{"report_id":"41b97140-a352-4014-91b2-0045354675f9","version":0,"status":"done","tags":[],"date":"2026-10-07T16:12:41Z","url":{"schema":"https","addr":"papertrade-enroll.cfd/","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"104.21.74.32","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"papertrade-enroll.cfd/","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"title":"Paper Season Crates · papertrade","dom":{"size":2367578,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34769)","md5":"ea4501be8f27efc927dabfb60b41b284","sha1":"640b5acc3bb620afdb6d9bdc3d217b3c41569415","sha256":"e71c6f534b29678d93a1d30a3df3e9e29a33869abee67656c1231ad108dfb9b7","sha512":"24773c9522df7dafaa8aee5de5656bc1c49846f2d8d307a04a8c5e9806a9c7fb09b109278a15cc42143abea2715128f3d8a531a9846df4d4c1200b836a202be2","ssdeep":"49152:9ZFEsOPmEs4dDEsWnUEs0pJEseXKEsISmN:6","tlshash":"c0b523b114ae186f2896cdc5f1942b2eafa47f639841c2cd3bdd15c22fc9c45e962a4c","dom_hash":"domhash3d48ea5b66b43c004d3b15c0386c5f60","first_seen":"2026-10-07T13:02:54.993652Z","last_seen":"2026-10-07T16:13:26.449645Z","times_seen":85,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"papertrade-enroll.cfd/","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"104.21.74.32","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T16:12:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"papertrade-enroll.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"papertrade-enroll.cfd","ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-01","domain_rank":0,"first_seen":"2026-10-07T14:18:19.709322Z","last_seen":"2026-10-07T14:18:19.709323Z","alert_count":6,"request_count":6,"received_data":6939241,"sent_data":3006,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.reown.com","ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-10-03T06:02:45.278652Z","alert_count":0,"request_count":2,"received_data":78848,"sent_data":1078,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-04T23:23:27.025218Z","alert_count":0,"request_count":1,"received_data":23380,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"papertrade-enroll.cfd/7ecc72e9.js","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9d0f0500bcee3c59500ac41990a30c6","sha1":"311d321690eb3d0e75820869a6606216d11798f5","sha256":"7ecc72e9d705549f8a64f72e4a92e0283f50494b14d0d3f7a8449cb755f97a36","sha512":"5c9162be81fc638f6c053b6c46938bd6096573d8f38e17a934624f1ac67af0ebb2a4d84d9afb04eb7433d96c99e9419c4970ba0eb9ec8bb73f0c7c2338c4104e","ssdeep":"6144:q2cC+QFPPXaHxgEsm41sYEM8r/mMggfNwkaq54nV8Gi/K+SqZRo:l/m41sYEM8BikaqmXV","tlshash":"e08553ab239c1a2e50bfa888cd354c5c84f4c7585e1f027aac73ad97f64dbb4574a348","size":1762059,"data":"","first_seen":"2026-10-05T10:36:20.395768Z","last_seen":"2026-10-11T10:14:12.235699Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papertrade-enroll.cfd/","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"88921310e114533aacbaf7302c1072c1","sha1":"df88b8e2d01b4029c0a86e47505dacf8c3d9b761","sha256":"d63e1f155d988904c80c6e14594c779bf8f4ee7a75179f398b0b72afddc265f6","sha512":"74e16fcec80df0c4ba4212e75daa233b9796c11696b39fcf2c59d41caaefa3ec9da7866f892dc566d2d4d524a9b931c078c1636523d022bd0fbe3c83d6ae803c","ssdeep":"6144:syzL27XEfJI221jC2kGb5Q8+82XdSQml5iJ+OZBx17baQjbaQF5sNPc2f3/Upla4:sgeEt","tlshash":"2645b4f793ad5e3e88b71159ec356d0ca4f64cb20a1ed06efe27b584c5bc1a51ba0318","size":1211068,"data":"","first_seen":"2026-10-05T10:36:20.392985Z","last_seen":"2026-10-11T10