf804f47c52eed48dee6db4c6e792cb99afc944","sha512":"461f0fb7111985888d6a43cdcf7017758d1d397adc33b315564a5734590ecddd4c0f31f9921df83528ed48085a15c0f2446abaf8b0ab03064313093250370a2a","ssdeep":"384:Mw0BkiKhvdj+UlMOiop/8pKPuedbSTZloDS8OD6v3l:MwGr2dgoipredmTroG8O+v3l","tlshash":"9972d106b03aad45da034962f3778e807cb8c587eef5cb84174d56df0d2ee4aacb5190","first_seen":"2025-10-28T12:14:45.868585Z","last_seen":"2026-07-27T11:49:48.676699Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1148,"timings":{"blocked":1042,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/favicon/favicon-16x16.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:56.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/favicon/favicon-16x16.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:56 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-07-27T12:14:02.126504Z","times_seen":146488,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:57.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 28 Oct 2025 12:13:57 GMT\r\nserver: ESF\r\ncontent-length: 45438\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98421,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"e9e4d6812bf8b4d7b6af1862cb819ee8","sha1":"f319857738adae7960c313d138be575110e2b860","sha256":"17e84ea78e68faa3421ddefa0edc5cc0cdeff403f3ac21cb40128f1842cd47c1","sha512":"6143c08eaec35ce3f5deabbc9925a5a4b3ed0c7187f5454ce53d0f6103819a8016026dbb6cc132f13be2f82ceb58e7d51c23139911bcd56b93bd066b3eaaac4c","ssdeep":"1536:0u7xO4W+iDkBxYPhZoUknXkwo2flGeAHUwV6MgIpX/OYXdtVh6aJ1PnGkN5o/Kvc:0u7xWvGlU20wExU4fXvVXPGksQWN","tlshash":"82a31999f80eb518748d0615ca09b6cfeb26c58014614cfc424bc739a1bca97df6eb9f","first_seen":"2025-10-28T12:14:45.869516Z","last_seen":"2025-10-28T12:14:45.869516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/fonts/simple-line-icons/css/simple-line-icons.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/fonts/simple-line-icons/css/simple-line-icons.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 10965\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10965,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10963)","md5":"97506baa4a1692eb99aa52777bf1e5a4","sha1":"4e3f3c0bdf8e5b4779535ee47d704d6bb1cccd35","sha256":"dd68d9737be69f1bd0f5f0c005a548b69e4c0325050c2e07450a604bf9a4a973","sha512":"3e1d7721aa0beebeacfa7662c23f3da7a9a1a0d031bba6ea804867615b7d22a1cdda9d685f07895a70ff573de3d52398e4b64a6d8be40dfeac3f8bb52f2b6435","ssdeep":"96:bqwTEYIPm+dljuGiozVrYKs29ZbBSNUgr0DXi1MkSZ:bLEYwuCdYK/ZgeT","tlshash":"ee3243e4e50d41da7732c406c786b309ec99f121dde11c13f1af899c5ff136aa692a78","first_seen":"2025-10-28T12:14:45.870334Z","last_seen":"2026-07-27T11:49:48.60122Z","times_seen":11,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":171,"dns":1,"connect":100,"send":0,"wait":98,"receive":1,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/png/bitcoin_PNG13.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/png/bitcoin_PNG13.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 202891\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4800 x 1454, 8-bit/color RGBA, non-interlaced","md5":"966b7a90ecf558467817d33967897f11","sha1":"c3cd77f108fc1bd10c7e5e760a9c921f30090221","sha256":"caf3016cc35ce08e84a8a2bd9a0686b4aceff36031c869937ee691be2f1a7a9d","sha512":"f45d1e3a8d81eec09ee55d43f799051ca1788f694f13c74f1ac7e0463ec2e73e2414ee4d849019a76e1bfbf2a7f2f66eaafefd898372fd0df8f57c9a74bfeb7e","ssdeep":"6144:yj3PN+rPE0QoBPvRhu95lwjAFqkWbV3RF1RI/G3/a:m3PN+QotvRJjAxWJr1RI/G3/a","tlshash":"691412ddf20aeccce141467cbf389ac4335f6a76cda6dfc53a5db02c269612602884d5","first_seen":"2025-10-28T12:14:45.871177Z","last_seen":"2026-07-27T11:49:48.585074Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":926,"dns":0,"connect":0,"send":0,"wait":102,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AMA/d=0/rs=AN8SPfp725l7vLLQI0dDpE9EOAvognzfug/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AMA/d=0/rs=AN8SPfp725l7vLLQI0dDpE9EOAvognzfug/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 18:49:47 GMT\r\nexpires: Fri, 23 Oct 2026 18:49:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 408248\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":84,"dns":0,"connect":15,"send":0,"wait":15,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/www-embed-player.vflset/www-embed-player.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:55.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /s/player/25f1a420/www-embed-player.vflset/www-embed-player.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/GmOzih6I1zs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 116105\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 08:24:15 GMT\r\nexpires: Tue, 27 Oct 2026 08:24:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 23 Oct 2025 04:20:06 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 100180\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":392686,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1179)","md5":"47a692e08a0499888ff37401ecceb8a3","sha1":"8d97e7f845a86f90fb8c43aa728d42f89917657a","sha256":"07bf6498c5bba79019d52ddda61570f24b39ad3a0bd73b877cf18a06c7548f69","sha512":"743ac6a6d0b39055579cd0b935dfec30d3619d8ee932583b5e960e18aad04478abaef44e6fcd7e04487d3c2e121072022043ca85580be99fbd4b042f1fc6cbd5","ssdeep":"3072:VJJCm+0gKL+fXEKj2eV+ISEYr2V+jgR93uPTfjVb8atjiGKRpX7VSYjdfs6:g2q/v2bLr2V+jY9ePTLVJ5mX7Vrs6","tlshash":"60844bcdb692706352a3a5b4403f110b713ab8aab80cc8b8f595d9d92e7495d8337f3d","first_seen":"2025-10-22T15:40:37.592186Z","last_seen":"2025-10-28T15:50:21.958776Z","times_seen":2270,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/usdt.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/usdt.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2283\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8da80033d430490612241acfd1f0740d\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E7049A73\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqiVt7%2Br5hGIU6PgAI3kNwXjAARHRRjU0q8qF1HY%2FoT5berGyOVm5rjJCkG%2F8xwpn9KHswcJFp1VRE6wmNRMQ1jILVxh52NtemXoGFT21I4Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996b850120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"8da80033d430490612241acfd1f0740d","sha1":"86c8137ab870009c3ec9712c390f7c46a788cd8e","sha256":"3ffbe57e3a6decca54563dd344228e8150e2d31e52fbddf220b5799a87b88aa6","sha512":"d0edbdfb8eaaabbc70cad3dff307933ffd37f38f0940fe8e80a9c14e4e05565ab10f3568b7773a9f977ea44ef23cb5db3fe20c427a914785896fad273ae650eb","ssdeep":"","tlshash":"dd41f9f466cdf50bc80490dc55e7b8949bfc1b0e2c01e1848e5fb409683a0a8d3cf674","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.047429Z","times_seen":2597,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/images/1000.gif","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /images/1000.gif HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1736\r\nConnection: keep-alive\r\nLast-Modified: Wed, 14 Dec 2016 05:14:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1736,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 44 x 17","md5":"a8f49b4d409d4046b98892fb3fa1fa12","sha1":"969abbf4c905a3bcb56f81cd8366d946802b2b8f","sha256":"93df46f4ed7eba161dcf1fe19f34b156e5ccbdf9e2bedb2c749365e91e2a4ca3","sha512":"51145c171dfa289de1f55b17125fa389cd93bf15914308988461ed102f73ff487e788a6572766e2c91059400827f02437170788e72fb70bf0f74599dcc525414","ssdeep":"","tlshash":"d531d849fdc7f853e44ca6f81dd155535d2e8840c9e0e0ebb0debf8e8a490b5091a9ca","first_seen":"2023-05-04T14:40:12Z","last_seen":"2026-07-27T12:10:31.009986Z","times_seen":491,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":935,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/NdZwMJwE8E","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/NdZwMJwE8E HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6200\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"68fb2936-1838\"\r\nexpires: Tue, 28 Oct 2025 13:49:44 GMT\r\nlast-modified: Fri, 24 Oct 2025 07:22:30 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-28T11:49:44+00:00\r\nx-node: m9p-up-gc89\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18079,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18079), with no line terminators","md5":"e6324a7460c27424a46c33e02585c5e2","sha1":"09daae70a17c6fc2f0502dbfd50b6020a8fc9cfb","sha256":"486cfa653a6adb758b1076d3be6689c0b02901e6e334992a8ecd68bd19ac6a82","sha512":"6bf0254038bb9d7743c8d1a09b3e0f8edd94039c6f0fc7c2ffd81ee626cd10180e18f9c5b21a75d02e5800b5cb1a90e86bcfd8d3622f4cb70c03059f3aac70cc","ssdeep":"384:boUJJkQamum040jrANKcX7HMiqJISEeJBz8U08wYWcPY4:6tMgA7X7W98UFWcPY4","tlshash":"21822b6e7959b97743b208f9606f6209733549ebd404c920a401ea4d7db8adf813fef8","first_seen":"2025-10-27T13:48:58.207743Z","last_seen":"2025-11-11T02:58:10.053487Z","times_seen":988,"resource_available":true,"data":null}},"time_used":1264,"timings":{"blocked":-1,"dns":56,"connect":57,"send":0,"wait":59,"receive":1,"ssl":1091},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/coin/generalinfo?fsyms=BTC,\u0026tsym=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 17:14:38 GMT","end":"Fri, 09 Jan 2026 17:14:37 GMT"},"fingerprint":{"sha1":"A4:C9:30:76:83:AF:44:7B:BC:E1:46:5A:83:BF:3D:9F:0C:7A:34:EB","sha256":"88:90:E6:CE:A2:83:E7:89:FA:2A:C9:FA:4C:80:B9:0F:48:5B:77:6B:79:38:56:35:24:E6:60:E4:F5:70:43:91"}}},"request":{"raw":"GET /data/coin/generalinfo?fsyms=BTC,\u0026tsym=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://metagrowthtradefx.com\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=120\r\nX-CryptoCompare-Cache-HIT: true\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-30\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f19264e7e9f23d2f91204dda438aa38b","sha1":"7ce4c585032676020bc9ec60a20e529e7357b891","sha256":"b4b6e26ed518127f26a80f9b7cb6518480764192e2296d6a1e2e9ce16e9432fe","sha512":"2891bcd666b7ba9071e86f13a88a900787c1ebf0632b36dab36abf86a12dc556fdc0c1185652304ff060639c91d596503fda13e73ffd5f1cb395805f769d0472","ssdeep":"","tlshash":"53217710a755bc79ca3311e115b1650893a232dad4c95ddde22c9eeed3c74d8621db02","first_seen":"2025-10-28T12:14:45.874831Z","last_seen":"2025-10-28T12:14:45.874831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":78,"dns":28,"connect":21,"send":0,"wait":24,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e5ao1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e5ao1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 28 Oct 2025 12:13:56 GMT\r\nexpires: Tue, 28 Oct 2025 12:13:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 130828\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378081,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"158ca7c5f32761e02cd899d2556407be","sha1":"4d418f1e6bb6c4dcadd83bcc497ba4e0568acde5","sha256":"15204d8d648426026855f7794e79436507ba986295fa40c8f625fd997c399cb5","sha512":"488cde6830c1396ef8903ccd6cb7bef3ae6f3899b2961b47d5b3b79a15ee8201ef2164639415ea8aab29c31f435bb7901b365f5dab09c637bf3a2850d0b43f88","ssdeep":"6144:w9RJDX1b8429Z8nP5D+GN8xeaYKc/UEATgxH362HRZB/8:UJDld29Z8nP5Cmtapgxhq","tlshash":"3384088d73d670669392f478503f118ba57b29a2f44cc895f18acce42e7469a4277f3c","first_seen":"2025-10-28T11:02:25.575785Z","last_seen":"2025-10-28T12:14:45.875704Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?MDHePA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:57.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /generate_204?MDHePA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/GmOzih6I1zs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 28 Oct 2025 12:13:57 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T12:15:30.756688Z","times_seen":17562751,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:14:07.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://metagrowthtradefx.com/\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://metagrowthtradefx.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 28 Oct 2025 12:14:07 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T12:15:30.756688Z","times_seen":17562751,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/bootstrap.bundle.min.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/bootstrap.bundle.min.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 76308\r\nConnection: keep-alive\r\nLast-Modified: Mon, 24 May 2021 05:28:56 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76308,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"4c723f3a80b935e5e37ec46940bad17f","sha1":"2fddaeb8c5996f0bf7eee5c1b8ba30882f056609","sha256":"3126158d682bafa50bffd7907d0bcecadebf82cc5be9da70235cea3390db2c2b","sha512":"ba8d010cae55f7bda38e3a3c674be884e6ba58e4c83da4463c8fcf83718bcc4adc7ce2bc6e46696376877c6d56c12dae67a709e8672b4623b89910898c658e85","ssdeep":"768:tTYD4yp1HVeg3ZehUp0N4LnUXI5bkqTGAdQ+fZMQndVwkqUNF6JUhz+lcy+f9uBT:tTdimqTvZPzf4Fi7L8JPMU","tlshash":"3073c549b240b8b2069fa066807f460fb33b68daa50b815cb55dd8dd2d7cd89316bf7c","first_seen":"2023-03-07T12:03:55Z","last_seen":"2026-07-27T11:49:48.594427Z","times_seen":1157,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":98,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/css/style.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/css/style.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/styles/assets/css/style.css\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: text/css\r\nContent-Length: 84030\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84030,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e405e9aea27573b9bb703cd6c46820ee","sha1":"d981f9c62ea55904c404c36cfbc243a02cf769b3","sha256":"d7e1fbb38e21be3c16a3d9e905b69db7c71be5db4f4c66f6ff481f58878c4e40","sha512":"c6ad440a3867810ba957468febc82d72aab34ab53dca1126432aae2aa6b610b28d88be9e9468baeb2f4aecf020afdf873b2be857263c7208d29d949ef9cf4615","ssdeep":"1536:Dzk2phfqeRfgU6s1+Lg/NHOb9y4WJbGtgibjFnOf:D423DtiFA","tlshash":"7583527b8ab3190570178808abdf576573785043980eedad7b8d7798cfc62e4a2f2748","first_seen":"2025-10-28T12:14:45.855277Z","last_seen":"2026-07-27T11:49:48.646085Z","times_seen":9,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":103,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/dgd.