{"report_id":"4372c242-832d-47d8-a907-e397a42bdbd0","version":0,"status":"done","tags":[],"date":"2026-07-23T14:08:06Z","url":{"schema":"http","addr":"webtrader.vistelyx.tech","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":0,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/login","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"title":"Webtrader","dom":{"size":21300,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6994)","md5":"9ab7d1f8a7d953b91e662f87150c07fb","sha1":"29ff1d5a8c465f5bde1503427e11095f9d65f8e3","sha256":"bcf8d023e508ae2b27da6e7644defb1c23370ec677b004e41691aa768edacabf","sha512":"5f9d665adfa8d4d2fff39952bd23fe34b0d0ee353822395408a2c7017aaec0f7a7b0789264f5eb7bca5e647a93fc0d79f8fedbede12d52936c0b6951bf0bdd91","ssdeep":"192:1dnHaqhJmXoZSvaTsS3wNE3rC8bZpiLi1I1PrPGI/fv8yAdxKqw7r6vVOjrgeQyv:1CStbOrPJ/syAfnAr8ikeQyyb2","tlshash":"1ba2d8222a5a0096713389e119cabb052d7a5543d3128e6b75fc9d68cfcfce6427f72c","dom_hash":"domhash11a30a7fadeee97f7675ad663aae5b34","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"webtrader.vistelyx.tech","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":0,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T14:08:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webtrader.vistelyx.tech","ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-07-23T14:08:10.782172Z","last_seen":"2026-07-23T14:08:10.782172Z","alert_count":32,"request_count":32,"received_data":3982485,"sent_data":15948,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":1,"received_data":73829,"sent_data":565,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fb7048dd4d250cee15a60c09c68445e","sha1":"103e27385162d66b93ea90f6027c5eb61fc7e2ff","sha256":"8a92c331581571165d2a074acc47d0624181d99a6466486640eb865df3761a81","sha512":"84e54dba72b767fc36910a04d478241a53a83d9d958675fc388ba4604fadb2432e156efb45f4e971c1bf86d40ede67030211c412ff7ae142201de0b74bef5cf2","ssdeep":"","tlshash":"7121af19eabdc4a500a3e4be8767d2082937a0933104e4aa3f4cd985df454958ae75df","size":1120,"data":"","first_seen":"2026-06-10T04:55:52.526649Z","last_seen":"2026-07-23T14:08:15.998039Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3ef6998ed45bccb4a4ff194ec77ecc3","sha1":"e9237414aeae1bbc2f5d948481a0f579b650bc65","sha256":"99bbf745405564a787da2a535e6049ae391c2c7ca85571cd14d369018a81efdc","sha512":"749580e2402df3117d9eee5040f139904efd9a9ec92f054b13e1c571fc6ebf55343ced69e053f4e39d5b839027a30af9b54f21272c99e02376d798bea9001679","ssdeep":"","tlshash":"2c01e54e4efd402615b3786f0e1b8101313bc9539559de487fed67900f86d3899e32e4","size":833,"data":"","first_seen":"2026-06-10T04:55:52.52875Z","last_seen":"2026-07-23T14:08:15.99913Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ddaaec4a2d83ad49a12259178edebd2","sha1":"d77f4d4bd6e9b21eddec0ce7bd7a3fb5f2e9b673","sha256":"4a5e8296b98090c968866e5385d59f81a1a76ad372a984c3b73d2c368507e46d","sha512":"ed8ea5c5cebe02e70de663d16db3700f6e1affb7fa45657494cbf9efab42d9bc7ae17b9249ea8ce5dcfb5de4668a48f70d700ab26f8327a39685bef9fd671300","ssdeep":"","tlshash":"d311cb2b453e083b0597da29c64b701527b3b3473208d88e394df6089f9aa45c7a36fe","size":1038,"data":"","first_seen":"2026-06-10T04:55:52.530749Z","last_seen":"2026-07-23T14:08:16.000029Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f01c3c4d5bdff8284f46baa4044e98ff","sha1":"514c86aa51fac203d5bff101a53f94c9b1342c51","sha256":"afadd7bbc7b3fc0def9b0fbcaf001c50c01b7db3fec4880f57a570ebd956b0c1","sha512":"f3f5bde0c65f6750b38cb6625b808dd18cbf698d52475a61ac71c00ce760d59b84d8058596316c5937d28ad253a90a593edbbb81379a2687b4e3dca45e01c9eb","ssdeep":"","tlshash":"90700000088800202e02088a8a000302a8000e08082020a0a008a32bc0808030820028","size":24,"data":"","first_seen":"2025-10-10T21:54:22.826305Z","last_seen":"2026-07-23T14:08:16.000905Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/polyfills.3115db2c0ec3f144.js?v=2.4.0","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c021c8e2a0c83083eee911fefc28402","sha1":"dbe6b91f40030426000a366cc389e9e8009f5064","sha256":"28cce31dd74fdc3c417a433ed3c44a49d908ceeec4447caaee28fbac67fc9144","sha512":"0512d82acd9b681e22aa07a113f680733640a80db2cdeddf8b02a763edb9532183624142c31f9e940f021a01f25c7175ecb6465b1b278d28801a0cdd0f21271f","ssdeep":"768:Oao1hFBEkYWk7lpxhoXzQ8x64QQH5XHb4XchK6mJ19i7bhDgqj8AwOjpVSYo5+L7:JkYWk7lGTFPt1wkintit0T1cvqd2","tlshash":"1c23fac677a2f0668bf661f4a13f850bf2361564785c88e4f258d8e4397908ad07bf2d","size":47636,"data":"","first_seen":"2025-10-10T21:54:22.79596Z","last_seen":"2026-07-23T14:08:15.981912Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-23T17:45:45.046117Z","times_seen":340439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/6404.7674ffc0f7037084.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cbd41bf7c9fed20830de511568666a6","sha1":"9eaf751d40f8eaaf6f9ea2aab8759fe1d6a6808b","sha256":"678002245645cee6a151a06b6c5db01b145a0601059ddb5971bc98ccde25d3e0","sha512":"83bf9b9fe9ea29cc625015ca91ee4d87fdd8b4552cf0414fb4d8371307772bcba2d3e11a1d1477c60c567796088621e6ddcb04b31496d12c40676b733104f359","ssdeep":"1536:IOyyLeFvuTX1vIq1HhmLs7MLrp29CMIEj6pV5r65Oz85n+:MvuX1IChTSpebEz80","tlshash":"f673fb95326371644fe9cc5accf5194ab6249f34d40140ecb23e9dec2ae9e4db23673a","size":74214,"data":"","first_seen":"2026-04-15T13:44:14.260612Z","last_seen":"2026-07-23T14:08:15.985361Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/common.f5cdcb2438a87a26.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4088ef75ee1fe2fb6b37498d364f455c","sha1":"f7b095ab169d96ac53401aa259fab9dec8a6571e","sha256":"7ad5b4374d9cdc7b3c66f1cf0f10a7fc4d33fe7807ff21fb4879b8007dca66b6","sha512":"dc2fe8782c1e92cb84da560e9d0a1ad2d7a88ef17041cd65b2d1aedd80e5fc8a5e85f7300febf19da78b316f5c34544d7addf36f7b35b19210e278d9e096a1fb","ssdeep":"768:TzOTI4E46PP4DtCzMmbothrEiOI9TPpx7fmH/MhvSdZU/o7QunOMmQUnFPfV:8yz7kXeUCZU/7uCfV","tlshash":"8f2395f2c62440dd33a2c4139613b7085c39f161d812c999fb9d986c9ae2fee939677c","size":49180,"data":"","first_seen":"2026-04-15T13:44:14.238698Z","last_seen":"2026-07-23T14:08:15.978334Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/7704.955bf9f88f570390.