:14:12.240523Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papertrade-enroll.cfd/7e249673-7393-422b-b1e9-634a46cf25fb","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"fe8234cbd1cdd5966074b3037cada479","sha1":"b14ac475b831cc60c9da81068952475258c1e67c","sha256":"31dd9f4ece4c6a0d7855391ebe01e3c21bfb6f7748b825e30b3223a43b69078e","sha512":"0e5d7a91b427121bda2e1119c5fbe92db55bf53f045f492dda47e16786c5b14938d337591a9d5d392a5d69c8db7e6c277c5a6b5e9daafa1dccfd9c11b8a14096","ssdeep":"","tlshash":"4a517250b734a5ae0792cac778f63263a5244b283d6ed811d1af8e4337970d205dbf38","size":2995,"data":"","first_seen":"2026-06-10T00:36:37.858875Z","last_seen":"2026-10-11T09:50:21.801347Z","times_seen":503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papertrade-enroll.cfd/","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33286ff94f986f04221b64404ceb6782","sha1":"cf7598dec50b861e625e19d7473ed2df9152b300","sha256":"c81402569b6fd2536c584d3c88d1bb5e9081d8ce8d499d8a26c0dc70ca6144cc","sha512":"e9790418a63c51047798573ea4d9bfff60a00ff7e1bef6b42e51bc8cb989b2ef53752600ac97f7eb7c6770b4372fd0c436ae3da8ea9dd6ba72a033ecf549d353","ssdeep":"","tlshash":"bd015927222233707cd9d5dca8b6d98e39bb500ae40a0090a08e844c1834bc544f7bdc","size":843,"data":"","first_seen":"2026-06-08T13:08:16.104529Z","last_seen":"2026-10-13T05:16:31.79655Z","times_seen":5635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj29 class:Function displayName:矝榐駋鏃郠玻煋 extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:850629 line:3 url:https://papertrade-enroll.cfd/7ecc72e9.js] name:矝榐駋鏃郠玻煋 ownPropertyLength:4 parameterNames:[矝榐駋鏃郠玻煋] sealed:false type:object]","filename":"https://papertrade-enroll.cfd/7ecc72e9.js line 7 \u003e Function","line_number":3,"column_number":850823},{"level":"error","text":"cap instr[instr_timeout] Instrumentation timed out","filename":"https://papertrade-enroll.cfd/7ecc72e9.js","line_number":1,"column_number":782}]},"http":[{"url":{"schema":"https","addr":"papertrade-enroll.cfd/","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T16:11:59.729Z","timestamp":1791389519729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papertrade-enroll.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 14:11:36 GMT","end":"Wed, 30 Dec 2026 14:11:35 GMT"},"fingerprint":{"sha1":"B7:51:D0:5D:3D:15:68:23:91:ED:96:86:19:A1:D3:5B:75:BF:1F:43","sha256":"E7:C1:7E:85:4A:D1:D6:0A:32:A9:D1:84:8C:02:53:57:32:21:90:8D:5E:41:F6:E2:90:CA:50:91:19:3C:39:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: papertrade-enroll.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 07 Oct 2026 16:11:59 GMT\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4Oq0JMS1i6m3HkjEHHi3ssBo9pTeV2enWylmEVtVR3Fv94iY8zznHtpkcC%2FEdY9TnnHvF%2Fe8Hj9m1F9F4wjjRKlb4%2FTVrv%2BPQYJqVCzkpMNj4Ak6Eow1NRJgJASNDOKqjd5%2FU8Zf0E%3D\"}]}\r\ncf-ray: a46e2f52cf2f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2367618,"size_decoded":408935,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34768)","md5":"a53fed95601558c77003ed0ea09a1e62","sha1":"93cc648933801f6620fe77b180a4fee8466e869a","sha256":"86d9c3d5be5f9d55728d723ea3abe92d08cd29c58980bc9603bf3ed3cfaa03ea","sha512":"0ce37fe9f058c26399e1dfb0ba961b0b4b4bc50ad4efe70876917d8c431879e475391710de0544e549a87dae999f4fdae6ab403276eb11e11818c1ee238948fe","ssdeep":"12288:jVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AxVyvvVBlreW/2fWVW5AmVyvHUp:AZFEeW5AOPmEeW5A4dDEeW5AWP","tlshash":"7f2523b4146d19af1895cc85e2502f2edfad3fa3a841c2ee1fdd19c366dcc48d912a8d","first_seen":"2026-10-07T13:02:54.997303Z","last_seen":"2026-10-07T16:13:26.461589Z","times_seen":103,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":55,"connect":20,"send":0,"wait":144,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"papertrade-enroll.