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/dgd.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4258\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"98c7391cdfdd6a7452c2a2e0f72721f5\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EEA8F7B4\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2JAfSR%2B7PbZ%2FZFadiinMIQGrlBhYfckHcAW1k%2FWxbzqLje6znu9f5c8%2BcXjdGQpO6sv1Q%2FbcXioDUkyRB8FgHpb7ah%2FfvJkRUEjQf2PDBBL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59978a61120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"98c7391cdfdd6a7452c2a2e0f72721f5","sha1":"e02a93124268bcda1d313f0139eab81cd3eeba51","sha256":"8eda03fc45bea423215a7b5edac58910282430add783b64859760df5b970fbbc","sha512":"88011bd47d24314fdc958f27570072266d11d8e0acf1ad91ac05921a91169db756a9ee41ed66fc119ed5ada510c647484052da9833147d90574c19fcd50336ff","ssdeep":"96:hwbuRrMbpOhv1mZz2AiiRzYSiLit6AvclkCpIsXCHyVCp:OyRrLhNm7iYwu6AvYH4Dp","tlshash":"ca915d4d592abfbfcbf6238f44264d97a1e07c59468c901d4ec0a1e9b526035a385622","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.112563Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/fonts/fontawesome-free/webfonts/fa-solid-900.html","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/fonts/fontawesome-free/webfonts/fa-solid-900.html HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/styles/assets/fonts/fontawesome-free/css/all.min.css\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: text/html\r\nContent-Length: 79212\r\nConnection: keep-alive\r\nLast-Modified: Fri, 21 May 2021 01:14:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79212,"size_decoded":0,"mime_type":"text/html","magic":"Web Open Font Format (Version 2), TrueType, length 79212, version 6144.256","md5":"92375f607c48475e429c672f0ccf3a8e","sha1":"eaab1f58ba13d788e69cb84082381a3a60b97496","sha256":"abeee03cc4fb6122bb83175c199ff1e15ff21bac4e1876e9178ad89b651ad2f2","sha512":"1f1010a5cc0950e3611cd0c11e09cfdbacaf24348dfa1aed0115c88947b3c634cd88318db3276fa2dc7da93a8bc8156c8015f0be4f80bff157a585a848e6e835","ssdeep":"3072:RfH3cPIWz27XcHNAuw41q2KFtOX2odI+QCgeZFF3ph1Jil75QoOneK:RfMPwXAir4q22ovK+7F3ph1ElVQoOn3","tlshash":"c7b3e101a201f374e3a580fb2c424ae862165e7dda9afdc4d638d5603d9f1297adf4e2","first_seen":"2025-10-28T12:14:45.877408Z","last_seen":"2026-07-27T11:49:48.588744Z","times_seen":19,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemultifull?fsyms=BTC,ETH,DASH,LTC,XRP,XMR,BCH,XLM\u0026tsyms=USD\u0026e=Kraken","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 17:14:38 GMT","end":"Fri, 09 Jan 2026 17:14:37 GMT"},"fingerprint":{"sha1":"A4:C9:30:76:83:AF:44:7B:BC:E1:46:5A:83:BF:3D:9F:0C:7A:34:EB","sha256":"88:90:E6:CE:A2:83:E7:89:FA:2A:C9:FA:4C:80:B9:0F:48:5B:77:6B:79:38:56:35:24:E6:60:E4:F5:70:43:91"}}},"request":{"raw":"GET /data/pricemultifull?fsyms=BTC,ETH,DASH,LTC,XRP,XMR,BCH,XLM\u0026tsyms=USD\u0026e=Kraken HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://metagrowthtradefx.com\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-37\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17539,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7b031bfd0540be088a5926910609a626","sha1":"6c0741e53426db30773bf74344324d2d5c45ede0","sha256":"a2a6f332c13ebb5454e4e8f87d8e2e00345c6259e8a4dc9fb44670d3e6a93a55","sha512":"12ce505e817371d6557f63c87c5a37d142beed5894ef6aa754cf70e8f0ef4c547e2c65eb4f0fee2cd5c81689773d0566debfcb1874dd00f0dce79841a1bed9cb","ssdeep":"384:7MzeMz2MzLBMzaDMzYT3MzhtMzYvMzuhbspFAe/:7MzeMz2MzLBMzaDMzY7MzhtMz8Mzu9Wb","tlshash":"ae7231363b36b96198228fc7ba38b17d7a73b51cd9978d98e53372d5c488104728e90f","first_seen":"2025-10-28T12:14:45.87853Z","last_seen":"2025-10-28T12:14:45.87853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":62,"dns":32,"connect":18,"send":0,"wait":29,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/ada.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/ada.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2631\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a02d8e21bee07487dd21b1cf84f07812\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E750C94C\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsCRJfQ7dUiOGgPAOZ26rIaxL5Od%2B512cK6lT4Pet3Xm8vGP4Eo5qbveO018eUqm9vVrxqn8YjxpJ%2BPZ%2FsVOWnqcqbpCs54f1HqP%2F7rT7aEq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996c868120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"a02d8e21bee07487dd21b1cf84f07812","sha1":"55b124bce8be0ad475350ea79defd1441e17dc1b","sha256":"a66a9644ea48e7dd6bcea9070b13e9d9e12368b1ec97e452660769b4a3d7443f","sha512":"bfdb893ec31797c21ed2500d6050a0f1e038731e32279700a4140d26bbef2b40fb2cad93170ca879142c964b1f787d475c9adc0010988a2e8c9caac5d3d777f5","ssdeep":"","tlshash":"9e512924b268023e9a4e811b4bdf4d0e8f185e5f8b6f4f399b1a11a3f4173d93241235","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.071092Z","times_seen":2496,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/plugins.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/plugins.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 32322\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32322,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31900)","md5":"e65010aad32214836dbacce6990fa7eb","sha1":"81ebe144920b215e897caac6655c478f4f4ae3e1","sha256":"acc0fd3559e18ad38e66e10bfa32deb4a1e7977dee7d47ae47edb3c0fcb44a72","sha512":"3c238f4c50ce0c0d341c980470ce5d448b8d3912c75a2fe4df2fcc102bab5e0b1598d5562743a110e3339112b00336aeca4e6a67020ec9c8f6f7b571b6403368","ssdeep":"768:TISLC7T6uYvn8wRxwyryVOEKXWMPBEEGjePGEVuiuQ:AT6uYvn8wkJgEKXW0f5","tlshash":"a9e2c50d73f73f7623d771e04aeae1128735a4e1794b0478f93ca6fda52984600aa7b4","first_seen":"2025-10-28T12:14:45.880257Z","last_seen":"2026-07-27T11:49:48.584527Z","times_seen":18,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":334,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/cro.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/cro.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 24875\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"ffe46471360b465568e0f07b3bac39c0\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E754A059\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6WT0OM6J14m0De1OtKRDWuYwkDK7o6TB5DjuEonMiBFrCi4q5rWS%2Bf8DhFgrPN5B4awe%2BqIK8FM%2Bf3jEYul2L6PTgRcVI97XDY2M%2BCwN2A8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996c872120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24875,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3","md5":"ffe46471360b465568e0f07b3bac39c0","sha1":"9ddc88ddb9c494eccc1a9469a86813c7c4aea708","sha256":"48a7f7110c01f5c77791aadf07293f6fde3a8f7726f4868d10343542d5fab64c","sha512":"194bb9b5d80a7848ec93154209aaba8071cc1fbf4cb8071b6b8922364be7b6b41153c4493e35fa57c46511f8df76e0a21884dc27e61e6980b903a9b0011addd1","ssdeep":"384:4BaHvvbZWjeXrMSn+oDyeRauMF7TaoNFqcUs5SNOCjmgM2DliIqa:j9fDX1MncccXjmghiHa","tlshash":"2db2c0c69262b198f69c1576240147394e0d6fa3daa5e75dfacc0d303f178f6d88c2d2","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.232284Z","times_seen":2440,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/favicon/apple-touch-icon.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:58.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 9129\r\nConnection: keep-alive\r\nLast-Modified: Mon, 11 Jul 2022 22:28:41 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9129,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 219x256, components 3","md5":"0010c37b0321f8d01589dd8152e7b4f7","sha1":"c1ef82eae69ae58b396114e79a55f43c13a2fea2","sha256":"90c9972fc74a1b6460607b1af9ee92df35c81fe6d5353a1421fe6df3311dc3e9","sha512":"304b170119d0c157e38fa3e8f1dd65c0aeb3374470ff90d4ee76df6ffc6f081b22f4d29743c6c9aec2eab54694ed1ecf36c87640565e76a33d5ff708b67acbd9","ssdeep":"192:A9333k+9/ogHJZSQ/un080K5NUXqpGlUJA9Q3:A9333XQgHJZV/un080YNUXFliAi","tlshash":"6612f6fabfd7e7108b1f949d46bd7c778304d5e198c9421319b31ee092a1bb5a01322d","first_seen":"2025-10-28T12:14:45.85452Z","last_seen":"2026-07-27T11:49:48.619675Z","times_seen":9,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/eth.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/eth.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2104\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"5c58f2b38eedb83ef8796fa2e64232aa\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E6F95E14\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BFYzdLYV3%2FZCsokr%2BYXOEFYe27iPXpgr6VaiMzpqfXIvnkRTnRmIRVtAh8tk%2BoZ8sbh6ZKKBV6%2BGkEPFMc34Ub%2B%2BWsGcmnfXD5tgL7xhP3A9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996b84d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit gray+alpha, non-interlaced","md5":"5c58f2b38eedb83ef8796fa2e64232aa","sha1":"689e9db3f08db55471144de8677986af42f84509","sha256":"e5adcfc72238a39ff5bed9b261e1c9389828d2dbd0e5ff0c49773894de068d0b","sha512":"6bde7edadeb0b1c7cdb5642bc28c42302b19597685a4e926e84d64a3ae766404040d35815161e60857dc3c82f8b262fd3d36b7ab19bb22c681e3f65df09c729f","ssdeep":"","tlshash":"92411a166c241dedbab0014b2d570878fa0f4ddaa02fe645f125bc728d613557025b6f","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.131321Z","times_seen":2576,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cec8679/208.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:58.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/cec8679/208.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2945\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68fb2936-b81\"\r\nlast-modified: Fri, 24 Oct 2025 07:22:30 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-27T13:55:57+00:00\r\nx-node: m9p-up-gc59\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14216), with no line terminators","md5":"abc0438d493266e2733adf69d7fe9ac5","sha1":"9e807a30b82cb65facf429160ef369d20cd71dc9","sha256":"78e8409ee53cc85844dbde46a8feba275c8cdaa0aa3f4614e9def869f271ebe5","sha512":"a374d523e08ec99d8218b1d2ece6285867895c3c7a861c0990a60541ffb566d08ab3b35ca99e25cb7e9b251c69aa02fcaf6cafcf06903dd6c828cb6ab54e6983","ssdeep":"96:jZjBo+EmmfClggwnJ8/9m888OugqAw9DmN0VKe7Vv3IzrIRIe33Nh3bIotI5K6Yf:ZGaOzy8jzqTZRBvJh3xd6YSwelUiU","tlshash":"bf52ff0fef252912407f09dce8d75a61eb9c3f485820126fe1e5d8ca165ae6c4319bbf","first_seen":"2025-10-21T11:41:49.902078Z","last_seen":"2025-11-21T05:41:36.546026Z","times_seen":1687,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/magnific-popup.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/magnific-popup.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 20215\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20215,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20126)","md5":"2c1eed43a7ff7b3891ec03f0c9e374c3","sha1":"923e7e8a25002c9566d8b0a488cbaffb6e4bfb73","sha256":"40888936f3dc9567204785d9d55fdaf5506d753e25ed5e45f7bd199501a0b1db","sha512":"2228a275e69773fd42cf65e10856b5cbbb1c5c9ec6b00e06443ef0d2a286fadb7630cdffd7f87916503cbf16fcbf812b68c744bb84a978dfc8fc5124c5cb0108","ssdeep":"384:DPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:DPBIt8I5h5t1qkOLCMst","tlshash":"32921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:40:56Z","last_seen":"2026-07-27T11:49:48.656344Z","times_seen":98,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":435,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AMA/d=0/rs=AN8SPfp725l7vLLQI0dDpE9EOAvognzfug/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AMA/d=0/rs=AN8SPfp725l7vLLQI0dDpE9EOAvognzfug/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T12:15:30.756688Z","times_seen":17562751,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/css/bootstrap.min.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 153182\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-07-27T11:49:48.62835Z","times_seen":4437,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/luna.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/luna.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 462\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"37a613bae1ff21dd0d1dbcd452a0778d\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E747E6AE\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VW2gqXPbe7GRdD8x%2BYsi9pdlx7rMv60EqBH%2BVzBCKcJvmJvtRWGGe%2FaAzYaPst%2Fw%2F%2FyUuZ3CDFTjt3bq%2Fc98eB0UHx7lYF8z3goGqJ8IP00%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996c864120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"37a613bae1ff21dd0d1dbcd452a0778d","sha1":"3161387cd4d20f6c3d9191a9cad698fa0eef95f2","sha256":"888b895e1e6553ef563ec3590f470b6e0b78f1c38e051e237f4c8bd281e2674b","sha512":"fd6a1bfd26d92cef20141132567c832c700642b6f0d805e55c39c306ebe9c01605c357b3e080ad6ec28bd4ac7a5136007da118223ce7f6b38f46ff76243456e0","ssdeep":"","tlshash":"4af05c03bb41f4f8d822c036c4470322a83b084392ff80ebdac26b38680b4ec6507782","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.175606Z","times_seen":2506,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/lrc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/lrc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 7538\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2f29bf7ff1aa55b41973a32643884401\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5F063BAF3\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6oKZBVsTL4N3SSZQFD%2F4Xu6Iepeh3SC20EeGqUZ%2FqxZVPb1pNThGyypkxTMce8F7lIEshTAQPOIgmmqXMIu6Ni1gk0a463onAh17V4mjqUM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997bac5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7538,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"2f29bf7ff1aa55b41973a32643884401","sha1":"8111c601369de824f94bd7644161ca8c30b331c7","sha256":"78550f1a79d51d7781c1c42771d34f0714d9e3f1ff09fd8d4bb90511a63ae063","sha512":"0b32e6fc658bcd8562c9f5fe17aec1501b3bee86e7d280914481c771ce271243f6da7746afedbf670e196e671dc6c838693cde7d5b410cc2e707875bcd621f83","ssdeep":"192:l9t3a3lCCzgeFO4pHiEpRuNauravg8iWYLeQO:l9t3a3lnrFOWHZ0V2dQO","tlshash":"5ff17f96936c3156d99d4b3d0de58b71ba68bc9355f9c327f0dc8180276e5f10c580e9","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.061556Z","times_seen":2257,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_our.