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb29b8710603a39a2a0a9d01b6f3b409","sha1":"439f430664d37911252e0984c8ba810508c1299b","sha256":"3ce402cf9fe50cda31b66e5186498ce7f1060aa374d71ab671546423ecaf038d","sha512":"7dbf6877858df2bce269f4f33f163eb5ab1fe806a7555df6be059a3895c20eb13051ba5e7df711778b57440a78ca073f5d86da52044ef033fb8eececc3c7105d","ssdeep":"6144:nb49llmWnTZ6K3z0zAQL48XdFoSLPAptBRzumtO4ngTj4YDuEIJ9ade9Z+uYMkAa:M9llmWTZ6K3z0zAQL48XdFoSLPAptBR6","tlshash":"cf84c922f3802017455e6243b023174293272a966d85cdadbe7cade67e69c4d33feb74","size":371049,"data":"","first_seen":"2026-04-15T13:44:14.26857Z","last_seen":"2026-07-23T14:08:15.969301Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/runtime.49af5383f44e5bfc.js?v=2.4.0","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fed66481d90519bd53020b6617b97e8","sha1":"2043d32c0d43d453efc89741f6bdd8cb722402aa","sha256":"2a8279914f359821f136b6a2afb6934c368f2d83f7475b4f203e9746c5d2db13","sha512":"ef41cd93ad470cba35021dfb7e31b7dc3f290b760592b984540a95c31b9ec6afad89c1796c182f28f6b68bb02af0cd136c9e1c391d4833f46754ddee6a7c5b21","ssdeep":"","tlshash":"c181097937a9bcba5b3340c56c3e9cd0a5143036941a9df0e72bdc696508ef02a17ab1","size":4085,"data":"","first_seen":"2026-07-23T14:08:15.984438Z","last_seen":"2026-07-23T14:08:15.984438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/2967.14e82bd56f363e9b.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"48faa681c808baee3bda31016423e7bc","sha1":"2b44b228727bdfb735385d61b60ec8dc4a956d46","sha256":"f7cc23e65d09d73b5c642ee57348b1306d3f873cb54509563fa17e1de68d1af4","sha512":"cad8468a4a81541be82644f4146d6193cedd795b45994fd965b4716050d7e88097e7a5fbffec274dded714ae6cf3fc146c213391ea089a8bae2587620d4ec258","ssdeep":"12288:YLm6UiNwszkQQKOzDZo8/Ew6Q6PFEpv28omp7lqC+zC3k1rPI:YyiNwszk9d/Ew6Q6PFEpv28omp7lqC+w","tlshash":"d2a42c953151206603eb909954bb0503f32b1885a50b84acb7ec8dee7f5ed4c72bbbbd","size":466872,"data":"","first_seen":"2026-04-15T13:44:14.22756Z","last_seen":"2026-07-23T14:08:15.973233Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/4927.fced364a0ba99d62.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"22688aa881129a4b2998d3da3384125b","sha1":"985798b063bb1dde0992474f36b89f35f4752291","sha256":"5021b732469a6d605cb72a0dcbef84ab870d88e93dbd18f5e42811ca17c01088","sha512":"43923c0405fe3b96205c2d8c0609dd7f720b74a1ff08170781554ce1aa724b14f413840415f06f5db38e4aae11b4228c943af3006913b8f5df45d153404407f5","ssdeep":"","tlshash":"e761a90516827567207e58e8df76d540f4fb0e424002ca94fffccdb06aa6945b1c7ab8","size":3178,"data":"","first_seen":"2026-04-15T13:44:14.230499Z","last_seen":"2026-07-23T14:08:15.994483Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/4739.75897db9f33e3f35.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b224078a456ba3300cf28c20b39d4834","sha1":"6762137cd9a1c1b6a87392fbd1acf56fb6e439e2","sha256":"26eafa1789892633a52d0d007e782bcdaca32bcda4af24aa83cf8963ae14415b","sha512":"af0b6e0bbcb9b45b94e8b4f1b7f91af7827e1eef75a2a5043b03486c0aa3aacebf16dd0d190fd38af7472f2005aa659ac8d7cdd5416dfb6da133bfbbbaaec35c","ssdeep":"384:nZBfnMYnMNqBXHc0Kb8+9IfN+x0RScYKM/ID069pKBBDsx/1kOTwaCrDH75LgUaj:nZBfnMaMNqBXHc8+9IF+x0UcYKM/I463","tlshash":"659285c972e3f06593a258a5c0af044ff27c6d1ca18d9498f2a1d9e97c7901ed273f29","size":20287,"data":"","first_seen":"2026-04-15T13:44:14.226656Z","last_seen":"2026-07-23T14:08:15.99574Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/main.c20109e163253f68.js?v=2.4.0","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"acd0cf6ca24a217193654722c5c0b6dd","sha1":"d2720aa296cc10eb591d41b57b755d974aa4d632","sha256":"9ecbf2c16a50090d70a39a3d29a2feadbbca69beb4da8a7dd02a3a2affe91614","sha512":"35e9e84621ebf16c6ed39fc43e3d136e0e78ed86d7675dc717f169424f8e4946b22754b8a38fb1fb30108a14c2708003ffe6fafa27f61b94327f772d745ba7af","ssdeep":"49152:JgyVgGJYQv8OtTPcWNFq9EGRNe7nl+aXyeRzDnzI8Pq0chy0:iyVgGJYQv8OtTPcWNC","tlshash":"b485c7582a6bf3449408c0dbf9373c88d59dd18aa00b50e56fb14bf75ba1746ebacd23","size":1819390,"data":"","first_seen":"2026-07-23T14:08:16.002123Z","last_seen":"2026-07-23T14:08:16.002123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/6709.bfe45a98d0131c8b.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fa18af2bcd2e9f1a2f48f5f9d9ba79a","sha1":"3ebd9631d2979f46dbe9c170132fcd97441a7e0c","sha256":"81777b6c0983cd6c0bb8f4ad12982410b4b955c8d6d4f27b1b7b17b11957d69c","sha512":"999e89e8fe17cd1b899323d29b3eeab6ca786d5c280a289f93547a6bec0bdfc699e4b6b5a363542f3adf59e2165e4a2fa1d6c635202327670f4b0910212274e8","ssdeep":"768:K1tpPXcQn/zro6EysU0hS/vOl1HK7M1gni9KBrEP/iVm/xaavDLxkf/E1/M8AHS:Kh/BsUyS/q94ni9KBrEP/iVAvDL6El","tlshash":"3023d99a3742357716fb829618b1050bb92d2480a2054d6db1e8dcee5e9dcccb33bb7c","size":49535,"data":"","first_seen":"2025-10-10T21:54:22.772008Z","last_seen":"2026-07-23T14:08:15.990968Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/2381.6bdb8222c04f4f70.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ef377f3cbd81741952dc19c0d9f67bb","sha1":"ddd543ba8e9e50e0053dbb133523b313f054da3c","sha256":"ee506791ee0287f785769370c45ed79c90f94d3a670523d7645a0b877006b1b8","sha512":"e36567da16a2e348da680b86e3cb7f05569a2404c54508ef34bae9c166f4e73eb53d5533bfde0772bf3175e6ff044f0d1d615f5b81c88170b22e74b20cfb85b9","ssdeep":"384:ucymEE+RDYWZtY7QUNktDgWMHvTZ8wQ36wI+iuFkhfTQmSreXQ1ZyDghfD9OL3wn:uc6E+RDYWDtD9Mrm6wI+iuFkhfTQmSai","tlshash":"c5b2c6587341747243ca905b907b4607b3394044b187b038f56dccef2ebadeea2a7a79","size":24055,"data":"","first_seen":"2025-10-10T21:54:22.816981Z","last_seen":"2026-07-23T14:08:15.991889Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/1671.237ca8ef112a04cc.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee4204b9374130be9ef5fdbb37bac96a","sha1":"7dab2a0444c21192992e3e366ada98500cc35c0c","sha256":"b64f6d3a331960448b417f6db4476977d8741ca21709354f458bd4f38e71038e","sha512":"b9ba0e6b67332146c96af66cab6d3a64c6a74fe20a47a9073cddd00f21f2fddd78ccbd26efbd9660ebbb5e9292a642b900e3787a418a33c9604505c0453c90b8","ssdeep":"1536:wrbw72apUWuHo8ObyYaZaKCAuER2UjFoetfDnfMlKch25:wQpbOrJYaZfMUttfh","tlshash":"4cf3f917f491a0f112eb6554a72f4a02a62d1e45280e9058b7eccdda7bec84d326ff3d","size":166990,"data":"","first_seen":"2026-04-15T13:44:14.26994Z","last_seen":"2026-07-23T14:08:15.992415Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/4310.f7ab4f16927a9dbf.