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"papertrade-enroll.cfd/api/cap/redeem","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://papertrade-enroll.cfd/","date":"2026-10-07T16:12:21.488Z","timestamp":1791389541488,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papertrade-enroll.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 14:11:36 GMT","end":"Wed, 30 Dec 2026 14:11:35 GMT"},"fingerprint":{"sha1":"B7:51:D0:5D:3D:15:68:23:91:ED:96:86:19:A1:D3:5B:75:BF:1F:43","sha256":"E7:C1:7E:85:4A:D1:D6:0A:32:A9:D1:84:8C:02:53:57:32:21:90:8D:5E:41:F6:E2:90:CA:50:91:19:3C:39:FC"}}},"request":{"raw":"POST /api/cap/redeem HTTP/1.1\r\nHost: papertrade-enroll.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://papertrade-enroll.cfd/\r\nContent-Type: application/json\r\nContent-Length: 1020\r\nOrigin: https://papertrade-enroll.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1020,"data":"{\"token\":\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuIjoiMmNkODQ1ZTY5ZWQ0MTUxODc5NTUxNDc0ODZhMTQxMGE5Y2E4ZTFhZTM5YzRlM2NjMTMiLCJjIjo1MCwicyI6MzIsImQiOjQsImV4cCI6MTc5MTM4OTU4MDczMCwiaWF0IjoxNzkxMzg5NTIwNzMwLCJlaSI6IjdUanQwdlJOQV9naW1haGNZVm5qd1lTaDZxVzNyZUM4aXJhRVFDX3lxVjViZlJRMVlycEhxamg0T1RjUkRVVmN1UHQ3WmxfQ293Mkx1Q1N4NTZFMjlOSHluZ0l4Zmhad0xEdXRFUnN0Z2lqek15ZzVmb1A3OWxkZkphVmhueDFld3ZmODZEWUhSTUdWRDhVaC1UWm9VMkZ1bEcxQl9CT2pwbGNGU29PaUg4UV90ejFHTnZIZURVdkpEajJ3WWQxLWxXZjMwX0FNVjloTzl3dzQyNXoyYUJDNnFwLXdKNkFvS2dLVlRUQjdydWI0b3J2eVFQY3BEa1hYb3lPS0xEUWVFTHBWdFdSS3NFMC03WGVnM19JeE1LRTJpdEh2eEZwbFgxanpUQk13SzRBSGZoTFlfb0pzY3RuZEVMUk0ifQ.p1GG2zAhXi-FB0quDLnMLluO2YEBRGQKjH__cdrSieE\",\"solutions\":[6185,40515,114094,13069,28141,8965,46296,42557,31994,199606,18215,66886,137765,72659,55802,17575,16543,27455,6059,152657,38913,9057,39443,96528,59426,105771,10466,21392,163220,21542,3392,50269,12012,46311,54386,59481,59126,78600,98303,46449,263763,17169,27481,96646,98390,34849,63642,255444,2657,67041],\"instr_timeout\":true}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"papertrade-enroll.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"papertrade-enroll.cfd/","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://papertrade-enroll.cfd/","date":"2026-10-07T16:12:00.162Z","timestamp":1791389520162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papertrade-enroll.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 14:11:36 GMT","end":"Wed, 30 Dec 2026 14:11:35 GMT"},"fingerprint":{"sha1":"B7:51:D0:5D:3D:15:68:23:91:ED:96:86:19:A1:D3:5B:75:BF:1F:43","sha256":"E7:C1:7E:85:4A:D1:D6:0A:32:A9:D1:84:8C:02:53:57:32:21:90:8D:5E:41:F6:E2:90:CA:50:91:19:3C:39:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: papertrade-enroll.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://papertrade-enroll.