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/js/bundles/bundle_our.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 18682\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"16211-5f8ae19e52980-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 17:18:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 3\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwrEkPOF%2B821EnAiot0MR%2FqeQTutyLuODZ2lCifG75G5bk0wCLnD37eMtEoNVTLyCVoiEzkiEPpL3jI4%2BGZYCt6HU%2FZOcfhF8xh76AuQePds\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59980b74120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":90641,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (403)","md5":"000b4aa1fdecdd7f05fac90a172bff2e","sha1":"83fe2b4a92fd967d4ae10a66ab9c9f7cfb8db75c","sha256":"b80e46aa15043724f1c2c9cffb3a41fa4540d2ab531feef3f127ce3b03170e1b","sha512":"59ae80276f20cc7a35b7299ca4a2705b38e44f2c579a8170a6d7795d4dde531bf25506696825037a65481f97b2434b25b232ec13560953699eb422c2b667e2a7","ssdeep":"768:/z5PUWzyZNKSzTuoDTE2E8jHVemd1Hsng3Oh8gvwZfeUnatOuOPGdjH/AAu5P/:9OZNKSI2E/mdFYoBZRhPWjYAu1","tlshash":"6193922de8f72031603371b98b7f61047a69a0274a44ed057e1c57d02f86ab8b6f5fad","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-07-12T20:21:40.115094Z","times_seen":2766,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K638SKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtm.js?id=GTM-K638SKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 28 Oct 2025 12:13:56 GMT\r\nexpires: Tue, 28 Oct 2025 12:13:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 98754\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":281386,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3036)","md5":"6dd8402f47c04045eca083b65c8345aa","sha1":"5c5693b165483222a6afa3bad5eff37bfa6ec6ad","sha256":"3f620389a9b9005c4e09a4b98664b37ddb2b55a37b8da19f47c6d2b1db1f7789","sha512":"5eb8344c6e49e936b7234c6855f5de42d7bd6f7c6042fb9d3aedaaaea66af29a523565dad11ff4b8ecb17db1e36bf7d15d01f2388de83c4991d67ec0ecf3bab0","ssdeep":"6144:jRJDX484t9Z8nP5D6GN8xKKc/UEA4gxi3ZQUe:VJD6t9Z8nP5um5gxW8","tlshash":"015418cdb7d6b46683a3a474503f114bb13b7992f84cc894e186d8d82d70aaa4277f7c","first_seen":"2025-10-28T12:14:45.885511Z","last_seen":"2025-10-28T12:14:45.885511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/cdn-cgi/rum?","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:57.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1105\r\nOrigin: https://widget.coinlib.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 28 Oct 2025 12:13:57 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://widget.coinlib.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2%2BVRIYv0PFPnfU88eBQMwaTtQImt0fyD8WTGb%2FBxLyr8x%2Frl%2F%2BYFXKdbSFXexYdJuX%2BqnJsLN4zI%2Flq69jhZ87g2vWUtfsd2jQCBzSNrAZY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 995a59a0b929120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T12:15:30.756688Z","times_seen":17562751,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:54 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 845\r\ncf-ray: 995a598e2de356c4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf0-d17\"\r\nlast-modified: Mon, 04 May 2020 16:04:00 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 46105\r\nexpires: Sun, 18 Oct 2026 12:13:54 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Mn6NwBd4NHS%2BtlXstL3DkfQwxsDa08xu4GsjNhem1jCRIpAHlAVoZqvXP5F2mbHwPJR4avxp7uXN374GXVT688h31FpJJzBDW1UeJbKvYPQq%2Biglg%2BZqlKkM261ceYnajVwKBrfB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-07-27T11:50:00.126464Z","times_seen":42713,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plug/chart.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plug/chart.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 799\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":799,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (797), with no line terminators","md5":"8c63fec8cabd4763ca0a3c1157a2b03f","sha1":"0f9020a623bc21dc198b9acaecd6dbf12f096998","sha256":"f968e0779a8ace73f1eb498e2205a0895d9e0b2c3691416b19b0da7a93e09af0","sha512":"dc8767b7c2c17602fd7101d39a5383b681f9707cde86b7af2e723ab5e0e0f800d20c1ec3f4a84dc20eb932f572d596c41385bbd8045f4908e39e2aec649404e4","ssdeep":"","tlshash":"6d014117c6099252ce21508ef0826a852ca2e307fc514774b8f8a9f880c10d3e739b1c","first_seen":"2025-10-28T12:14:45.886746Z","last_seen":"2026-07-27T11:49:48.605367Z","times_seen":18,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":527,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AMA/d=0/rs=AN8SPfp725l7vLLQI0dDpE9EOAvognzfug/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AMA/d=0/rs=AN8SPfp725l7vLLQI0dDpE9EOAvognzfug/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 18:49:47 GMT\r\nexpires: Fri, 23 Oct 2026 18:49:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 408250\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/css/merged-bootstrap-styles.css?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/css/merged-bootstrap-styles.css?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 55063\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"578a1-5f89b763ecdc0-gzip\"\r\nlast-modified: Wed, 05 Apr 2023 19:04:31 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 9\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NCzzln4YUg0gZenSRkVdkvMQ6PCwzyJu%2F0pqF6lMUDl67qivMlHjg%2Bcqx%2BEpgaDouIT7MIi%2FPCVu43NGmQRKJhFldLzxzOhcLZCPPPL6h0HK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996a81a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":358561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42541)","md5":"f38db591d76a07a82e01ee5f804db9bf","sha1":"c0dd7be6025f7cb06cff8baea863e914f13739f9","sha256":"7e3fdaa5cb73e63a0aaeeaeee379d8a8d6edd40d99b62200f44c3d5a2d3c6c92","sha512":"42331891065c341814b1ba9145fc6a6d13c59ef842e542f274eddc54d2c2e8c0cf39597fbb5a526451f3ececed91585f49bcc7d35a5340b1519b1cb95d634823","ssdeep":"6144:w1vH3GjInc3SYiRENM6HN26gKkP01awENM6HN26t:4vH3LP3","tlshash":"977474a7f15021aca263c51e66c0bbbd156fe255d6120ffaf4273b684bc52c609a3f1c","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-06-09T00:21:53.237689Z","times_seen":2754,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/slv.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/slv.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 32796\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"b2d96e52cee38a27b569262527b0b020\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA50F291\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2uYCDVBSExbMZTOc3rpnTwSlrfZDlSjj0%2FmSdSrb5DCR3XXcKGC7tWP7onBxptbXUDb8UES92aZb78SlLWKs9MdjDTiaWaRpybaeoQct6Ms\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59971956120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b2d96e52cee38a27b569262527b0b020","sha1":"fc96d5940bf068dcf316b1f2b4ca3cea33b68a87","sha256":"eaa7d471a3bbf0f75647eec3100f36ac3cd14f90076b148e79a2c6d344ab3b83","sha512":"df614ec73f16b7c77cb9ce7e1e0d7e8ac10bbe9d773eec0f46edc5f594a7ea07e5d7b3e7de407bbbee4fb2c5db8858a12bbd7b5a3e161d4630b5d322c4683e71","ssdeep":"384:vZ/PRS5lZfRRud33eFce/w/fx4B+iOuZv/C/DuMiZyg2GNoEjxcA0o4S8N0aQ9ms:B/JSNfnuBOFcuCxj8YuEmxcQWlQk67","tlshash":"07e2e113612db9907a5119b2653c8f5e36fbb2a92f016b523edc38b13b07f19f583182","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.151939Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/particlesjs/2.2.2/particles.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/particlesjs/2.2.2/particles.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2085\r\ncf-ray: 995a598e596f0883-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03f41-19c4\"\r\nlast-modified: Mon, 04 May 2020 16:13:53 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 775525\r\nexpires: Sun, 18 Oct 2026 12:13:54 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6CDIzNOfqNGOZ%2BD1z2snAMC%2BRANbj9YUMzzNd8hxauGIMcZTcZvULCQ8M%2BwGTdhG6Fy6QAYlGOXDj1nU0WDYYWsmvPMPE8Xd%2FY9wt4wzT%2BcGxTZQjZvznicZYA03JMaaq5aMaIKH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6596,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6349)","md5":"6bb0d713e60920e0b19da7f1ccac5abf","sha1":"c011a30f7e2d98ed72f8432610205b2bec8aef1e","sha256":"927731297aaf04300ff798331cd91ff51d4561968fd7fa4cb9a6c28a6e50e21f","sha512":"82760ade25cf7f1735cd738019bdd2cccf45a18e1df761ffc6c9c7419e3655671965a673225d25f6aa26313aaec15cc2125b6ac0cfb4a278f1b13e7f730a7dad","ssdeep":"96:5G/EE5eHg53ULbu/q5qx/rH4vh/3bnYEziywQ94az27yo7+r/e:58NUHLbCDHQiEWywQznrG","tlshash":"17d1854db8222a33930762b3213e198d3333e95da445d4b8b254c5ee5df4c416ba7b3b","first_seen":"2023-03-11T12:23:33Z","last_seen":"2026-07-27T11:49:48.567937Z","times_seen":16,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":14,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/etc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/etc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2210\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e06a71bff8d6758f4ae7cd093fa0099c\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E9403720\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Ssh%2Bs5lrDYbz1LJfcF8dVIEQpdO725Wf8ervy%2BD%2B2UpEDlaJu5Lf1nSN8s2H7uXj1uL8S7%2B6%2FAVWmJav7fLXihIgRtNHJo0Fjw7EK9eaQVF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996f90c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"e06a71bff8d6758f4ae7cd093fa0099c","sha1":"70fe28380fdd0b3f2a16714ec7df40ab6152f4ab","sha256":"bd3b5c7a927dc5c1f76548bb34caa870cc195e27d3b781ae7afcf6802dd14a10","sha512":"ee88c3b1b67e00a3692ad89005a46a3716705440566757ee284280106071a8749c029f973464fbcb3aa664022907506ceb3f58013b6847544185817daa89fbfe","ssdeep":"","tlshash":"5b41d6824140fe14845c2858f3f7da0b4b1a56defe863f1ed9d60be00908d1673702b8","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.05931Z","times_seen":2392,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Oct 2025 00:34:58 GMT\r\nexpires: Sat, 24 Oct 2026 00:34:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387537\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-27T12:14:02.203039Z","times_seen":543720,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":32,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/svg/Illustration.svg","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/svg/Illustration.svg HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 21042\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21042,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05e19d08db2a1ed549df89587603c0ee","sha1":"6c18969c921a25fa9754a4f1601e2ef95a3c296a","sha256":"0833c6506e1afb072c4d59e7462d6a8232a53b3ff14586da63ca1f0c6f57ba89","sha512":"ddc8af4d195a8f6cebde849a24e2ee56424b2a833a4e73b46ce0faa797b5a346e534b47f5c4bf6f6099a25f319a6c4bf05fb8c7f42cda24b78b43c11c5fa286b","ssdeep":"192:k4KdJPrJ7stXUsSIvTsuV1ueuTE+8TAcffkjH/3OWWZcl8mFCD7Y4HFt2g55:kdxVAtXZTsabGE+8qZmRFt2g","tlshash":"079243f232f888869a114b49dbc8aed4953ce2df616301c4731e357b8f7229a359f761","first_seen":"2025-10-28T12:14:45.890061Z","last_seen":"2026-07-27T11:49:48.663595Z","times_seen":11,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":799,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/svg/ddos.svg","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/svg/ddos.svg HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 961\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":961,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71c52f176769e2255e4bfd634c3af8fe","sha1":"2d3dccc7703db0b1e95220d14f96c43990f38ead","sha256":"bacde9ec1213c00a2405dc380e1dd19f468fec970e02d5c55968efe6ad4c848a","sha512":"af322b176f18adae38e08c37ba732529d3c8b100303296c69ceaa5bc09ba2adf334a5c7036e98df6888d04b04f422afe9047cbee3a44822de7e93ea726185553","ssdeep":"","tlshash":"621118b212e80a05ecd14b0557d4685564dcf857a131f5d4f51e2023c79ddd421cf36b","first_seen":"2025-10-28T12:14:45.890834Z","last_seen":"2026-07-27T11:49:48.592122Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1149,"timings":{"blocked":1044,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Oct 2025 00:34:58 GMT\r\nexpires: Sat, 24 Oct 2026 00:34:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387537\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-27T12:14:02.203039Z","times_seen":543720,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":72,"dns":1,"connect":15,"send":0,"wait":17,"receive":18,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Oct 2025 00:34:58 GMT\r\nexpires: Sat, 24 Oct 2026 00:34:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387537\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-27T12:14:02.203039Z","times_seen":543720,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":71,"dns":1,"connect":14,"send":0,"wait":38,"receive":8,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/dai.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/dai.