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"89b38c213860616a5b250f4260d8c8bf","sha1":"52d6f14b48af569693b2a88ce2aad2a45095c6d9","sha256":"4fa5f3c49dbb4673e1b78d48e9248d7f391e74bb80f8f68edee1d7af9d6648b3","sha512":"13bdf0b4c4403f9453bfe4d5da9084b24ca09929751316863979524a13d1b1d46142e565448db59aaf35f626eb73561615336994b32d00800a755fe87d4b8a9c","ssdeep":"384:5ffpQBXtfSvI5kQ4Y3FTFEdvLWmEdbXNF1JEFFWFDVJ4:5ffpQBXL4Yx4yrXr4","tlshash":"4b9263f2852450dc3395c4024723b2055e1cfe21d56acaadfa9dc84da7d6feea28573c","size":19630,"data":"","first_seen":"2025-11-12T03:41:30.817325Z","last_seen":"2026-07-23T14:08:15.993944Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/6801.4c129e6f78a879d5.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"608234929a06cafb3df0f7e55f17a357","sha1":"46a903d59a99bf78c4b36e9e65701f64f0f074fc","sha256":"d33c356076a71ea98b3e18cd0b89b3ef02f58c11f918f89a9cf03bce0873d2f1","sha512":"3e55e187c8a4951b8728cf1def8053bad42946c61b98fda4c7d716e3654ff64f517df8257e268291580490bd4cbc3da7f46ccbd33fe6a2e1078789c98263f645","ssdeep":"1536:cgGde3LHg2TpXJmssKq4EoDf5BomXbikdyR:z1XNyR","tlshash":"e243ca579582a5f713e729f0ab6fa50253844d86ad098140f39ccca77afc58c63a3e7c","size":56334,"data":"","first_seen":"2026-07-23T14:08:15.986415Z","last_seen":"2026-07-23T14:08:15.986415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/388.c5961fcbb3e7466e.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa304448138bfb837d5c31c64f73d8b2","sha1":"0af73e9085d07636bc8d23859a02e00f3fa4227d","sha256":"de804b8cf58dc814514db13d73c679ba0b525200865bfba8136b5c4b724c1b71","sha512":"873643e7106d381ef30d7f20311a5bc1ca8ebc32218efd87c715f142dbe75c479f1a70079553c5cda6f0ce301e02c20d0ee4f8e79e807ecd28c92b4dfcec777f","ssdeep":"384:uTVNZSYxhM9B+UZqYLVyeFFPS+7qZGElIM9BybawYmlXU2PJ:cVXnmF3VmZGElIM9BybbYmlXU2PJ","tlshash":"7382b7ae3369b93a46dd4995e076860bf71b2c48900b006cb67c9cdf196cc44b2b6f7d","size":18109,"data":"","first_seen":"2025-10-10T21:54:22.814435Z","last_seen":"2026-07-23T14:08:15.977714Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/8888.e6702d02842a9b05.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d6da8f90ccb047963b16df9e428755e","sha1":"c950be26b80f127667b9c42fee7e363bb79907cf","sha256":"222ca9faf9906cb8e0a24723581b3aedbd575999ceb4c95a8a945d6cf148c568","sha512":"1b2770504e373ec4d9a13a9024434ab337fb1385f61baa7bd2fbe26d14538e11812932db67c18e38c7c3a5c936579c44f8be7dfd47a60897dc39ea81fb7ed968","ssdeep":"768:F3jMy/JnmgaixJWNSfIFBhWtUh2Q2jspO/tOqgL6XfGfQivn8lCnM:zm9ixHMqtovABCSo8ll","tlshash":"7de2f7f2853140e933b2c04242673606591cfe20d91acd58f6ae9d9d7be9f8d6297b3c","size":33867,"data":"","first_seen":"2026-04-15T13:44:14.231828Z","last_seen":"2026-07-23T14:08:15.997117Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"app start","filename":"https://webtrader.vistelyx.tech/","line_number":100,"column_number":25}]},"http":[{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/assets/images/logo.png","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:41.351Z","timestamp":1784815661351,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 4666\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:30:06 GMT\r\nETag: \"6a072dee-123a\"\r\nCache-Control: no-cache, no-store, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4666,"size_decoded":4958,"mime_type":"image/png","magic":"PNG image data, 212 x 63, 8-bit/color RGBA, non-interlaced","md5":"8075317883fdd81cee90185d6456f4db","sha1":"15bae3f2df57c2e3cf71b7d4ca7b0e8932fae9d5","sha256":"00cec8aabc125af73710dd77e77f0fc0f9e030bf7fc2d96c9827c1ec088ddc93","sha512":"dbe09582a7661c8425f11e76fc54c91ebdacf46f8c9f5f923128654c410d2d5f2ee11e66dc5b3a046c9dd8d1ad960b36d96ffabca87778523a708032496429d9","ssdeep":"96:6SGW0wgYAChYxJ86cUTD3MWtISlWGNFWLWAHU1743QM:6SF2I2J869DxtIIWGzWLWX16","tlshash":"f4a17bd2ca9c99af20ac19fa5626c742df5c97400c968307a4b3827d742b1efcae1cc5","first_seen":"2026-07-23T14:08:15.962315Z","last_seen":"2026-07-23T14:08:15.962315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T14:07:37.833Z","timestamp":1784815657833,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:38 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: W/\"6a072d98-2d62\"\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11618,"size_decoded":3703,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4298)","md5":"03502d5f86ef6ead19fdd08a1a663d8d","sha1":"bb55915701ce9dbe4e85b6f8ff5c7672e1312f1b","sha256":"6cf4bb8285fcf56dd709699d43620bd9d61ec2448efae2d701814897300ebe05","sha512":"db1fe3ac580b3b1199815f50ab0b6b8d3f6b1660b05e231293247c393ab0f1f06e42414188a36c274cd8303928bc154d42f7399fc413e678dcdec5db2125cfa9","ssdeep":"192:xdnHaqjJmXoZSvaTsS3wNE3rC8bZpiLi1I1PrPGIDfv+qn2:x0StbOrPJDb2","tlshash":"b0329212056fc009621389e725cfb6223d5a8053919a9569befd8e89dfcfc7703b3768","first_seen":"2026-07-23T14:08:15.964427Z","last_seen":"2026-07-23T14:08:15.964427Z","times_seen":1,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":49,"connect":54,"send":0,"wait":175,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/bg-login-page.93c0bacdf18c4dde.jpg","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:41.356Z","timestamp":1784815661356,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /bg-login-page.93c0bacdf18c4dde.jpg HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/styles.81711c2425bdf5d7.css?v=2.4.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 28085\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-6db5\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28085,"size_decoded":28378,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop CC 2019 Windows, datetime=2024-09-05T16:04:22+03:00], baseline, precision 8, 1010x1078, components 3","md5":"d2e8e3c6e915dea0f3964659274d3489","sha1":"613385807945ccbbb61f672c5186f626582b83be","sha256":"19b831c48f554434abab2e1406d0404195116e56c4b75d4d0686a12fcaf6abf8","sha512":"45a5893aec025f511aecf14d3be7260f748a32189b548e8ae8fda7409b351cc769b44350dd4b219314036a6f5d9bb564c5208ceaead374acb99794df62cfd0a5","ssdeep":"384:nnTAhJL2/QDxqvC+6l/CZ85s/ZYnTy7s1jOYN7Ntj8Ww4bjAWlm+3:nGS/u/OmnTms1jOY5fQ4bgE","tlshash":"b4c29eb5af48934ac56beb3116b3432d7f0348fa2e961193e5bd40b21c8615ebd292e0","first_seen":"2025-10-10T21:54:22.794517Z","last_seen":"2026-07-23T14:08:15.965438Z","times_seen":83,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ8UA3.