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 07 Oct 2026 16:12:00 GMT\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSKOibelZvzbPegJhk40UpYWMFA90aRZYrA6tO82gpgSfRaaki4eHsZpZzRwD0i5XIWzML55oziFH%2Fq%2FPpF%2B8yF90hqVw8scHTr1opFFHK7VMcEBkX52GyQ5rMPnxe29pyXRD1StaVA%3D\"}]}\r\ncf-ray: a46e2f54f8e335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2367618,"size_decoded":409146,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34768)","md5":"a53fed95601558c77003ed0ea09a1e62","sha1":"93cc648933801f6620fe77b180a4fee8466e869a","sha256":"86d9c3d5be5f9d55728d723ea3abe92d08cd29c58980bc9603bf3ed3cfaa03ea","sha512":"0ce37fe9f058c26399e1dfb0ba961b0b4b4bc50ad4efe70876917d8c431879e475391710de0544e549a87dae999f4fdae6ab403276eb11e11818c1ee238948fe","ssdeep":"12288:jVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AxVyvvVBlreW/2fWVW5AmVyvHUp:AZFEeW5AOPmEeW5A4dDEeW5AWP","tlshash":"7f2523b4146d19af1895cc85e2502f2edfad3fa3a841c2ee1fdd19c366dcc48d912a8d","first_seen":"2026-10-07T13:02:54.997303Z","last_seen":"2026-10-07T16:13:26.461589Z","times_seen":103,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"papertrade-enroll.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://papertrade-enroll.cfd/","date":"2026-10-07T16:12:00.667Z","timestamp":1791389520667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 23:49:10 GMT","end":"Thu, 31 Dec 2026 00:49:06 GMT"},"fingerprint":{"sha1":"AB:6C:E5:4A:C2:E3:07:9F:F6:A2:65:3B:0C:C3:15:4B:F3:18:F7:1E","sha256":"DD:D2:5F:53:99:FE:86:D0:63:1A:BC:BB:BF:AF:0E:2C:65:0C:FF:1F:A5:17:B2:F7:3C:74:16:FE:35:1B:FF:C8"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://papertrade-enroll.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://papertrade-enroll.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 16:12:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 4478\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a46e2f599fd856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":42600,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-10-13T07:58:53.500324Z","times_seen":5309,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":12,"connect":2,"send":0,"wait":18,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"172.66.146.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://papertrade-enroll.cfd/","date":"2026-10-07T16:12:00.668Z","timestamp":1791389520668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 23:49:10 GMT","end":"Thu, 31 Dec 2026 00:49:06 GMT"},"fingerprint":{"sha1":"AB:6C:E5:4A:C2:E3:07:9F:F6:A2:65:3B:0C:C3:15:4B:F3:18:F7:1E","sha256":"DD:D2:5F:53:99:FE:86:D0:63:1A:BC:BB:BF:AF:0E:2C:65:0C:FF:1F:A5:17:B2:F7:3C:74:16:FE:35:1B:FF:C8"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://papertrade-enroll.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://papertrade-enroll.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 16:12:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 4478\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a46e2f585e8a56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":36248,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-10-13T07:58:53.509775Z","times_seen":5305,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":26,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papertrade-enroll.cfd/api/cap/challenge","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://papertrade-enroll.cfd/","date":"2026-10-07T16:12:00.691Z","timestamp":1791389520691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papertrade-enroll.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 14:11:36 GMT","end":"Wed, 30 Dec 2026 14:11:35 GMT"},"fingerprint":{"sha1":"B7:51:D0:5D:3D:15:68:23:91:ED:96:86:19:A1:D3:5B:75:BF:1F:43","sha256":"E7:C1:7E:85:4A:D1:D6:0A:32:A9:D1:84:8C:02:53:57:32:21:90:8D:5E:41:F6:E2:90:CA:50:91:19:3C:39:FC"}}},"request":{"raw":"POST /api/cap/challenge HTTP/1.1\r\nHost: papertrade-enroll.