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2623\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"04ba510a3f5f8302387457d68d21c07d\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E8960104\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5E7pyffkX8LkLbVx3hc9bYNdKxWpysviRDV8pMspMVjRGiO%2Bn56SdTQNrJEkZOfnteB3%2Bw2MZmEjhuV9zb1TFpYbe93QXMvVssMefKs2Mnbe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996e8c5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"04ba510a3f5f8302387457d68d21c07d","sha1":"cb43924c188b023497d8c155374384c0011cce65","sha256":"f3b83a4598aa6663ab7f8d6a7a8a5c0f0bdf32210fb4d079c8ab307f73f18dc1","sha512":"fa2cfadfe9a8124b35c784e240082d8bb48ebe95cebaf74e3891a72e6dce38606668ca994ddbd161bbd260c7ce40333df533954cf017d6302825f1610e5e0541","ssdeep":"","tlshash":"9a517fbd93baa61058e6917a5522fd90c153ff8439b01985d0f9813ed4ff3457c6a30a","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.104108Z","times_seen":2441,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/qnt.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/qnt.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5541\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"0311b7fcbbdc5e67a095ebdf7ac10e38\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EE2314BF\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCQN%2BxM2oRudpksHGhHvNLk9KQdsVIt6qnD2Y%2FgMqHnxgJJYQcuxJXij1KM7uze9vSuRX4REQtilwuPjDA30rj2nwMLRSs2jpze38P1one7l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59977a35120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"0311b7fcbbdc5e67a095ebdf7ac10e38","sha1":"2ed5c80ac8aa7e0e727fc2892fbe79c44ff1ed7d","sha256":"e6243696613758c8bad8f2ad777203d8340ef37f77007e65669dc36cfc451bff","sha512":"b8bca7523fcd244b029e95806a751ecb70e056f2ec29c01f0d099ffe94cbd0fe3f69a1f6039f3d84e58a6f57944b6a6e65319b6f30baeb4fcf2d074d6152c73b","ssdeep":"96:hMuzvLA6GyiX+3dVx4QmgVaZKiGxP68AefYmS/z/LsJOgTqS5L4myDA1M0JRc:uusyddAjgVYGcefm/XsJ7gmykM0Jm","tlshash":"22b18d82afce4f65d4ec88c90de62d523e03d36474e2ac71547ff229982be990030a5d","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.098995Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-9.jivosite.com/widget/status/2570495/NdZwMJwE8E?rnd=0.42684037851972945","fqdn":"node-ya-9.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.17.225","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2570495/NdZwMJwE8E?rnd=0.42684037851972945 HTTP/1.1\r\nHost: node-ya-9.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://metagrowthtradefx.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/4.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 187\r\ndate: Tue, 28 Oct 2025 12:13:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8bfbfcb8bb7dec92fc488c4a2f151c7d","sha1":"93167ca4538140a146d4da843234c59ab3d8d466","sha256":"cc42115e9d99e35ee0a3405116ac9e06f9041808b07569a0d7cb1caa267fc68f","sha512":"2e4ac34966002916dc743b7ca4741b338747edb0adb6a9d99d2f09a142140bf9c3ce1109f9bcfb347d89f3a7e32b8a4b48ce8c3cd0f3e9eb0768618120b7b62a","ssdeep":"","tlshash":"dcc01229093955a54a80d564a0cfb74b0925216316c39b55ea95ad5060ea9a1c55a007","first_seen":"2025-10-28T12:14:45.892652Z","last_seen":"2025-10-28T12:14:45.892652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":184,"dns":58,"connect":77,"send":0,"wait":36,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/btc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/btc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2708\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"638e7a558628c3c25aaef74de842c0d3\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E70FA94D\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEN7EQwi%2BO7pJIG22bbfMzUBHXj505Eskui2dgXy1QqrCnnQ%2BQmyZnYWOMll%2F04Iiw6Fyhav4CDzHp9AIhBMLb5b8HzgCL8NE40LtQSsYdYY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996b846120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"638e7a558628c3c25aaef74de842c0d3","sha1":"3d41002b08d0a01a8ef9976c9ad2cfa101609f92","sha256":"0c8495f4eab0a8d8dbd3e36d29a0cb6229f8fe45ce3ed5e78c6cb5dd5ef2bb75","sha512":"469c01555f8178260b254d62e016c15573043e46b2911546572926d9a201819ebbb569acb69cd05aa98e0501cb748c8f9265ef0d2847565720a57b33a1878177","ssdeep":"","tlshash":"f6511af9d3d32935e71782763d76c1f1f2d9d004905ac247be74606addac3115b4260c","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.076329Z","times_seen":2663,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/dot.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/dot.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5124\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"75d68eecf3680e19d2f527c44907a0e3\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E7747560\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKpPLyPHqRLzt9ExKyMPa7sOVwNa3QgXm2JeSnQycJb0k6soA0fQ0O3FZUAQ4d4JFlPPkgYOsH1yHkoCLG1jIUy0gC6LxwUBsC2RQWUMo5Ip\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996c86f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5124,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"75d68eecf3680e19d2f527c44907a0e3","sha1":"2d4c1a683cfa448e41d7d39cb87d46e6811fdf6d","sha256":"a060df05f655e8abc3994282b5a00bb0666050c87dc35b1e28c81bcc12ac6d2c","sha512":"ac63b4502b3f225a3bb5d04f86f999437511741b16d60dfa2dff735cec265aa29dc95a98dadd9cfddc30ef55a68bd7508fd97f2e39aab4532f152f51f7ba52dd","ssdeep":"96:hWixEaXrGnHhnV2l1qqFqP0R6JdwFud8yzAZ8AgQ+Y25kyvXMsjEThzF:six98HhnOF16h8l3N2qyvXMsKb","tlshash":"27b18e33ced4acb5760bc36d885d500a58ebd610b597086720609c2483799bbe196f4b","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.164961Z","times_seen":2482,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/bch.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/bch.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 3041\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"0a99c164ed7553823d963510d9c4c2b2\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E8FB6048\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGW6uTx0TBCYMB7IcSSKFZDJB%2BDMx6c5YISJjFKI9i5KMH7uXtcYhQ%2BWKOrr5l8vDTgUYJNgHvYj%2BLsAvojLX%2FUBw4EReyHpL2FAAsk7%2Ff%2Fk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996f8e2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"0a99c164ed7553823d963510d9c4c2b2","sha1":"e1eea4be191f04941882fa801334f038c2331ed7","sha256":"f262f257ac05d84bf675c9e46b402f805b423923248e8b29afb15f238104c388","sha512":"660680142ee0b0263eb24782ee6c408cd91e31fb0c97b52bc4091f8490dae3102fa4616b5503c8babcaca279201393b23619ee426ac524c6bea188e0397446b7","ssdeep":"","tlshash":"d6515c414fe0c73da451cf67d52e0055fdee120b49c4af9aa5a5c807217b0bc9ec0a33","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.083347Z","times_seen":2381,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/setting2.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:56.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/setting2.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:56 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 18231\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18231,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"8e4eb01f56d84d868639b44eb18a86b8","sha1":"fd7e8de96fc8a7c7233066e8775c0306e63a6889","sha256":"5cd353906115360ea6a5b79dc78e70d6b8b24f55a4fc51187b4cb8cd8299f063","sha512":"e7ee6bde72814f1f078442bc72a2f3eb62095ddea5fd7dcf8f7f8f973853e463760f2e7c0fc165527dbb8fcb8d1ef447bc14c511466892e0298c9adb60f1b47f","ssdeep":"192:t516hUllH5i5JvgglrR5J4zCwlq5J4zQglRr5J4zQgl15Zpu0glk576LNjv4yOT7:t1Wxs47l/Tlll5","tlshash":"608209f3724a483822ef516a212cc7892b7cb573dc621487dd192914e663792c86ef7a","first_seen":"2025-10-28T12:14:45.863442Z","last_seen":"2026-07-27T11:49:48.577477Z","times_seen":12,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:58.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\naccess-control-max-age: 3600\r\ndate: Tue, 28 Oct 2025 12:13:58 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T12:15:30.756688Z","times_seen":17562751,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:200,300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /css?family=Montserrat:200,300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Oct 2025 12:13:54 GMT\r\ndate: Tue, 28 Oct 2025 12:13:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10902,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1fb09f83f2475ea2fde2a3137f366f4d","sha1":"85f1a9506ea04a22099fcdc8e8c0d78f23d8dc71","sha256":"b7488edb0cc20ea65df757a0778a7438f7cc6f31223654d38e16b5ad8b9bcda4","sha512":"bf37526d16a8a8f64f860dc38e83a1cf8208e3e348c685a7b51587f57c56b6b9783f3d6fc93e7b1f07736ebc0fd9768671c5b573beb0caa9f75d6dd52530e6a7","ssdeep":"192:sRc7j7Oqu0RH7YQONu1Ra7h5OsuyR97uGOXu7R47nfOeuQRD780ORu8:8kvb/SjpbAfnM","tlshash":"35228e51101ae500a7432cc923cf7e25cd4e61667494c5767ffe2ca8ade6c365361b3d","first_seen":"2025-09-06T09:33:23.637054Z","last_seen":"2026-07-27T11:49:48.620767Z","times_seen":109,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":1,"connect":7,"send":0,"wait":17,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:59.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:59 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68e66124-eb0\"\r\nexpires: Mon, 10 Nov 2025 08:12:19 GMT\r\nlast-modified: Wed, 08 Oct 2025 13:03:32 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:12:19+00:00\r\nx-node: m9p-up-gc8\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-26T18:12:33.159225Z","times_seen":16633,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xrp.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/xrp.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2426\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"062f93b4108e8a89fad2b7b54bc0e832\"\r\nlast-modified: Mon, 24 Apr 2023 15:43:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E70C811B\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nsu4OjsgsyhXEScyBQ167K0Tf%2B%2B51it3OSoIgJ2ACztK2w%2F%2FfHvVqgJaARxH4%2BLNB34mTma8KvF31413bxWz3PxE4SalrlNlq4bobDqEkpoU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996b858120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"062f93b4108e8a89fad2b7b54bc0e832","sha1":"a7d0610335e366e813d2594e4c1b18512f55d416","sha256":"ec3b2ee981b282bd72d6e6949950aa7ddcfa066e5ccf0d04ea3451a77e91fe17","sha512":"c03775a7fc518176f55c27d5c3fdd5bab5c829baa5344db265be3ced6c54af2709886e16e3b223948d5f2ba6c6169d27ec1e7e791100efcfeefa5dd176815b85","ssdeep":"","tlshash":"0241e8c4364c7a8f48251abff397915be14a0712987cd65e843c53de98ea38cfc8e201","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.069265Z","times_seen":2568,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/svg/sitelock.svg","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/svg/sitelock.svg HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4871\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"496e9d8ac9025070060e6786fa55dced","sha1":"576d5823d472a9e75d0abd90028786dedb39c2bb","sha256":"77e6a40d8aba4f6c454b839aaab4ad6761ebcdb2b28dab4a71d580f920a0986d","sha512":"edf8053238e1363959e0e79e9bcd370719844d2bc17eddce1df2c8435f64bddfc2903517de0ad0c08131e31eb59f62d2eda297f2541bdc8874bf4ec6d054644c","ssdeep":"96:CXQSfLocGGWJoEeGkD+3ipmLWkB4pTIB0SB0YF3fZvzX+FRrW0TB:WQAMM6orG9ypsBsYBBXzO7rbB","tlshash":"27a1328d333995e8741028f9ae34358e3baccde51970e1a4c363fc1758c7ab6d864da5","first_seen":"2025-10-19T08:21:15.264465Z","last_seen":"2026-07-27T11:49:48.579561Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":929,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/eos.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/eos.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2932\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"363915d59bbe7239e3ab25f24cacd461\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:01 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA7DE46E\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2B9ucm7AkQpwnuR3GQLzTTVln1Di5k91UeAr8tRcnGqWqra9kkx7JD0zmbzHzgv4quYOoVntu8hQ9sEKPQ3AT4cVAonOc5z0nTUX3wvpXHh0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59971955120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"363915d59bbe7239e3ab25f24cacd461","sha1":"3fdf0ae4aedfd88e35b750ebe9d6ed05c649261a","sha256":"e1986934f1ba658a50c4cb2b626993e7e7ab12713b554908d2f7e1ae76def752","sha512":"c7bc930c21e58d26609a463b7793587b181bf185ed8513f4811ab4b997b332942d8453c9490c2fe344d02622abfa3df583a9cb6e1e6547b474cd521f8a8d58b9","ssdeep":"","tlshash":"d8513bb35ce03674eb0065220df3d03fcf41aeb68a37886fa705187faaca546562036c","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.134952Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/zec.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/zec.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 3009\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"206c113797fc5810036e7f0aebce037f\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA63B89B\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kw4dAeVie%2B2OILgTCbspDa3HFcGvz6vAchtiABJb8SGj9QuJJVP4RAk47iQb33QpPLqHpZzWNvLsMmoIuqWgn3IJ9%2FbYllLw9nyG%2BsdhwWq7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59971958120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 78, 8-bit colormap, non-interlaced","md5":"206c113797fc5810036e7f0aebce037f","sha1":"24f46627873dd27e74dab7290f96d8cb02c2e9ff","sha256":"2ca56fb4beab86f55bf203b14b7730aaa8ad3597b0782d5d8f5fc5c11092b863","sha512":"716841e557c297e24b49138403eb312270bcd8117453431b2f85f9d0a67bfb44d6445f80a2125546a3497aba77477f50cc6c552868f6265939aaf0d07c4427fa","ssdeep":"","tlshash":"f7515d0ecd1cc614d8ed6db5028609ea96a30e932ec9359fe9ae2740830a29c54d7756","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.11114Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/neo.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/neo.