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:38.588Z","timestamp":1784815658588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ8UA3.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://webtrader.vistelyx.tech\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 21:30:05 GMT\r\nexpires: Sat, 17 Jul 2027 21:30:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 491853\r\nlast-modified: Tue, 09 Sep 2025 18:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":73016,"size_decoded":73829,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73016, version 1.0","md5":"e990806dbc9b31e48655f37651732c80","sha1":"54e77318d2bf0a4f449782986345f4fca55c22a2","sha256":"dd8a4575be9806105ac3decd02805cd2782fe7c05abb02c582316bc436ce03ae","sha512":"d8af9c56b0b4baaa791ac9e293f73925ada707b1dfd171a0f6f41ce838e44dbf8f91b560f2c1f1ef5fcb6f7ab7d60a9a02f7a357fb6a1e554e9648135c56170d","ssdeep":"1536:o+w6J6OKIaGHrkvPegUsHuVeSSFt4FN7mgkdoPvwdDjmbdkbZp:JwPOKIVQXlYZhDPvwVjmaH","tlshash":"1a63122068c07586f4aa437b8f370b89f013fa47a963c83753c988e6936242d22edd35","first_seen":"2025-06-23T04:26:53.679576Z","last_seen":"2026-07-23T14:08:15.968727Z","times_seen":976,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":17,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/7704.955bf9f88f570390.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.024Z","timestamp":1784815660024,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /7704.955bf9f88f570390.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 371049\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-5a969\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":371049,"size_decoded":371356,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bb29b8710603a39a2a0a9d01b6f3b409","sha1":"439f430664d37911252e0984c8ba810508c1299b","sha256":"3ce402cf9fe50cda31b66e5186498ce7f1060aa374d71ab671546423ecaf038d","sha512":"7dbf6877858df2bce269f4f33f163eb5ab1fe806a7555df6be059a3895c20eb13051ba5e7df711778b57440a78ca073f5d86da52044ef033fb8eececc3c7105d","ssdeep":"6144:nb49llmWnTZ6K3z0zAQL48XdFoSLPAptBRzumtO4ngTj4YDuEIJ9ade9Z+uYMkAa:M9llmWTZ6K3z0zAQL48XdFoSLPAptBR6","tlshash":"cf84c922f3802017455e6243b023174293272a966d85cdadbe7cade67e69c4d33feb74","first_seen":"2026-04-15T13:44:14.26857Z","last_seen":"2026-07-23T14:08:15.969301Z","times_seen":3,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":212,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/icomoon.88084cdf1f5e7b99.ttf?ml7oqx","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:41.567Z","timestamp":1784815661567,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /icomoon.88084cdf1f5e7b99.ttf?ml7oqx HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/styles.81711c2425bdf5d7.css?v=2.4.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:41 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 13172\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-3374\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13172,"size_decoded":13479,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"d7007bb286f680fb5376db252feb84dc","sha1":"8940ebfe6f04097b88b283f5220c20df48d7a7c5","sha256":"ca48a4893c651f5f7a70e7615363432cf60fe9e424cba7f72c1ddec03bcf95f2","sha512":"e7b48c11a914c8c759764e0f0fb96ff618d197f126e93684c613224ea8ce1dfacd95184ea43061b12272e202ae0df1614cfa6279eda9c4f052fbab22a9e2273f","ssdeep":"384:elzqZ6PzMEOCnSEIScPbgfdld/wfzorBUbgod5:kWZ6PzMEOeSscPbgfdlJwfwB9K","tlshash":"2242e686db62fb99fc079b759d9b68540ef85f12c139e38353894d86a0054e81d3cf8e","first_seen":"2025-11-12T03:41:30.803302Z","last_seen":"2026-07-23T14:08:15.970768Z","times_seen":70,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/brs/api/getProject/de366f87-3c7f-4e43-be52-de5abdbce489","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:39.814Z","timestamp":1784815659814,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /brs/api/getProject/de366f87-3c7f-4e43-be52-de5abdbce489 HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nCache-Control: no-cache\r\nAuthorization: Bearer undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:39 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11622,"size_decoded":11831,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e50bc9f0b5a2d41f389f78b502978220","sha1":"a2e388fa9f2ebbc14043c634666d59c95b51e9fb","sha256":"1dc9a37a43230fcf0831abfeec66e17496264e0f5780398a290eaba1c9500121","sha512":"3d423515a023a418050587b3ef59957b827ee07d0fa489c6cc4c919b3654b070101ccd869e976fcafc8acc6570d6c38e2c93432046f38ac32853f89d296bb0ad","ssdeep":"192:jzEE8fA8WjT3g3rDFSeLZz5VFjo5f8/23xjSalNwvbxdFcpBK9svTOFK04Nq:jzuATeL5Fj/M2oNXnKm0Z4Nq","tlshash":"2432a202785429bfca53bea33c976a217029a4ddf0b49ccda184cdc96e19cd55133eba","first_seen":"2026-07-23T14:08:15.971763Z","last_seen":"2026-07-23T14:08:15.971763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/assets/images/loader.svg","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:38.590Z","timestamp":1784815658590,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /assets/images/loader.svg HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:38 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 76823\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-12c17\"\r\nCache-Control: public, max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76823,"size_decoded":77107,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ee6f2aedb04bbf5897c87dda1d3376b","sha1":"481e817c8bd9ee62c7c32ad66ae872685a087a38","sha256":"932323112c20fb8ab05cbf2bbfd47e626d0d1d84cb8c17089d2379b4735b32b9","sha512":"0156d42fa216ac46205d7f5fcc07b7214f6bc1ff5db0a724a0852d8fc5346e29c5efb01d70e2dd743dcc85bf0b418d59965b679b924b26d99d97a3a57d03a235","ssdeep":"384:PqAO2u/7NU4YNBAXWKAjYBsBQ6LVU37a6aWr83UEAov5gzqLzNP73zQjGr85aNh5:YuS+R4v/Y4RDLV3RxFvUEOdVpRWV8","tlshash":"af731ae54b7b0c5598cfe0d07fe63b540913be5a8909d0ab9bb91c26f110b52983edce","first_seen":"2025-10-10T21:54:22.811266Z","last_seen":"2026-07-23T14:08:15.972707Z","times_seen":92,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/2967.14e82bd56f363e9b.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.021Z","timestamp":1784815660021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /2967.14e82bd56f363e9b.