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://papertrade-enroll.cfd/\r\nOrigin: https://papertrade-enroll.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncontent-type: application/json;charset=utf-8\r\ndate: Wed, 07 Oct 2026 16:12:00 GMT\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s58FtVVAetp9UhJWyewusOkJU5z74IFwlBQb6yaW1lYqZKljfkpaHnXb2Ur1B9SxDlPDX9O0wYEutE4zz2YjiQeXWxT0sODszhAbfwFPSDEaHjo41UzVIUVpWYxzqDM5BnQOUzF906E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46e2f585abc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6226,"size_decoded":5408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"902474855877c230a3eccb192e243fea","sha1":"8fce4538540c3a2304bbadb2afb9e2578c961f09","sha256":"eaff4d742c53da165ec5b07a50809dcd3fcf6105752e274c9f3a9db564882603","sha512":"a5f5da475c0a7e483ab779052b2c08ff0a121e569850ad621c28723639cf58f7ed03d6f0ca2213472231c243d7e9ea8fcd250dff2d8d775174176f90fb7dcaa4","ssdeep":"192:FUdFe3qtOV6JV+2bZsBZCcLCD4nDw/Hpy:FMCqw4b+26BM+CMnDcc","tlshash":"b1d19f4ca9a04f475265fb7611f8cef66a472d6976e4e80918f0a24bca22f1485433bd","first_seen":"2026-10-07T16:12:49.118718Z","last_seen":"2026-10-07T16:12:49.118718Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"papertrade-enroll.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"papertrade-enroll.cfd/7ecc72e9.js","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://papertrade-enroll.cfd/","date":"2026-10-07T16:12:00.121Z","timestamp":1791389520121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papertrade-enroll.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 14:11:36 GMT","end":"Wed, 30 Dec 2026 14:11:35 GMT"},"fingerprint":{"sha1":"B7:51:D0:5D:3D:15:68:23:91:ED:96:86:19:A1:D3:5B:75:BF:1F:43","sha256":"E7:C1:7E:85:4A:D1:D6:0A:32:A9:D1:84:8C:02:53:57:32:21:90:8D:5E:41:F6:E2:90:CA:50:91:19:3C:39:FC"}}},"request":{"raw":"GET /7ecc72e9.js HTTP/1.1\r\nHost: papertrade-enroll.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://papertrade-enroll.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=14400, s-maxage=86400, stale-while-revalidate=60, stale-if-error=86400\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 14:17:25 GMT\r\ndate: Wed, 07 Oct 2026 16:12:00 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 6874\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21Y8vnpKYfusZA%2FyWtQBmqT0yV7Tveu3Ffs%2FTbVFMw2M40ffJVgMJk7E4cvnzLp8yg5WqDFdLI4%2BxE4UgGupIIA1o%2FLj3%2BkhThka0pjKZzp2qrkB9lJAaOecyS0yhcCr%2FQI1BqWzqio%3D\"}]}\r\ncf-ray: a46e2f54b86c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1762059,"size_decoded":232958,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44751)","md5":"007c820889d35fdcb2b996c941244efe","sha1":"0a4bb73b9df747836a516bc04d08ddf50efdac94","sha256":"cfab2af4fd276e6dcb50b3eba0616bcd7c0e70acae1466b33e4f972940b8c038","sha512":"706fd66286df6069b7e0dee3fa6017fecab15390cb414893c4fe77fa6a124b3d971ada0ee715eb8823d8786ed656638c01eee80582368249230a8bb17bf53f6a","ssdeep":"3072:uQ8JoAhcla1qilp+FODU4mxiDXOjJvkW6fXnK7AovZkka:q2cC+QFPPXa","tlshash":"9c250cf703a44e2e80bbe984dd315c5c90f587a04e6e515abd73a987db4cba85b0c78c","first_seen":"2026-10-05T10:36:20.38996Z","last_seen":"2026-10-11T10:14:12.223803Z","times_seen":249,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"papertrade-enroll.