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2449\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4b743096c5dbe00cc4bfa7453e6e770d\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EDD742B0\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpvdytXeZOI5fO4vGiFJCYKc%2B1f8q58koCYdKwR1t224LLpX7T0yeM5lGMqKt4GF98G9Xsge5TAwtL8UzbpJsydz6Kgta8uH4E9uG3PXQ4o%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59977a27120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"4b743096c5dbe00cc4bfa7453e6e770d","sha1":"49868306c0c2a430b6ae80f4ee1dd87548dfea14","sha256":"6b520d33a4eddde8d2630120470eaa5ee6351c2b142d8ddc49e007655c51b317","sha512":"5472b8595df34f7f951bf62621c594431eefce2605866ad5c8c13178ba9a4b4828ed606e213353b958ef92d07d9ec1dd5db750a53b9430286ab55fefbe6b8caf","ssdeep":"","tlshash":"ae511af8ef11d439b8224e75688268706a2d73f4df36db8b5645d833c4fc1a9d404456","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.213398Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/doge.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/doge.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4965\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8abf15c7e759f7fa873d28468a8dfc0e\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E766F3CD\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 1\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSG7Wi7Wy2Kxp0PJT%2BoCIOp8SRQi2CP56zBdH5xH96QDVXAmFqoYt4zPLBNe8JQ1Jq%2F%2FtGqN7uU8e0utXy%2FgAxMLJmTJtucFNu5fOQBEbDt0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996c86a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 79 x 80, 8-bit colormap, non-interlaced","md5":"8abf15c7e759f7fa873d28468a8dfc0e","sha1":"f1c4a2308d09868ded989dc3ebaa0e84717ca2a0","sha256":"7c4b98126f08363a092fe2695a9edbbf91981b3bf48c6174d9d3f2b11fd20657","sha512":"ab046468232e9605646e3afbd0e83cddd3cecdd0374bf099cda175294046b150efa36aa5dc5b490e1884ec747dcdcc9f7bf30a3d8e3052c6762636ede307935d","ssdeep":"96:sITPGi8X+KE2oDE1aCV1MK5AWzJ/mUH4pkWT2Ld1gnPRbFo:v+iVKC5I1MBWztmUe1Tg1gxa","tlshash":"47a18d8cacf6fc35b06b051d1f0b648607e470763e99fe4589e60c9b43f9a879d062ad","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.115219Z","times_seen":2487,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:57.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\naccess-control-max-age: 3600\r\ndate: Tue, 28 Oct 2025 12:13:57 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T12:15:30.756688Z","times_seen":17562751,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":142,"dns":80,"connect":9,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300,400,700,300italic,400italic,700italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /css?family=Lato:300,400,700,300italic,400italic,700italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Oct 2025 12:13:54 GMT\r\ndate: Tue, 28 Oct 2025 12:13:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3f0e317e67b1078d26e692d0aa3279a6","sha1":"6e56dce829791f423b5a0834740db2d4ac537b9a","sha256":"80b1091388d0ea6423648f2603ad3885086e9694d12d5229ceae87c67a53e4fa","sha512":"993a61b7d03b3fd6f1bc309c52d8dec66698c11bc03e87f312ac4b28d85379559715eaa5132167778c59c512ce84a86a070f6a5e64442bcf2efdcd9ec494830d","ssdeep":"96:HYgW/pJc+u7YgW/jNKYgLUJc+u7YgLeNKYgC/KJc+u7YgC/gNKOWhJc+u7OWSNKB:4l/J3l/lkw3kip/i3p/jR6E7nx5ul","tlshash":"dba1bf92096fb508db930dc212da7d32ef0fa25064499835eeff14d8bc93d6a9361b4d","first_seen":"2025-09-18T03:52:43.864973Z","last_seen":"2026-07-27T11:49:48.6502Z","times_seen":2317,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":230,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/svg/eth.svg","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/svg/eth.svg HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 22752\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f3bf0e1a4543bc59bc07c92aed9f2d4","sha1":"9f09b24f7402d36eb150e5a922d17c3275ce5bd9","sha256":"24443338cf07efb73a8ca46e7b38fce05007ccd310595b93ddeea465a6219103","sha512":"8cc0ad6cd8c27d5cfcfe13e8f0cce21343e26c3b248d6866580ccf685a9513be686f73b51b98ce3461c31ef65a5d3fe7463d1472ada8c22ae460e8fe4a505cf5","ssdeep":"192:7ByWaogupAlOsNbkKakKzhECAmlla67uiAqvamhCsxbjt:7LNckllazqvamMOJ","tlshash":"d9a242b161d8c85ae671c285cbc498a4da2ce2cf906353c4f36cb62f5f754ca2a4f725","first_seen":"2025-10-28T12:14:45.900131Z","last_seen":"2026-07-27T11:49:48.650813Z","times_seen":11,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":798,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Oct 2025 00:34:58 GMT\r\nexpires: Sat, 24 Oct 2026 00:34:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387537\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-27T12:14:02.203039Z","times_seen":543720,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":90,"dns":1,"connect":27,"send":0,"wait":27,"receive":7,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/highcharts/highcharts-3d.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/highcharts/highcharts-3d.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 39759\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39759,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17777)","md5":"4f04ad1bd13f9f28b6cf8e8f94c8e9d4","sha1":"4fe0728853f9cf43dd463e896007f7098d4b59d7","sha256":"1f512d5564e18bff6a885e77ba65f6f7850e0cfcf1332c1f8647051f4320b6df","sha512":"a038e1e07716fba721e5b0955c88e155af6b2eb923b4e179d1877ae95db42abf49b8318a80e358023572f842490e6d3c946ae4c6e62b5aa07b15aa5f1c476f2d","ssdeep":"768:awcnjDu3vbjaBUze8Rpm0HVWfMEF7sVsOINFFa8/E:UDAwUzXSm88","tlshash":"1603d965e42339ab7b2a53e9bb7b134a113f133dd009891c3449e2e60db588d572ef39","first_seen":"2025-10-28T12:14:45.900952Z","last_seen":"2026-07-27T11:49:48.654622Z","times_seen":18,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":520,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/css/magnific-popup.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/css/magnific-popup.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 5236\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5236,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5236), with no line terminators","md5":"6f414d3efbe1193494cfab2427f2475f","sha1":"6fac98012b37ad35abed1eb1ea127f2dddc4039b","sha256":"65ab95b0a57d4fa12ccb83a19088bfc1a593c982dc9fe6f1e7ecc1eb8ab313d0","sha512":"d40b7bfffe0bf3ab13bf30843e80eca9a77ff028e096d22f3815c88b90cbed70ed8859265364b649f78d65c3b4bc0ec158a5ec9d8d2961377581400fb383fbed","ssdeep":"96:VmKSCO7EWP9U80ajDcX8Q9tkxudlsbNDm5Mk9rCWhb:VqCO7EWP9UzajDcMQ9VdQqMk9GWhb","tlshash":"deb175b3a941313ac633c926d1c3ab9c32279227f663569fdf82a419c6cf4cc1625348","first_seen":"2023-04-05T23:05:54Z","last_seen":"2026-07-27T11:49:48.661745Z","times_seen":1311,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":256,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/bnb.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/bnb.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1754\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"fe0828b5339adeca506d81ee26fafde9\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E6FD8765\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAER0NAGiuD%2BilFrVxDA0FC3Bi0nOvXnzs6TwpsC6HWLAuo35XwsUIDWTyAFYkiopHPGavgiP1NAJ47czBpuOOuHBq9oVvsV%2FjocR4vlsDPK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996b851120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"fe0828b5339adeca506d81ee26fafde9","sha1":"ae0828d5399934bf1470f7572b5376523dba033c","sha256":"f3186447151f414f1b557d16f0b251a9bb6276877b389e6c3e7aee9da9a3da6b","sha512":"e8812603920401f7df87d1d4fae1d3102d7afb51254a323944e43b815f52fcd81a048f9d845cf10410c792665cb64fbf558d307c18f682d5d985cb28f00f9b17","ssdeep":"","tlshash":"c7311a4ab816177ccc8e6a0c999b1c14eb3458e424a383cd9f34dddebbaea9c1ccc541","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.189308Z","times_seen":2576,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/waves.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/waves.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2678\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4db326850954c21f42089de1f67c8898\"\r\nlast-modified: Mon, 24 Apr 2023 15:43:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5ED42C294\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0OOT1XwSKhrf%2BTW72PQl6IahOBuVKL69neqsTNonVDUGspgux3aR%2FFZVfyCEC4XgYI%2FrG7pBEBvDULCqlygSkPmqOPaGVjD07SaGNweAa6f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59976a07120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":2678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 79 x 80, 8-bit colormap, non-interlaced","md5":"4db326850954c21f42089de1f67c8898","sha1":"610efa2bd5fcde9ca39e19f9193e7e53b47e3898","sha256":"0eb3c380e9d8934d38dcd5f3971730ca8c90698e5b843c2ffa24229fb31f406f","sha512":"ca479d264d275c252da84100c5361e9f4ad4c495e4b03fb39a92ba2452b3205d039059f08e0108ee82c766f3ef2467e0efe7fbca44a4f42aface90a8d886b435","ssdeep":"","tlshash":"f0511c403215a5e7e5c66e284da10671cdd61f1a58c926b2f8e6fa42b17d3d0910593e","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.142815Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:55.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Oct 2025 08:14:22 GMT\r\nexpires: Sat, 24 Oct 2026 08:14:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 359973\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-27T12:15:27.15504Z","times_seen":947422,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/infodata.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/infodata.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3876\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3876,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"a1389ffbf5c5f28f36592ddde71cc799","sha1":"d27b63158f82b1f671265631dd1b003645e7cc30","sha256":"6a61cf9a7e4023527c9fc123d1c0bb93e3ed30066d47e083adb56bfffeb13ea7","sha512":"f552964a433b77261a06747ac40476be2856e2053a3b56bf852ce398436011798b4527b20f337104301efcb71c677c034665e582a3390d0078583ede624946e8","ssdeep":"","tlshash":"d8817c18b9b5b0dc203412e1f6fc22262857e9e6f92744022f3e85cb5944b1175ff9b7","first_seen":"2025-10-28T12:14:45.903081Z","last_seen":"2026-07-27T11:49:48.578602Z","times_seen":18,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":429,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/svg/geotrust.svg","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/svg/geotrust.svg HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4637\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b272ec4ac3ff24e74b5e456ad44e4063","sha1":"51e2a2b8bade691efe0498034609641cbfbf802c","sha256":"334ec480419f017503d5cb197365971386ec1e5ac41ba9cea565ededba089551","sha512":"16546012c24c2cd4cbeb4ea37097be6058aba4ae07ed1996af56aa55e82490aca3d83e162f4e10e77a0e884593616b95767820e5b80d44829671f59075dd9b15","ssdeep":"96:CXQSfLhr5oxQnGnjz+KIoDHBofrX6s8r02560PSPVSzFFo2Z2:WQAYxjn+zkhofjF8wG6xB2Z2","tlshash":"c7a1b8846338a1fcb9e80a6c8f393ec73f70a4da5e718190a3026d197907fb86854e74","first_seen":"2025-10-19T08:21:15.486237Z","last_seen":"2026-07-27T11:49:48.64001Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":931,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/usdc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/usdc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4053\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e0d33bae023b5bb2ac5411c553c10f3a\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E70E5FBD\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mcgEZd9XjS0c%2FZtueN4ZhfdAIgrckAV8%2B9oUJlmc2c319AH6RQlNbuCo8QJIuMqM%2BYT%2BnwJSLA2m7Rq8HFw6ek5L5xEpm83PrJrWZ0uyYqXQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996b854120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4053,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"e0d33bae023b5bb2ac5411c553c10f3a","sha1":"fa0c6c99d3705614738ce8565db276ac81ae9198","sha256":"7dec405dab8530c99e331eefd927c8e8935a9b83af187a512fda4d34244bd240","sha512":"f520191c036809229356ddafaa32e83221bd938355ede756229d1c01cfeec41cfacf18bc3ad9cc2cd37dbd97316c4f0cd5cdc8d79e1ae5d6ca055de09f385e45","ssdeep":"","tlshash":"1e815c31e3686cd45385450cb9668bd90d5ac1d1e42ebb3c27af6c3ac5dd64c468f3c1","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.072096Z","times_seen":2574,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/atom.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/atom.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5121\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"cd3c3266a90cc0a5fa32dfe870a68e51\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E8F8978A\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdTIaS1KgetW3x9r1q1yUz1NR4ID8bGzLyjX%2FjKjrVMsqjda0Iq5iNkwX8ZYjUUh0XWd0ciM7AqCkpfqCN%2Fh1Wf40vhfBaxNwAyiN5IjgkeH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996f8e6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":5121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"cd3c3266a90cc0a5fa32dfe870a68e51","sha1":"f20bb4341658246d87b039460be7b07b5d169844","sha256":"5dcf565622e076a4b4c56765e1c7fbde13167c85be4a7a6a334fa82396f5de6d","sha512":"68d96d2673fd7e03eb2841fab0e0cf8b7b08c533eb9ef86fe47eacb070cbb7e6b68fd16b7d59fac12286d15c02f41a602578b4c8fc750adb1d9d20672e69d376","ssdeep":"96:hqSxnEWbJs3dA0P9Pfi4vlnbvHYAGIsoD8ONx8wiOzr:oS1EWbgK4Pq4vuhIs8bN+wiS","tlshash":"d1b18eab504fbda8141952e75fe939b4d189ec3c013187c815ebb7c29d7212cd08d316","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.075751Z","times_seen":2380,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/trx.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/trx.