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 466872\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-71fb8\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":466872,"size_decoded":467179,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"48faa681c808baee3bda31016423e7bc","sha1":"2b44b228727bdfb735385d61b60ec8dc4a956d46","sha256":"f7cc23e65d09d73b5c642ee57348b1306d3f873cb54509563fa17e1de68d1af4","sha512":"cad8468a4a81541be82644f4146d6193cedd795b45994fd965b4716050d7e88097e7a5fbffec274dded714ae6cf3fc146c213391ea089a8bae2587620d4ec258","ssdeep":"12288:YLm6UiNwszkQQKOzDZo8/Ew6Q6PFEpv28omp7lqC+zC3k1rPI:YyiNwszk9d/Ew6Q6PFEpv28omp7lqC+w","tlshash":"d2a42c953151206603eb909954bb0503f32b1885a50b84acb7ec8dee7f5ed4c72bbbbd","first_seen":"2026-04-15T13:44:14.22756Z","last_seen":"2026-07-23T14:08:15.973233Z","times_seen":3,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":55,"send":0,"wait":211,"receive":271,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/brs/api/getPage/de366f87-3c7f-4e43-be52-de5abdbce489/welcome?lang=null","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:41.347Z","timestamp":1784815661347,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /brs/api/getPage/de366f87-3c7f-4e43-be52-de5abdbce489/welcome?lang=null HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: Bearer null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/login\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:41 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":218,"size_decoded":427,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"45dc2d5a341e0a5ba919210664c60c61","sha1":"de51fbda80950447323ebd777adedfd5f98492b6","sha256":"c5a96ec85fe0eca8de85de530fdd20ad437ef7583e6403903abedbbf8f1bb0ed","sha512":"de1c0a925428243917e81d12b1a616881aa95eb5e968ffbc06ed16c5a79191bccdbed4632f6d60c5e32c771462b323f51d22a7603596cbdf109831caf0186ff4","ssdeep":"","tlshash":"2bd02323dd5896122e9e2150b4353c65d97d12cf5050dc10751a5e5801d01f9e60745a","first_seen":"2025-10-10T21:54:22.788453Z","last_seen":"2026-07-23T14:08:15.974184Z","times_seen":79,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/brs/api/getPage/de366f87-3c7f-4e43-be52-de5abdbce489/login?lang=null","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:41.349Z","timestamp":1784815661349,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /brs/api/getPage/de366f87-3c7f-4e43-be52-de5abdbce489/login?lang=null HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: Bearer null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/login\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:41 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2563,"size_decoded":2772,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d4bc759fd8b9e5a748e81f9bd8c28399","sha1":"21b4409b719f23f2a8da8fa8be40a6f58552a793","sha256":"f8125e04413fdb3f86b2678ad66e63ef309c625e9a3a9f1824d80a777cb05b81","sha512":"0ac802984feafb0dfb743b11f721a8a6b7f5afb48e63af34e58beb1ecfc9fc43b9bc15128724a79fa5e0d40bc25196d130ec172ceb27f1316ba433d419bb813e","ssdeep":"","tlshash":"bb519f4b99228cbe5f0785f1f4627f5276ad206b45498c30846e8fd461f1bf22392f07","first_seen":"2026-07-03T04:35:44.926998Z","last_seen":"2026-07-23T14:08:15.975164Z","times_seen":5,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/styles.81711c2425bdf5d7.css?v=2.4.0","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:38.594Z","timestamp":1784815658594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /styles.81711c2425bdf5d7.css?v=2.4.0 HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:38 GMT\r\nContent-Type: text/css\r\nContent-Length: 386726\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-5e6a6\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":386726,"size_decoded":387019,"mime_type":"text/css","magic":"ASCII text, with very long lines (65309)","md5":"06487d64e7d6f4458208c9470d99277f","sha1":"2d49d26285410d4469f4c122caa48ffd1fae07b0","sha256":"154da54badb5697ede494de957e9322659eb25099d97154e4f56ba879c6913fd","sha512":"42830ba971ab7874d2ac52e80ac37afb8d88bc7e7794d6b33bc7c0b31eaabcb626596c43a1e4cbf6d57eda3100bd1ed78408928c19f10c0a15b7cfe2f374266d","ssdeep":"6144:V11tMa3SYiHENM6HN26njkUoqHKJE8A3phEuqWXkJcAf/w3pHxNKn2lgZ:XjkUoqHKJE8A3phEuqWXkJcAf/w3pHxy","tlshash":"7284e9d1f101212df2a7c17950c0fa596d5fa282e6520ffbf05b3a7886cd9ca126bf19","first_seen":"2026-04-15T13:44:14.240495Z","last_seen":"2026-07-23T14:08:15.976019Z","times_seen":3,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":54,"send":0,"wait":213,"receive":270,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/388.c5961fcbb3e7466e.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.026Z","timestamp":1784815660026,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /388.c5961fcbb3e7466e.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18109\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-46bd\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18109,"size_decoded":18414,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18109), with no line terminators","md5":"aa304448138bfb837d5c31c64f73d8b2","sha1":"0af73e9085d07636bc8d23859a02e00f3fa4227d","sha256":"de804b8cf58dc814514db13d73c679ba0b525200865bfba8136b5c4b724c1b71","sha512":"873643e7106d381ef30d7f20311a5bc1ca8ebc32218efd87c715f142dbe75c479f1a70079553c5cda6f0ce301e02c20d0ee4f8e79e807ecd28c92b4dfcec777f","ssdeep":"384:uTVNZSYxhM9B+UZqYLVyeFFPS+7qZGElIM9BybawYmlXU2PJ:cVXnmF3VmZGElIM9BybbYmlXU2PJ","tlshash":"7382b7ae3369b93a46dd4995e076860bf71b2c48900b006cb67c9cdf196cc44b2b6f7d","first_seen":"2025-10-10T21:54:22.814435Z","last_seen":"2026-07-23T14:08:15.977714Z","times_seen":86,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/common.f5cdcb2438a87a26.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.028Z","timestamp":1784815660028,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /common.f5cdcb2438a87a26.