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://papertrade-enroll.cfd/","date":"2026-10-07T16:12:00.598Z","timestamp":1791389520598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://papertrade-enroll.cfd/\r\nOrigin: https://papertrade-enroll.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/wasm\r\nx-jsd-version: 0.0.7\r\nx-jsd-version-type: version\r\netag: W/\"5850-Zla5mhcuOico9+qcpv5wsYqeHHI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 07 Oct 2026 16:12:00 GMT\r\nage: 2847986\r\nx-served-by: cache-fra-eddf8230077-FRA, cache-bma-essb1270068-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":22608,"size_decoded":9031,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"7116ffe340a553a454fef87341c44bed","sha1":"6656b99a172e3a2728f7ea9ca6fe70b18a9e1c72","sha256":"e4f3c00246a775193661f9277ca1288cd310a6514de166ecc2176ccd26fb06a9","sha512":"d9f2e698bf8beefb99d476bd78b26002d7e617ba6e8234c7c93e81ddb74594cf713fc276dc55fe8f5a837c8992fb51a6a52cc183998415cef1b626f4040f2b6c","ssdeep":"384:q1lFv+dy0yrXzRJnzAQTI+q9HU692o3SeHom/EtUHTOih2YeRbpKgYRSE94+D7+:K7zAZ9ao3XHom/L4RbgjSqDq","tlshash":"aaa2859231a428e1f13af73ae00ef1b937139558fb89ba2ac71f25e72c7b50465d6d10","first_seen":"2026-05-10T23:32:59.054461Z","last_seen":"2026-10-13T03:07:47.608033Z","times_seen":976,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":10,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papertrade-enroll.cfd/favicon.ico","fqdn":"papertrade-enroll.cfd","domain":"papertrade-enroll.cfd","tld":"cfd"},"ip":{"addr":"172.67.196.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://papertrade-enroll.cfd/","date":"2026-10-07T16:12:00.884Z","timestamp":1791389520884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papertrade-enroll.cfd","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 14:11:36 GMT","end":"Wed, 30 Dec 2026 14:11:35 GMT"},"fingerprint":{"sha1":"B7:51:D0:5D:3D:15:68:23:91:ED:96:86:19:A1:D3:5B:75:BF:1F:43","sha256":"E7:C1:7E:85:4A:D1:D6:0A:32:A9:D1:84:8C:02:53:57:32:21:90:8D:5E:41:F6:E2:90:CA:50:91:19:3C:39:FC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: papertrade-enroll.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://papertrade-enroll.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=14400, s-maxage=86400, stale-while-revalidate=60, stale-if-error=86400\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 07 Oct 2026 14:17:26 GMT\r\ndate: Wed, 07 Oct 2026 16:12:00 GMT\r\npriority: u=6,i=?0\r\nage: 6874\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZ%2BVqUNwvzjniRshLGLtgWOxKOTI70wDcza9dfD8jSIA9XVsdTUBWJWSUqarfitLedeFu6JM7LMjxJ7773Om0%2Fi%2B0pGQxQvGrW1%2F1sYJF%2B45gaCMUKpe7BYUUJscfsOsuXSr%2F61R7Q0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46e2f598ba135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432254,"size_decoded":35395,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"f9f28ce2d48382afa48191922776cf97","sha1":"d04a7e1d995bd4cbb714c3184ec44460e54c81b0","sha256":"15f6a9bc5f0fa288c37893b0feb8f4c8901d3e09b4b9474091d058ebacf0747b","sha512":"3de446c37100fad927a77d0efc7f0fe55d9453d77f84b428a5c226a7fe28eafe61838352179c2f3a335a748e0d668b987d064980c5a74802068aea201ee28804","ssdeep":"1536:tfkT7O1iJ9LN8deAmdhstQrZF2bUWAtB9+SQ:k3h8dJ7tQDgXd","tlshash":"77941bcfdf829e06c2f7e8f2ac7856d1856cd952c3dee296e472020ba5c443947d858b","first_seen":"2026-10-07T13:02:55.01913Z","last_seen":"2026-10-13T10:45:26.202118Z","times_seen":117,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"papertrade-enroll.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}