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2676\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2517df9c7f726aa26194a0fac59c956f\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E9264922\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XeVVPzSuwwLcmD1S8fFICHf%2BtikNcQQe4AE5jBW%2BgX1Awp%2F9veqCcHprhrTeGOmSvMej3HvVqHGOsGgS2OvmVZzecGUcVWvCF3zO93MHTXP8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996f8ef120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"2517df9c7f726aa26194a0fac59c956f","sha1":"3ef3e1651d128aeea0bab65c00da3ca657e5a223","sha256":"0c6753dab1e83e20861e3959d1c9c00cc63a192c8731ddc44fd4fe9acc78c7ce","sha512":"7c981998eb5ad2d8e1956209936f4dd0bfb183cfcab51f5831a4e02f408960b775a078223dc0dfbc3511c84ef5aa3da3dfba1593dccb0116b9a130b1e29757b1","ssdeep":"","tlshash":"d0512b97fe90e465d3026244d41b16a55854eb9c65ccf118349ddfcd6af48d60181c98","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.104968Z","times_seen":2382,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/svg/symantec.svg","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/svg/symantec.svg HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7919\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7919,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1708ca1250a4daa13df087f0bf6ee0a","sha1":"f5a8797f0251d074530f22eee5ca00cce73cc958","sha256":"13a8282cad0bd0de8536aad65d3a5e3b37aaf6ca55011f1799c5f12e9c8dcfc7","sha512":"5381093b7d8b1ae2515f07bc293f04689e548427f3100464999665f864f116861d26d57ff67ce949d535bd383b7731abbffa804fa8dbb4b03e7c947d5179a01a","ssdeep":"192:WQAMBlVmCTjwX68781wDAprnkeRBzPRrwBRBqbxH:WQAMpmCnwZDEn3RHGRBqbxH","tlshash":"3df1bb86333cf3d8e7961d994d3a2dd33f9ee9d06b31a054d3022e23254f5a6b4a4e50","first_seen":"2025-10-19T08:21:15.62211Z","last_seen":"2026-07-27T11:49:48.647725Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":932,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/png/pmusd.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/png/pmusd.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 4829\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4829,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 49, 8-bit colormap, non-interlaced","md5":"e54da6f75b963daf3946fe1c03dbf07a","sha1":"67aafeea8d05cf9b206e373a85402a2fec76dbb2","sha256":"dcd8ef19791fb9c736d09c698da18e6ff1bf1c444a8e284dc1e11f82bcdb9bb5","sha512":"32bd1a5b29029d23586de6bd535298e5831c0d41d93f71aad1e52c235a4a90b3d4b2d13bd1ab32f3b7da48e6d15b6b3dbe9c51bbc580140eef329b0e928bb33b","ssdeep":"96:HQ70xvL5hSfh8nEVsQpHW98L2EMnoB8OXtHhn00BVeFYGt:H9r9E5p3dsoKOXRZGF7","tlshash":"eda14c5efe09b9c1a54c85c35ce6702215ca0c56b4c77092e5f6f49fc1701ec1f0a693","first_seen":"2025-10-28T12:14:45.907172Z","last_seen":"2026-07-27T11:49:48.618379Z","times_seen":12,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":786,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cec8679/369.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:58.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/cec8679/369.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 302\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\netag: \"68fb2936-12e\"\r\nlast-modified: Fri, 24 Oct 2025 07:22:30 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-27T13:55:57+00:00\r\nx-node: m9p-up-gc70\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":457,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (457), with no line terminators","md5":"30b7eba39081c6885acb03c7bfc3816a","sha1":"a8464724eb1178df971681577d9849a7f149bb69","sha256":"9b0b5720603f84895b7cb5aa9e1698d5130c1100bbc91b1e1b7499d39607b214","sha512":"f4d676cbf8e509a481de019a93e14d5c87b2ec064b31727d2cd45996f93d03f9f63931a355c000f7bfacba41c73c840622561b8075cdcaf58816cbd89eb0113d","ssdeep":"","tlshash":"3ff0dc24b0c0784559a708dc527f2a0b127da1bb8a4f12a0ed25a9f02b223edc0b6cc6","first_seen":"2025-10-21T11:41:49.879189Z","last_seen":"2025-12-08T11:04:46.44616Z","times_seen":3081,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:14:07.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metagrowthtradefx.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 852\r\nOrigin: https://metagrowthtradefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://metagrowthtradefx.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 28 Oct 2025 12:14:07 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-07-27T12:14:36.814321Z","times_seen":581870,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/ftm.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/ftm.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 12302\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"509847477d5e53d177db97e1dc3b9943\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EA80C06E\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCRyL6YA9fZ46dcq7H8EC1xazRKk%2B4btwZfofR9ebtCMHta2PrOdnBDeR5K8X0ziUUdzDg%2BHFL2wao4Mv4yZuW4kbZ8g%2BmXBgqxTsj%2Bq17WO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59971951120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":12302,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"509847477d5e53d177db97e1dc3b9943","sha1":"d152864ffb597420152b3a47057b6816975846f8","sha256":"0e62f7e875ccbb07025cbb6bba8344ea0413c5e3c067365b0add4a25783136d5","sha512":"a5b44e9d0380b3453a2d73b58da34065db0dec76df870263fac44382a88125916ed37fb06054e2dcfc61b5ce4f4fd3eb82548c861acb4a9088460d2ab7ed46a4","ssdeep":"192:uQwGYHPdGtlhfalx1lUmxVqLx3ML0ksggsc608rNyNFNY4:uQw5GtbClCPL+40HA8uXd","tlshash":"a2428e4e7394596cc83d2f331ea80ba1bb343e106542aaaff35c514e4f6d0b598d45d0","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.145553Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cec8679/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:58.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/cec8679/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3378\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68fb2936-d32\"\r\nlast-modified: Fri, 24 Oct 2025 07:22:30 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-27T13:56:24+00:00\r\nx-node: m9p-up-gc59\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10510,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10483), with no line terminators","md5":"eb3236571789232e6368339efeb0d350","sha1":"0ef86b18b289800a26776baddcf82caa56cd252d","sha256":"d8c043bfb4812ace484e6199dfe3549aa0548aab66e3adba57a8341c5659015b","sha512":"c1ef24b276ef14b0cd6b647e38a4e9a6ad09629751195da969515d9f6d53c15790aefd6a16d52230b68d97a6776eb479d191bf799872b4d761df1ede92c28393","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLeRJK:C7H7ObdFkOIphZ8wjFC7K","tlshash":"8822d71ee7017f360fa613c3744e7b5376a4809592646cb5d88c826953b9bca721778c","first_seen":"2025-10-07T20:51:00.005061Z","last_seen":"2025-12-18T13:26:00.242365Z","times_seen":1650,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/GmOzih6I1zs","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:55.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /embed/GmOzih6I1zs HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy-report-only: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncontent-security-policy: require-trusted-types-for 'script'\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: YSC=EWtTqqqA4SY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CLH0toW32-u04gEQx_2Zme_GkAMYx_2Zme_GkAM%3D; Domain=youtube.com; Expires=Sun, 26-Apr-2026 12:13:55 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Wed, 01-Feb-2023 12:13:55 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=VmS82aMwQ6c; Domain=.youtube.com; Expires=Sun, 26-Apr-2026 12:13:55 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiA4; Domain=.youtube.com; Expires=Sun, 26-Apr-2026 12:13:55 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122692,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52328)","md5":"4db91504da10809313b4b024a75354a6","sha1":"f1d0d5081cffe9fef1363bcd98aa830ec9cd6bcf","sha256":"caac7b2fe318c46bcb8420e9e5186d429c89bab2ac5e395215f848dadfbb7398","sha512":"1f6d831cbd88f56673c71f39bbd2d69886c0005cf8e67dc38f8d0fdd75b68dc5e58959931e22aa60d1042b22328977a00d9cbf47394d0b88286295895a13354c","ssdeep":"1536:OkiKlUOfg0gccyIbv/ZuIQhi7HDg3GtKlkxd1vxZ79kxKzUfv0Y:yfy13i7jg3G4kJxZJEECvJ","tlshash":"5ec3f8240828a832c893d457edb9ff3e9cf805764bc99569bdbac75c01ec6520eaf413","first_seen":"2025-10-28T12:14:45.909932Z","last_seen":"2025-10-28T12:14:45.909932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":83,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/knc.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/knc.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2465\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f01fcf2beba3211117d32c92a574b476\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5F0413C7D\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmpVyVY%2FGc%2B4FZnV7ORV1Sj9%2FGaPAvTESG%2Fvoch893bmxN4kuw44oy4gnPc%2FqKDr2YVc1kj7yUXigDv%2Bxseziynl%2BlqEgD4BULNX83%2B34MBX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997bab2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f01fcf2beba3211117d32c92a574b476","sha1":"2df48b330f6b7d178b2c059dab959ea00fcff9b5","sha256":"bce50609ff23dc297ae1617c5127cf23fdf713e6d44e903eb4f0a1a7ffd4c3d8","sha512":"71b4e3f812e7e4bc1f05123c8a25a37cb7635632f4ffd08acd4db8b62557de3d72a144cc343f91b618c72f4f2ee374992fe24c63df25e71501ae3d4a211b6702","ssdeep":"","tlshash":"7a5108420764e6b490e949f6d2ea11a8ef96ac3ea97a5f0612823671a6fe054144cd24","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.076877Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_lib.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:56.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/js/bundles/bundle_lib.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\netag: \"56406-5f8ae19e52980-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 17:18:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-coin-header: davinci\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 7\r\nx-robots-tag: all\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QirxyNTeTNKgihhasjbxjKzbqvWnMZJgzpA%2BNoWiS4OMWf41L1tx9CHA10SRF2dIdepdOvs5fRgl1XzpYf8NP2kRVuxA36n%2Fd%2FnLzli9Nbia\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997bad6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353286,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"9a781036bff64b8fdb1f64d73a110c40","sha1":"5b9f645eea9d940f98aefe62a2ebb215a1b1b419","sha256":"d5a4117a99579fbd511260552f0d103d3c3c9e983889d853ab245d95dd9ca7e3","sha512":"991c5ff93e85e56777fab81a4f68c5b1a89da86e277b84d9d5f4c0fa032fa646cec282fded57a00f7636fcfa2eda10fd8c83faa89b98963b2d1996434687512c","ssdeep":"6144:9RzEOQ0+iea98Hr9STVvCgfkvGnxjR9aSrp7wwL0kYlP:cOz+iiSTVv7oGjw2eBlP","tlshash":"53741a8d72a2707182bb307a456f410fb13a946f6409c8a4f56cc5e82fb8d6c61b7f79","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-07-05T18:53:23.091465Z","times_seen":2759,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/css/prel.min.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/css/prel.min.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 3622\r\nConnection: keep-alive\r\nLast-Modified: Mon, 24 May 2021 05:26:42 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3622), with no line terminators","md5":"a4d8833a5528fd5a003e80deee0e3625","sha1":"34b11ce5be32e6a87c53d48734476968cbd625b6","sha256":"25f2eca9848e9c7ea64e13abe10ff89ff1b9914cbe49b95579f53ae0ae7fb886","sha512":"b52429c073eff65a3edb540a1776e29dc8acc7fde0424d0d977314b521aa1343b3783983a57e5083fd4d8343f8fa009fb22d33c5b415031f655e0ca5af69ac8e","ssdeep":"","tlshash":"9e71efbfd1e0630a841b8d91ffc5731a99a4e9f339635bff60686a05c3836d12273586","first_seen":"2025-10-28T12:14:45.911739Z","last_seen":"2026-07-27T11:49:48.59161Z","times_seen":12,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":163,"dns":1,"connect":93,"send":0,"wait":100,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 28 Oct 2025 12:13:54 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76898,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1782)","md5":"eef2b2b748135179c61f70910d745802","sha1":"5cde2acf310c4be643a88db9073456a255b092f9","sha256":"e468ad159728bcf94178fab4015956f124995bba98b4f74e777209706d7b3922","sha512":"805c2c0f758f9b5fd394ee0ab4f85acabf0a81946f458ceb54498319dcf65d77b9a23756dec6e19a4b8dfb93402ace335e2eb8e959eff697d2e3947ceec07220","ssdeep":"1536:XO5ccPARD+GzNeU3czwPOKJk0zRYHXVqG9fx63xyM6CdiuwNWk1:X6YzWwWKJ3YHlEFndin1","tlshash":"6173c8ccb6a674658263f5b5413f000fb23f5899e8484dacb288d8f1aeb5949413bf7d","first_seen":"2025-10-28T12:14:45.865963Z","last_seen":"2025-10-28T12:59:01.082568Z","times_seen":7,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":78,"connect":29,"send":0,"wait":39,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/png/eth.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/png/eth.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 80997\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2706 x 602, 8-bit/color RGBA, non-interlaced","md5":"c9e51f423ecc80572ec39e5645ab56dc","sha1":"550ba71d705092586c57a561665409b2d61a5eb3","sha256":"dea9ab35d999193d82de44634eb726ae449cce778ec9c6239bf819a48838da82","sha512":"a4c636a7ad0fd56f1aebde5ce6b2f09b7a1fb1769bedc94627b47c8c07b0650f6b919a8643fbd38653dd403e7896aef020004f7c74fb5f87308afd58df549652","ssdeep":"1536:nc4ovGoMQ8NaNjQjlEMyNkSudDQZJb1JLNpEt:nc4ovGoMQ8atqDUNudDQZhvLNO","tlshash":"a783be80cb9216377b18a949ba55a0638e903d7b3502dd4719cbb85f3b87f716c30dba","first_seen":"2025-10-28T12:14:45.912633Z","last_seen":"2026-07-27T11:49:48.573444Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":925,"dns":0,"connect":0,"send":0,"wait":102,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/highcharts/highcharts.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/highcharts/highcharts.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 229576\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229576,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26049)","md5":"7dc936b4f5db428f2e7f273d5a78dfa5","sha1":"87dfa4ef47837b27f0e52fdce3a4a86a04f04bc2","sha256":"0075ff303b14d070e4a4bb493544498b078a489f0d4d9cde3d9207c8f77643b1","sha512":"2eb300abf31aed3a18d6f15ad05aa1e7d6ca41154ac33934a81b1838ace0f679dd3377d2d7b29f5fc265726cf9789571ed7423c2369762e16b638f3121b08691","ssdeep":"3072:FOaxFL7YAcK93YnGNYkvQR0yDgxNNSxDB3TR5skgzbr7:8a/4AcZsBvQbDUNNahWr","tlshash":"25243bc9f2513623c66733a9542f170f1133a46aa688892cbdb9c4e75d2984c367ff39","first_seen":"2025-10-28T12:14:45.845936Z","last_seen":"2026-07-27T11:49:48.652799Z","times_seen":18,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":520,"dns":0,"connect":0,"send":0,"wait":100,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/mkr.