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 49180\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-c01c\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49180,"size_decoded":49485,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49180), with no line terminators","md5":"4088ef75ee1fe2fb6b37498d364f455c","sha1":"f7b095ab169d96ac53401aa259fab9dec8a6571e","sha256":"7ad5b4374d9cdc7b3c66f1cf0f10a7fc4d33fe7807ff21fb4879b8007dca66b6","sha512":"dc2fe8782c1e92cb84da560e9d0a1ad2d7a88ef17041cd65b2d1aedd80e5fc8a5e85f7300febf19da78b316f5c34544d7addf36f7b35b19210e278d9e096a1fb","ssdeep":"768:TzOTI4E46PP4DtCzMmbothrEiOI9TPpx7fmH/MhvSdZU/o7QunOMmQUnFPfV:8yz7kXeUCZU/7uCfV","tlshash":"8f2395f2c62440dd33a2c4139613b7085c39f161d812c999fb9d986c9ae2fee939677c","first_seen":"2026-04-15T13:44:14.238698Z","last_seen":"2026-07-23T14:08:15.978334Z","times_seen":3,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":256,"dns":0,"connect":0,"send":0,"wait":213,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/brs/api/getMenu/de366f87-3c7f-4e43-be52-de5abdbce489","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:39.812Z","timestamp":1784815659812,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /brs/api/getMenu/de366f87-3c7f-4e43-be52-de5abdbce489 HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nCache-Control: no-cache\r\nAuthorization: Bearer undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:39 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":580,"size_decoded":789,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"89b6901adbf63c003c6b6a5ae071808b","sha1":"efecde99099a4df058f9846caffb39844fdd233f","sha256":"d4f8f37ffa492b7222b3c1779329db0cc83f4ad850c5006c87e304c54dc5b42f","sha512":"e3e976fa2c2bbd9923685dbc28fea7f637abd95c3c9502cffa1efc2875bc45932f4bbd2f04cc0453ea23752f71afc169fa781965f0853a0b6e7185de7284988d","ssdeep":"","tlshash":"b6f02b0959549cddbc23c0e2a8e37aa7d7eca823e044dc5c50294e2c817fba51543e6b","first_seen":"2026-07-23T14:08:15.979936Z","last_seen":"2026-07-23T14:08:15.979936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/brs/api/get-dialing-codes/de366f87-3c7f-4e43-be52-de5abdbce489","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:39.815Z","timestamp":1784815659815,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /brs/api/get-dialing-codes/de366f87-3c7f-4e43-be52-de5abdbce489 HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nCache-Control: no-cache\r\nAuthorization: Bearer undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:39 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9358,"size_decoded":9567,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1823ed617a7ce004bff18d1221589079","sha1":"d964f9d1a89d714b992b854a81d666990153799c","sha256":"8c1d37af72785c0b4aa7284550eff2a9db4661964ac1fed839b0ede7b26d7aa9","sha512":"f373e8275b5177613b31c097ad5ae6b94479725ef533042ada5845b1bc4080080be3826becff7e39573b1c303d3c0c18c133f9a679afdd7bc0e233c1cc4f298d","ssdeep":"96:T2m2l7wrr//RWfJXDSzO19cWe6m8nFLVq:DMkrT2pDSzObe6m89c","tlshash":"141223bba60dae6ced36bb12b44f3a355c3af46418cc0907608cdb76b2c6bfc1125061","first_seen":"2026-07-23T14:08:15.980944Z","last_seen":"2026-07-23T14:08:15.980944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/polyfills.3115db2c0ec3f144.js?v=2.4.0","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:38.405Z","timestamp":1784815658405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /polyfills.3115db2c0ec3f144.js?v=2.4.0 HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:38 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 47636\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-ba14\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47636,"size_decoded":47941,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47636), with no line terminators","md5":"0c021c8e2a0c83083eee911fefc28402","sha1":"dbe6b91f40030426000a366cc389e9e8009f5064","sha256":"28cce31dd74fdc3c417a433ed3c44a49d908ceeec4447caaee28fbac67fc9144","sha512":"0512d82acd9b681e22aa07a113f680733640a80db2cdeddf8b02a763edb9532183624142c31f9e940f021a01f25c7175ecb6465b1b278d28801a0cdd0f21271f","ssdeep":"768:Oao1hFBEkYWk7lpxhoXzQ8x64QQH5XHb4XchK6mJ19i7bhDgqj8AwOjpVSYo5+L7:JkYWk7lGTFPt1wkintit0T1cvqd2","tlshash":"1c23fac677a2f0668bf661f4a13f850bf2361564785c88e4f258d8e4397908ad07bf2d","first_seen":"2025-10-10T21:54:22.79596Z","last_seen":"2026-07-23T14:08:15.981912Z","times_seen":92,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":54,"send":0,"wait":212,"receive":54,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/main.c20109e163253f68.js?v=2.4.0","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:38.407Z","timestamp":1784815658407,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /main.c20109e163253f68.js?v=2.4.0 HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:38 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1819390\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-1bc2fe\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1819390,"size_decoded":1819699,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5923725b84c4ac534ade9466e61f7e66","sha1":"9b0814d4098a748f48544d1447552c18408acc67","sha256":"4338bdd00dcdcf4587c1981b7fdd14ac5eddc1e2ad040649abab902181a8755d","sha512":"4f39eca3bed77ee47ca987b7b6433f21168e61aa46915452807df967d46c0436ff04f873f233763ce83f2b286dfb3020e26bcba107f66f4d44aa7781c00a8102","ssdeep":"24576:JgyyAhVuhEyG903TSZWkcSa2dpGGJYQv5W2kW0fFaGMDITctTP2AhVuh20FPQCLU:JgyVgGJYQv8OtTPcWNFq9EGRNe7nl+ap","tlshash":"64251aca72e2755a079650a6c43b480eb12d1c80b018c53cffac99dff968d5c52bbb79","first_seen":"2026-07-23T14:08:15.982415Z","last_seen":"2026-07-23T14:08:15.982415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":54,"send":0,"wait":212,"receive":394,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/favicon.ico","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:39.600Z","timestamp":1784815659600,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:39 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 181250\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:30:06 GMT\r\nETag: \"6a072dee-2c402\"\r\nCache-Control: no-cache, no-store, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181250,"size_decoded":181548,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"45f02d18c1364e2c8ed2c955c04bd2c8","sha1":"bf627c2d613e5f98fe1811967c4cbea03a849d58","sha256":"fdf2bfd26796520aa288512ccf694c3f3b26e69d7d412ea5ecc82ce87087f56e","sha512":"ea6aa2df7a48e2717ba2b808af5e727eb0d7df8d83b70e6c219c83946d27b7be280019b69ee9ec3baa3f78638b4a694619f1ea08a8f6f09f57a4f432c821ce0f","ssdeep":"1536:MQB0kD7U50tX/YvjDkZV6NWEikaNKu2ZZnILhOFOwXVFk:Mg0kUTvjgbkaNKVXFBlFk","tlshash":"9104c554ba42c11ec518a1bd3d41f23822906d16dcec8d83a8fb7f5fb7f9291ac1b196","first_seen":"2026-07-23T14:08:15.983353Z","last_seen":"2026-07-23T14:08:15.983353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/runtime.49af5383f44e5bfc.js?v=2.4.0","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:38.402Z","timestamp":1784815658402,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /runtime.49af5383f44e5bfc.js?v=2.4.0 HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:38 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4085\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-ff5\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4085,"size_decoded":4388,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4085), with no line terminators","md5":"3fed66481d90519bd53020b6617b97e8","sha1":"2043d32c0d43d453efc89741f6bdd8cb722402aa","sha256":"2a8279914f359821f136b6a2afb6934c368f2d83f7475b4f203e9746c5d2db13","sha512":"ef41cd93ad470cba35021dfb7e31b7dc3f290b760592b984540a95c31b9ec6afad89c1796c182f28f6b68bb02af0cd136c9e1c391d4833f46754ddee6a7c5b21","ssdeep":"","tlshash":"c181097937a9bcba5b3340c56c3e9cd0a5143036941a9df0e72bdc696508ef02a17ab1","first_seen":"2026-07-23T14:08:15.984438Z","last_seen":"2026-07-23T14:08:15.984438Z","times_seen":1,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/6404.7674ffc0f7037084.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.017Z","timestamp":1784815660017,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /6404.7674ffc0f7037084.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 74214\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-121e6\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74214,"size_decoded":74520,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7cbd41bf7c9fed20830de511568666a6","sha1":"9eaf751d40f8eaaf6f9ea2aab8759fe1d6a6808b","sha256":"678002245645cee6a151a06b6c5db01b145a0601059ddb5971bc98ccde25d3e0","sha512":"83bf9b9fe9ea29cc625015ca91ee4d87fdd8b4552cf0414fb4d8371307772bcba2d3e11a1d1477c60c567796088621e6ddcb04b31496d12c40676b733104f359","ssdeep":"1536:IOyyLeFvuTX1vIq1HhmLs7MLrp29CMIEj6pV5r65Oz85n+:MvuX1IChTSpebEz80","tlshash":"f673fb95326371644fe9cc5accf5194ab6249f34d40140ecb23e9dec2ae9e4db23673a","first_seen":"2026-04-15T13:44:14.260612Z","last_seen":"2026-07-23T14:08:15.985361Z","times_seen":3,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/6801.4c129e6f78a879d5.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.018Z","timestamp":1784815660018,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /6801.4c129e6f78a879d5.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 56334\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-dc0e\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56334,"size_decoded":56639,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56334), with no line terminators","md5":"608234929a06cafb3df0f7e55f17a357","sha1":"46a903d59a99bf78c4b36e9e65701f64f0f074fc","sha256":"d33c356076a71ea98b3e18cd0b89b3ef02f58c11f918f89a9cf03bce0873d2f1","sha512":"3e55e187c8a4951b8728cf1def8053bad42946c61b98fda4c7d716e3654ff64f517df8257e268291580490bd4cbc3da7f46ccbd33fe6a2e1078789c98263f645","ssdeep":"1536:cgGde3LHg2TpXJmssKq4EoDf5BomXbikdyR:z1XNyR","tlshash":"e243ca579582a5f713e729f0ab6fa50253844d86ad098140f39ccca77afc58c63a3e7c","first_seen":"2026-07-23T14:08:15.986415Z","last_seen":"2026-07-23T14:08:15.986415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/assets/i18n/EN.json","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:41.344Z","timestamp":1784815661344,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /assets/i18n/EN.json HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: Bearer null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/login\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:41 GMT\r\nContent-Type: application/json\r\nContent-Length: 21560\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-5438\"\r\nCache-Control: public, max-age=300\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21560,"size_decoded":21844,"mime_type":"application/json","magic":"JSON text data","md5":"0647c459b76f0ca7c1a91628bf9755e1","sha1":"ec445a044063a509fed84c861dd5ee784080fe2d","sha256":"7fcb2c3db70f8066066ae05159409a54af0df27bb5d416555a624d60aa22cd18","sha512":"8c71892cbf1fe8e453518707a374c1231d209e00d2dfc073d30f54f9f46c2a5c9a25df14cbc51072aa2682360089a85d90355c3615b91ed16fb7554cbd84103d","ssdeep":"384:tKV+c7RJjqH2nh7/dLq0AxjB74eFIj9gyEiE:gV+c7RBuIh7FHAxjNFIFE","tlshash":"15a26263e8818f6209f5d68475a94a12f22b5fbfb304081f78bc575d0f7e52d12cba29","first_seen":"2026-07-23T14:08:15.987689Z","last_seen":"2026-07-23T14:08:15.987689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/settings/config.json","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:39.323Z","timestamp":1784815659323,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /settings/config.json HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nCache-Control: no-cache\r\nAuthorization: Bearer undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:39 GMT\r\nContent-Type: application/json\r\nContent-Length: 258\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 May 2026 08:00:53 GMT\r\nETag: \"6a0ac735-102\"\r\nCache-Control: no-cache, no-store, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":555,"mime_type":"application/json","magic":"JSON text data","md5":"dd1d62f81cd6d8de89025573662b83a0","sha1":"b20ba6e98619053464097333e32f170f75e6a168","sha256":"bd8eb1f1e1081d506138f2c6f9243a5506922ca8f02eb7624ed7a984396ad6b8","sha512":"815cff106346df1ae30b6fc7eade4b072bf09db3e7769e9f3984a130e3bda733945a18662855e1656d49436eae6486600071417dafca48504c4a66b178f0a4c5","ssdeep":"","tlshash":"bad05e61d8288c7725d4a6f6042ed142d522bc7f064c791db393943d971f55b18b25ec","first_seen":"2026-07-23T14:08:15.988979Z","last_seen":"2026-07-23T14:08:15.988979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/settings/config.json","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:39.328Z","timestamp":1784815659328,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /settings/config.json HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:39 GMT\r\nContent-Type: application/json\r\nContent-Length: 258\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 