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/mkr.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2120\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"580c624b4882eaf071098172789312f5\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EDA0657E\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeJmMVy6h5UjTzMbHvzwbCVzyAb5q417qdO5VTT8OOO17zpWbYMEULS7oV1sK4P1zHSSbGEc%2Bskh4cQE2OUOwRDXBZLu0%2FwADoNOkoA8jMvK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59977a1a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"580c624b4882eaf071098172789312f5","sha1":"bebc82220513a835d5116cff20b92359f8addab2","sha256":"4d2f727839969d4973ad8817868562c66e576d6dff36db2f8961a2e32f5c9669","sha512":"2e19f729996e22bf3135ccf9689f094be222f515347c32a34b1b931e588ec364ed292928fca7d8c6015d9f3d212ddab80711ca556e832c14e775afc772874579","ssdeep":"","tlshash":"a141c86d8532b544bf5e123ec61fbca159c9f2aa7e12f403606090dba78cd37b04d81e","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.199545Z","times_seen":2374,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:59.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:59 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68e66124-1396\"\r\nexpires: Sun, 09 Nov 2025 14:05:18 GMT\r\nlast-modified: Wed, 08 Oct 2025 13:03:32 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-10T14:05:18+00:00\r\nx-node: m9p-up-gc29\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-26T18:12:33.203176Z","times_seen":16634,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/template.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/template.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 7002\r\nConnection: keep-alive\r\nLast-Modified: Mon, 24 May 2021 05:29:42 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7002,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"4a5df9341c0f2ed30d7f9b320d33e6f4","sha1":"682fc6142620e0c98959d8fa1697a0b107253e42","sha256":"78eee6c6470610a3f08e49ee59eedad01a74bf08bf2a596f127e81bfa3ab496a","sha512":"418db63d678c698b6821e8ebf5cc2406560fadbb58ad103074ef6a19593e549930a425751a146cee18c4cc3692caf2fce24d58813fe53efc2b43ed7ef52475e7","ssdeep":"192:3VC1CW1CazqJQAR4aKNQtb9HJl9DZHoke:lCrFKiQBB0","tlshash":"4ae10c4db5fa208261b7707a4abf46543971602b5289de017c8f6ac01fd813cb7b6fad","first_seen":"2025-10-28T12:14:45.91828Z","last_seen":"2026-07-27T11:49:48.673845Z","times_seen":12,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":528,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/okb.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/okb.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 171988\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2e32c80479d4bed505019c14eacaf480\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EE1B6CD3\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 2\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHal91MEJPw7aqkg6kcxfZwKxu54DGRvfkdMlLZ4uZOoxKDSRJ9GKB89vf%2BwxRIUMzCk2gHO0%2F5arP2%2B0CsTo7%2FivBQI76jjJFX1P2Gixavm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59978a4a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":171988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4268 x 4268, 8-bit/color RGBA, non-interlaced","md5":"2e32c80479d4bed505019c14eacaf480","sha1":"f4a29b47546baa05e9a031c2e64de6a225439345","sha256":"8ec39e3f0e4f8300ee7105898c4da61f180a5ffedd1f90d2d2f2603a15b702c1","sha512":"deebc6eba12397d0c0ac7fb7dea6a3a71a29f3a61b931f3159f2c4b29e6190396ac74fb7542bde13546678cc12624be9bb252c910bb8a4e07255727cf0bad5ce","ssdeep":"3072:JQJXaNlWqTu+pU5JFi2d31Fb+7yYqBeMMaIs71S8yaSDr:CwEaut5Jg61lYqBo/s713yaS3","tlshash":"28f36cbdcc56cfded816853088b90f183ebc339c4359230e57f9a8766eea298b147591","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.073982Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/?a=account","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /?a=account HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:57 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.6.40\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Parsley.js","description":"Javascript forms validation script.","website":"https://parsleyjs.org","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Highcharts","description":"Highcharts is a charting library written in pure JavaScript, for adding interactive charts to a website or web application. Highcharts meets accessibility standards and works with Python, Angular, React, iOS, Android, and more.","website":"https://www.highcharts.com","common_platform_enumeration":"","icon":"Highcharts.svg","categories":["JavaScript graphics"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34536,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (365)","md5":"0626da94aea223f62c28c5c059f9d4c3","sha1":"e3ae5e5f093eedd40cdc9a2dd67fc85f8c2d3742","sha256":"5a69e4c9abef27753c4e0cb1d0ea3ec89dbc7739276a2544fef67a346ea5f093","sha512":"78f6956c4734cf5245f186940b5c1ebeab1d5f3ab73035bf5a550e555a6e403bc6bc38a9f6fab88d3b1a44f0f7093b9d118d50c21336c65af96a895526ac8062","ssdeep":"768:u3XFgV9am9LcBnb3X8wQgLoGW5EQYYaPB+wl:ogbam2Zb3X8wQgLoGW5DYYaEwl","tlshash":"6df2b432a499143b424320e4b3706b2ab1c1db13d667d99437fd63e52fd0e92da2763c","first_seen":"2025-10-28T12:14:45.927411Z","last_seen":"2025-10-28T12:14:45.927411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 09:58:34 GMT\r\nexpires: Tue, 27 Oct 2026 09:58:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 94523\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-27T12:15:03.422822Z","times_seen":54702,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/css/plugins/animate.css","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/css/plugins/animate.css HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/styles/assets/css/style.css\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 56369\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56218)","md5":"1642b3208d8a202653bed91bd8f77392","sha1":"8ab086a6a3d07328fad47f16b3305806ca22d5f4","sha256":"3db5722c797d4acfeca70bb10bf202cfc1321f017dca1f8a8a2bd4ea7be7cb27","sha512":"5d18db6b651c1a22fbae14de4f98505497ce0d417a32df37f34811b1c18625b2f9df74367877a6b8c349d8246064f5a3b05d68527171cd354e1a9034d6584803","ssdeep":"768:kkZbIJIKrFIxI/POwm1KA9kGDj3Cyg5lrceb0qTIsFs1:kkZOPOwm1KA9kGDj3Cyg5lrceb0qTo","tlshash":"f94319af5851229991634ea6c3dc4e68873dc67314621cde73826c4b8f87f9e33da607","first_seen":"2023-04-11T19:30:08Z","last_seen":"2026-07-27T11:49:48.640656Z","times_seen":806,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":104,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/25f1a420/player_ias.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:55.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /s/player/25f1a420/player_ias.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/GmOzih6I1zs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 696624\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Oct 2025 08:24:30 GMT\r\nexpires: Tue, 27 Oct 2026 08:24:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 23 Oct 2025 04:20:06 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 100165\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2649790,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (940)","md5":"665997769b8cf0afa9fd40a9e9035d6a","sha1":"7d5b584a83fee8528623625293533d08c05a1be1","sha256":"364b5bc4fbdd69b19861f7af48dd5c498876b7635ba144ec3af011368c1baa20","sha512":"83b61a8d4b93a4f4675f1d891138a7730f2498971a82b8d194d831fcb5c8716ff57505d3d752d907035d67e9e2c6dea5914b14ced456159ced334d36b3f1e401","ssdeep":"12288:Opz3I2GKPDYs0+qBH93lSF8I1Cc8iOIhzBEvAQEq28U:Opz3I2GK7/qBH5lSF8I1p8ifhNEowU","tlshash":"9b257dcc71e3b45022a7f4b8a03f510ab57f2848585c8b2cf69ad9d55d7091a923ffb8","first_seen":"2025-10-23T13:13:47.968412Z","last_seen":"2025-10-28T15:50:34.152379Z","times_seen":579,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/ht.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/ht.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2935\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d303dbabf27a6f78eb7146a3fcc562e5\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EAB09CD0\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYOL7%2FqtXEhVMq7gJWXeEcINWgAhHOwpVaLFP2KN3u0%2Big0HGOhd%2Bb7ofgdTg1Sm792LREoKSx4UQK4OKmQVzYQoY2lzkn3fnrh9Jt0XG2zH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997195b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"d303dbabf27a6f78eb7146a3fcc562e5","sha1":"dd73e2de21a347bfbf0ac8e0d81afd3499e34c15","sha256":"2562132a0bf0814a83c71612cfef97f9fbd1e52e884dce29279f4fd251776e6b","sha512":"7b94446ebd7c9def7b9383a0b95a4f499816b7a852722823666c226887d59c32ce9493bc47d77676be863987b0de68b29e29fde70652993b03c96f16b304e50e","ssdeep":"","tlshash":"94516d64a686624af877963b6ccfa10b9618ff061585cc1b3fb3a0f3314e2b36116198","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.040881Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/GmOzih6I1zs","date":"2025-10-28T12:13:58.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 1166\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 28 Oct 2025 12:13:58 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"97b7d303d01279333c511f75a6b8ba3b","sha1":"470fc351590f79be04a2a97cdc11d2a15ffd0c1e","sha256":"01758ee27783469eb0dc090745387886de8d70331126b9cab65a3d7ca813b0ad","sha512":"18f6a8f712e8bcd6ec030d893441a9c9515888b004a25270ccd14ad40e1b99e099583d5640a7446c71444d67d50090d6c10d5cbe1f0ddfe6d30a3454a6dccebf","ssdeep":"","tlshash":"66b01251c3e9bdc05274a9b6de217d931956650568385d95449655cd1200df0d450c75","first_seen":"2025-10-28T12:14:45.930445Z","last_seen":"2025-10-28T12:14:45.930445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/link.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/link.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 3448\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f91b3362730af1f73eca346a14fe3714\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E8B8B52C\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAg7sXUjoJl9CWkoRB1gJBhLbrxEpWj9V%2F46scpLQ5RYzlDBTdMnzvskW8Uti2r6cHWJ184lSVR0ZBwl1pBQ9WAImh7iTKSvzBHggIKhl8%2BJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996e8d0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f91b3362730af1f73eca346a14fe3714","sha1":"35120110067c8c51e175c582d8ba7e559d4f1c40","sha256":"2adedf844eba443d690b7e350af68800e3ab99eb80bea82b00a1fde204670357","sha512":"c805d130032d3215aa96c326d877aa3928ef4b610aa95df4574bb2c0fb77ff16f3a726b04c0631f3161ff3cb6839500e56bfeaabbd7f06d8f518ea8926cc4de7","ssdeep":"","tlshash":"f8616db77034513ce0306731b9af34365f939a702ddac6164976b45c14a6387c0ab94f","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.198267Z","times_seen":2438,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-28T12:13:52.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.6.40\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0\nPHPSESSID=r0guopfg2e9526ijppkv26qr87; path=/; domain=metagrowthtradefx.com; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Highcharts","description":"Highcharts is a charting library written in pure JavaScript, for adding interactive charts to a website or web application. Highcharts meets accessibility standards and works with Python, Angular, React, iOS, Android, and more.","website":"https://www.highcharts.com","common_platform_enumeration":"","icon":"Highcharts.svg","categories":["JavaScript graphics"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Parsley.js","description":"Javascript forms validation script.","website":"https://parsleyjs.org","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34536,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (365)","md5":"0626da94aea223f62c28c5c059f9d4c3","sha1":"e3ae5e5f093eedd40cdc9a2dd67fc85f8c2d3742","sha256":"5a69e4c9abef27753c4e0cb1d0ea3ec89dbc7739276a2544fef67a346ea5f093","sha512":"78f6956c4734cf5245f186940b5c1ebeab1d5f3ab73035bf5a550e555a6e403bc6bc38a9f6fab88d3b1a44f0f7093b9d118d50c21336c65af96a895526ac8062","ssdeep":"768:u3XFgV9am9LcBnb3X8wQgLoGW5EQYYaPB+wl:ogbam2Zb3X8wQgLoGW5DYYaEwl","tlshash":"6df2b432a499143b424320e4b3706b2ab1c1db13d667d99437fd63e52fd0e92da2763c","first_seen":"2025-10-28T12:14:45.927411Z","last_seen":"2025-10-28T12:14:45.927411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1826,"timings":{"blocked":337,"dns":132,"connect":98,"send":0,"wait":1151,"receive":1,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/images/svg/mcafee.svg","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/images/svg/mcafee.svg HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 11537\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11537,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee9bf521c97e9477d2f241de80632d43","sha1":"54df1faec7c6eb95807d8b28a515680d5b5fbdca","sha256":"978ede571c565586a46a8cd7592de219138de305d5fec28d6861ab3f8173a3cb","sha512":"ff652224d55d58d1d8ba27122b82488852cefe6c187b0812bbc107ba66d39010a938237e7383892ad4b3038d1481b1d65ec38ca0feb18962ce8aff39fafb6d40","ssdeep":"192:WQAOQ/pMhSUdhpi66l6qhNBW/GJNHFBJ0Y7oKvqZ:WQAbOzdhM6qztLTJ0Y79SZ","tlshash":"003271cf033986d435a935f08c3d36c73fb6a8d9c4b5e2a4934aed129087a3a3639d51","first_seen":"2025-10-19T08:21:15.554508Z","last_seen":"2026-07-27T11:49:48.656931Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":1140,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/xlm.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/xlm.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 72878\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"ac107bc91b9301b1b9973a60fcb8e63d\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5E939F52D\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BS9JF6Tk9pwmQP%2FBwqPI4OBfyba2mHNaB6%2BpsViU3HveJbVxKy%2BjXxUO1eW4QwVRF1S2oKTMRfo2FnpOAdUKsjc1PFNqG%2B8bN16bHk4CFUEu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5996f8ff120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]}],"data":{"size":72878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2364 x 2001, 8-bit/color RGBA, non-interlaced","md5":"ac107bc91b9301b1b9973a60fcb8e63d","sha1":"e3cb1e33dd0180e8b33e2e5eb15ec9e8605c88cc","sha256":"89b764e3e7e16df6f0da0a3b96ab5f889890fe076fb4e749615555b30ce46e1f","sha512":"936ebeced78e710eaa3ba0ab99e11422a00378924090700776bc676c47df38ed0bd2b18883e2324526263655dd6618efa4de0480681499aaa81596db51645356","ssdeep":"1536:gYKWXz9amMZwFMr/GjoFj4Armtn+8n0bfUxQepYE:gYKM9amZarY8jE6bUEE","tlshash":"2663d05c942b7cc9c674a176617e8ca13c56c2f7b67183da60b24f634ba2bc04f67724","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.161708Z","times_seen":2395,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/mana.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/mana.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4979\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"924a8c5bf9224dc8ba5f967b28bfdec3\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EAA560B7\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MAcEiJJBAAjFPEuYs2%2FyYX19Gth2G6wlzf1Hu%2BvQM0BqxyOACGDhB4vpK%2FkIUEHlBOI78oaLx%2BRd0zTOP6dTx0aYMBkQ77UPj%2FfTz4fnIFjk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997195c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"924a8c5bf9224dc8ba5f967b28bfdec3","sha1":"f6cc54e97a936dcf0adb8419a51ce88422184a91","sha256":"67cbed15df535147fc45d100db51d70ead340183dd6922278d5fecbecbdf9659","sha512":"7f69553f679f3abef8744a74348dd244bf41a9663040e5c165424e98a78d4f46917f989b3a60ea30735ed254c8ea1e1efdba7973c4d01377dade15c8112f46c4","ssdeep":"96:hpWwjwU/Ly6HycTIL65goeMpQEkY6BldxnY3C5/s/6OEQeCXdMWE3kCmH8Xraqxp:bjtHPTIL6ZeXTh6y5/OyCVNCRr1/","tlshash":"c4a1aee248cbf765918efd954557307bb2bc0b8f4d43b62ed215d6fc2ea823a4c0a412","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.044181Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1761572979","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1761572979 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 28 Oct 2025 12:13:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 338779\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68fb2936-52b5b\"\r\nlast-modified: Fri, 24 Oct 2025 07:22:30 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-10-27T13:55:57+00:00\r\nx-node: m9p-up-gc58\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1554863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"83afeb18ae6c4e5cf822327f03a2ba3d","sha1":"fadafea8df23accc5b89f4b13c416cd0ffd69a9f","sha256":"23ceac5cd88b4708c68f61f28e982d541bcb683ab8abe267fec4a28a5a6cf47c","sha512":"48f4c8600b483563eff994083980cc432bf21bd5a98300c9a3010ad6844bdf49e07e1d28b7e67e057f6ea03febbe73601e45a0ece0698011fab2218c0131466a","ssdeep":"24576:Jh9IJZdXDH8Xz/nWBkQg+f0zcBPS/C8RbHmRqgThfUCfxxuji6QciS9G:JTIg/8kQg+faMPvubHmWCfxxuji6QcNG","tlshash":"76254bc4b1d1f4a502d355e6643f2009b23a285e7809b064fbbccdcbea5659e6273f39","first_seen":"2025-10-27T13:48:58.233288Z","last_seen":"2025-11-10T13:49:40.755447Z","times_seen":764,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/nexo.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/nexo.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2434\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"9269e850270013f52141610a69f29b52\"\r\nlast-modified: Mon, 24 Apr 2023 15:41:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EE5F39B2\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wpu90uIBjgLyia8HNS1Ri1jUow%2Bl9gVWF3yuQDnlgx%2FMqxJ%2BxoaO0xyehxJ6js%2FiHCBQ1shMxCMHJMSCfCRCMBVTNJhv6kZO37DQE8frXI%2F3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59978a47120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"9269e850270013f52141610a69f29b52","sha1":"3f21b1645a971abe8728622546922428ae97aedf","sha256":"c974c1a057b86acebbcd2420bdf47c6810cf4364336e1c52a1febf1b24b2dbc9","sha512":"caeb0a42a5afa22cfd613da87cedde8920f8516e34ec4f6eac32bc5c4733ba59026d948620e3b10e84e291cffde2b62c217580826b594d7404eb51a4ec147f3b","ssdeep":"","tlshash":"1e415f059d703ce945c46d5e058f974c6c6f680b7f88e6ad984ef47d46d21f8c352d11","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.094623Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251026","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:57.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251026 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 28 Oct 2025 12:13:57 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-dMlaDSvX-ulklZ6ThbFKmA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw15BiEOLhaH3edIJN4MSLpm9MSkpJ-YXxJUWJecU5iSWpxalFZalF8UYGRqaGBkZmegYW8QUGACIAEtY\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=29.SE=CfHANNl-DG2RdC-HkxT87a-niT2yBiGo4Q9QXZIIo3f0fctsRiRwqAoOokLJTxgxpfvC4epNNJ8DjGqEfyzrAMiHdNKXjc9jgG11SVBjhvZBUepceAKwnjw3C4FDjJ-dOvhJ-GdN99FI0p5KVwpfJA3kJHODcQqfwBwpCbohZFVZag52aXkYNIoseVQAuNOzFMt5xV4bIRtgDgehgyoL1CBeHRU2Qwso9HhLFHBGfKOmmWOou3nV7Nu0D1uymWQ; expires=Sat, 28-Nov-2026 04:32:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T12:15:30.756688Z","times_seen":17562751,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/bulkbit.png","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /bulkbit.png HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 29681\r\nConnection: keep-alive\r\nLast-Modified: Wed, 29 Jan 2025 14:28:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1926 x 459, 8-bit/color RGBA, non-interlaced","md5":"69dbeda4cea1cfd2770b093a7ab3694c","sha1":"9ecca0ce91e3f3a962001289fe8629d305570b2d","sha256":"91a28503eddaa42af1981a205b8edab34d7f99b754ab27e19ccf2cc3bc6cc3e5","sha512":"ab99b5591bb2833fdfa1b9edb2c32ceeae20f3557903cfdaa8080cbb5b3071a5eaf8109eae707e60331aba4b03c25b090292655f94450b364d7471206333b729","ssdeep":"768:s4F+GheVS7DC0tHjzvhsjGD1qxPfc7syqU6yFzZ:BF+GhhDC0tn4GD12Pfc7szU6yj","tlshash":"20d2e1c6a02c58efcc4e527796b15fa437a5106eb04e572b8ef8409f6eeed30118b258","first_seen":"2025-10-28T12:14:45.935252Z","last_seen":"2025-10-28T12:14:45.935252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":801,"dns":0,"connect":0,"send":0,"wait":100,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/parsley.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/parsley.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 57494\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57494,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3491)","md5":"62842dd9e1be95d8a46351ec1b6231c2","sha1":"c562933aef7b5352525ba1708b8f728c3c06e94f","sha256":"391898508a9512feaebdaa0d43fc676003dad0494eda78c687e704edb7e3277e","sha512":"d89ad3ac67bb31c49df25319c9c0766a21c8feac013872cb22fa267be70c25a752a47142017dda90abc969fb13691c7c70f87b16343c0d530a41c1af968d0384","ssdeep":"768:qX3dfyqiUXVTZ3R+a0WsQ0lgF6YClMdHoxaXA+Xni1+OY4xS8KM6fYicvI9dShJa:qp3R+a0WsQ0lKdiu8KM6fZ0J2Tz","tlshash":"e043e74a779151158eab20f92c6f71077272c725640c00d8e5adc2d2e9b9ea6d3bbf3c","first_seen":"2025-10-28T12:14:45.936047Z","last_seen":"2026-07-27T11:49:48.581998Z","times_seen":18,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":431,"dns":0,"connect":0,"send":0,"wait":102,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/enj.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/enj.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4164\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e103e220da9145816e6f8dce7bf37bb8\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EEE0A18B\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 1\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qPEnAcXlAQPgbkFaffo2MANHmKjg2YVedMbTW4FGwfsZfktvlbLraPFBCQiMQjvwPAhHDhCscFWum%2F9w11oXjuBWIdhInCvBDmdISzn4%2BWW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a59979a7b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"e103e220da9145816e6f8dce7bf37bb8","sha1":"dc479087af2a5d55e64b57cbe6177cc9c00b3dee","sha256":"88ea8af58cd5066f7cafc00fb64a84596b6afd42734d41d60fc978cb183d1d6d","sha512":"cefa62ed0cd560dbe277c858461d76002d71ac244e7a1bb63baeb13e3e5aeadd88c0d9941134a6ea168c35cd2d61662a048087c644cbff89f5857fe7da272485","ssdeep":"96:hZesI2vUGDQ5AT2fAHC1UIWMVOV996mNgxYo0wsULWMSr:usjUz5ATVi1UIWM8VL6mNgxYo53mr","tlshash":"e7816d1ed0570e31dade8f1b9556cf11bd8b4c8b1c39e916df50e42a636484b1be8934","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.132763Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metagrowthtradefx.com/styles/assets/js/plugins/owl.carousel.js","fqdn":"metagrowthtradefx.com","domain":"metagrowthtradefx.com","tld":"com"},"ip":{"addr":"149.56.180.37","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metagrowthtradefx.com/","date":"2025-10-28T12:13:54.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metagrowthtradefx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 16:28:19 GMT","end":"Tue, 23 Dec 2025 16:28:18 GMT"},"fingerprint":{"sha1":"25:E2:17:E8:F7:15:44:35:DF:5E:65:26:A3:D6:A0:63:2F:B5:D9:A9","sha256":"44:7E:6E:BB:67:ED:89:73:D5:9F:B0:0A:AD:BF:06:F7:F2:71:F3:FF:2B:F5:FB:D9:45:80:37:B0:E5:4E:81:6B"}}},"request":{"raw":"GET /styles/assets/js/plugins/owl.carousel.js HTTP/1.1\r\nHost: metagrowthtradefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metagrowthtradefx.com/\r\nCookie: PHPSESSID=r0guopfg2e9526ijppkv26qr87\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 28 Oct 2025 12:13:54 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 91472\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2020 16:03:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91472,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"10301aea8bfa2cd5f8385d5ca22bbd82","sha1":"e1d1f7aec0763ed3ce0ecaac83543f87f0af86f4","sha256":"2c8420cb34017f3dd63097575bc6156c880097adb5af120d7e64d4dc6a106ad7","sha512":"e881cb6a5431a172715967acb323eb8cdcda63ddd7672ef49f0ecb3398940ae0f3f5a2aca4fea5fe91e3f26942c4ff92ae23431a47550ee55be645272bdcfe1c","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOP:oUMNlPBqJTuOGQOotEhKOP","tlshash":"a79393c1f36c261b422631785eae23ce723d412ad91118af7ca8e5dc29d5468437eff9","first_seen":"2025-10-28T12:14:45.944069Z","last_seen":"2026-07-27T11:49:48.628908Z","times_seen":12,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":511,"dns":0,"connect":0,"send":0,"wait":97,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"metagrowthtradefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-109558606-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtag/js?id=UA-109558606-2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 28 Oct 2025 12:13:56 GMT\r\nexpires: Tue, 28 Oct 2025 12:13:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 109657\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313925,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"0498274b300a25f77a181b50e2a5ae44","sha1":"2cc43cceb98dc2d1c395ff763c69c022bd61d1c3","sha256":"052810ed06b9dd63664abc79d6a675ec253dde8e892da319697e071cd788c43e","sha512":"7be0be8c6b316d6c54171b0ab568cb8fbed031ead530dc250ca62b694da72982898b03a0deb2c0145319ac9afd09fbae51b89ca263917f5cad77905f33cf611c","ssdeep":"6144:gRJDX484O9Z8nP5D6GN8xKlc/UEA1gxPSF0010X:oJD6O9Z8nP5umdgx2nQ","tlshash":"856407cd73d674268393a478503f018ba17b69d2f84cc895f186d8d82e70aaa4277f7d","first_seen":"2025-10-28T11:02:25.606048Z","last_seen":"2025-10-28T12:14:45.948412Z","times_seen":3,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":423,"dns":2,"connect":10,"send":0,"wait":24,"receive":24,"ssl":474},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/img/coins/small/fil.png?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","date":"2025-10-28T12:13:55.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 03:44:00 GMT","end":"Mon, 29 Dec 2025 04:41:23 GMT"},"fingerprint":{"sha1":"57:8E:64:3D:7F:C0:33:7B:06:6C:B5:24:39:E1:1E:37:B8:4A:C5:EF","sha256":"F2:82:8C:94:55:EE:BE:83:62:80:4B:4F:E7:D8:0F:BE:7B:16:3D:CD:29:44:D9:D2:0C:04:D0:64:8B:E8:87:B0"}}},"request":{"raw":"GET /static/img/coins/small/fil.png?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 12:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2435\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"1e41e0d9dfd33f725b710bdeaa8e248b\"\r\nlast-modified: Mon, 24 Apr 2023 15:42:16 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nvia: kong/3.2.2.5-enterprise-edition\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1872A6A5EB63B0EA\r\nx-coin-header: davinci\r\nx-content-type-options: nosniff\r\nx-kong-proxy-latency: 0\r\nx-kong-upstream-latency: 0\r\nx-robots-tag: all\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8r%2FxLejhwbFzGxF1RPzcT5dmLuxiYjr9UDcq6vHYVtgoZf4uOLJ42IA%2F%2BgLTmqrCWi7WkAbqlwBsLq8qVL3BkQ100myJvf1FKLMxJvbIv5i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 995a5997398f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Kong:3.2.2.5","description":"Kong is an open-source API gateway and platform that acts as middleware between compute clients and the API-centric applications.","website":"https://konghq.com","common_platform_enumeration":"","icon":"Kong.svg","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"1e41e0d9dfd33f725b710bdeaa8e248b","sha1":"8481b3efb0f69a640f1193a4435ace8a6d47a0b9","sha256":"3e85a2de2bc6e4cb5f3f1289763fb642c6cb296b7addaf4c9d12f3274d5cc659","sha512":"a7258da1d70f2870f3b159595fc4d4a62f7d729fd337d67791dcfe2470992e61e01956f4f5f3675f761eb7c6e92b93d72ee235c2f3b72a9134f419d5c75ffdb5","ssdeep":"","tlshash":"d2410b94a38419f1530c383a4ed583d7218db6514e599ab2fd14b730f85de67335e70a","first_seen":"2023-05-03T02:14:56Z","last_seen":"2026-07-05T18:53:23.05982Z","times_seen":2377,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}