May 2026 08:00:53 GMT\r\nETag: \"6a0ac735-102\"\r\nCache-Control: no-cache, no-store, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":555,"mime_type":"application/json","magic":"JSON text data","md5":"dd1d62f81cd6d8de89025573662b83a0","sha1":"b20ba6e98619053464097333e32f170f75e6a168","sha256":"bd8eb1f1e1081d506138f2c6f9243a5506922ca8f02eb7624ed7a984396ad6b8","sha512":"815cff106346df1ae30b6fc7eade4b072bf09db3e7769e9f3984a130e3bda733945a18662855e1656d49436eae6486600071417dafca48504c4a66b178f0a4c5","ssdeep":"","tlshash":"bad05e61d8288c7725d4a6f6042ed142d522bc7f064c791db393943d971f55b18b25ec","first_seen":"2026-07-23T14:08:15.988979Z","last_seen":"2026-07-23T14:08:15.988979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/brs/api/validate-ip/Terminal/de366f87-3c7f-4e43-be52-de5abdbce489","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:39.503Z","timestamp":1784815659503,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /brs/api/validate-ip/Terminal/de366f87-3c7f-4e43-be52-de5abdbce489 HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nCache-Control: no-cache\r\nAuthorization: Bearer undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:39 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229,"size_decoded":438,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"75bc726d46f370095fac1de753bd4b5f","sha1":"714aee07a1b980d3c8c53cddd803703e01ffc1be","sha256":"e87c357be53aaf9d2cbf25e84662a6ac52316a67e32d471493b41456ad24886e","sha512":"2c4e973903e55d4b25c9fe4c0779514a7be6a9ae8dfd0b5bd2c771d810529466957eec180b97741a966691307eb3f405ac1f2b6379fd5cdc5240b6f2fc813b11","ssdeep":"","tlshash":"78d02225acb88e43ad12828829867f2047fcf0a7d0a38c10d18e6f6801f82f12a53227","first_seen":"2026-06-10T04:55:52.52106Z","last_seen":"2026-07-23T14:08:15.990384Z","times_seen":49,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/6709.bfe45a98d0131c8b.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.012Z","timestamp":1784815660012,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /6709.bfe45a98d0131c8b.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 49535\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-c17f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49535,"size_decoded":49840,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49535), with no line terminators","md5":"5fa18af2bcd2e9f1a2f48f5f9d9ba79a","sha1":"3ebd9631d2979f46dbe9c170132fcd97441a7e0c","sha256":"81777b6c0983cd6c0bb8f4ad12982410b4b955c8d6d4f27b1b7b17b11957d69c","sha512":"999e89e8fe17cd1b899323d29b3eeab6ca786d5c280a289f93547a6bec0bdfc699e4b6b5a363542f3adf59e2165e4a2fa1d6c635202327670f4b0910212274e8","ssdeep":"768:K1tpPXcQn/zro6EysU0hS/vOl1HK7M1gni9KBrEP/iVm/xaavDLxkf/E1/M8AHS:Kh/BsUyS/q94ni9KBrEP/iVAvDL6El","tlshash":"3023d99a3742357716fb829618b1050bb92d2480a2054d6db1e8dcee5e9dcccb33bb7c","first_seen":"2025-10-10T21:54:22.772008Z","last_seen":"2026-07-23T14:08:15.990968Z","times_seen":92,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/2381.6bdb8222c04f4f70.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.020Z","timestamp":1784815660020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /2381.6bdb8222c04f4f70.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 24055\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-5df7\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24055,"size_decoded":24360,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24055), with no line terminators","md5":"5ef377f3cbd81741952dc19c0d9f67bb","sha1":"ddd543ba8e9e50e0053dbb133523b313f054da3c","sha256":"ee506791ee0287f785769370c45ed79c90f94d3a670523d7645a0b877006b1b8","sha512":"e36567da16a2e348da680b86e3cb7f05569a2404c54508ef34bae9c166f4e73eb53d5533bfde0772bf3175e6ff044f0d1d615f5b81c88170b22e74b20cfb85b9","ssdeep":"384:ucymEE+RDYWZtY7QUNktDgWMHvTZ8wQ36wI+iuFkhfTQmSreXQ1ZyDghfD9OL3wn:uc6E+RDYWDtD9Mrm6wI+iuFkhfTQmSai","tlshash":"c5b2c6587341747243ca905b907b4607b3394044b187b038f56dccef2ebadeea2a7a79","first_seen":"2025-10-10T21:54:22.816981Z","last_seen":"2026-07-23T14:08:15.991889Z","times_seen":92,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/1671.237ca8ef112a04cc.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.029Z","timestamp":1784815660029,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /1671.237ca8ef112a04cc.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 166990\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-28c4e\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":166990,"size_decoded":167297,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ee4204b9374130be9ef5fdbb37bac96a","sha1":"7dab2a0444c21192992e3e366ada98500cc35c0c","sha256":"b64f6d3a331960448b417f6db4476977d8741ca21709354f458bd4f38e71038e","sha512":"b9ba0e6b67332146c96af66cab6d3a64c6a74fe20a47a9073cddd00f21f2fddd78ccbd26efbd9660ebbb5e9292a642b900e3787a418a33c9604505c0453c90b8","ssdeep":"1536:wrbw72apUWuHo8ObyYaZaKCAuER2UjFoetfDnfMlKch25:wQpbOrJYaZfMUttfh","tlshash":"4cf3f917f491a0f112eb6554a72f4a02a62d1e45280e9058b7eccdda7bec84d326ff3d","first_seen":"2026-04-15T13:44:14.26994Z","last_seen":"2026-07-23T14:08:15.992415Z","times_seen":3,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":258,"dns":0,"connect":0,"send":0,"wait":212,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/4310.f7ab4f16927a9dbf.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.694Z","timestamp":1784815660694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /4310.f7ab4f16927a9dbf.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 19630\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-4cae\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19630,"size_decoded":19935,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19630), with no line terminators","md5":"89b38c213860616a5b250f4260d8c8bf","sha1":"52d6f14b48af569693b2a88ce2aad2a45095c6d9","sha256":"4fa5f3c49dbb4673e1b78d48e9248d7f391e74bb80f8f68edee1d7af9d6648b3","sha512":"13bdf0b4c4403f9453bfe4d5da9084b24ca09929751316863979524a13d1b1d46142e565448db59aaf35f626eb73561615336994b32d00800a755fe87d4b8a9c","ssdeep":"384:5ffpQBXtfSvI5kQ4Y3FTFEdvLWmEdbXNF1JEFFWFDVJ4:5ffpQBXL4Yx4yrXr4","tlshash":"4b9263f2852450dc3395c4024723b2055e1cfe21d56acaadfa9dc84da7d6feea28573c","first_seen":"2025-11-12T03:41:30.817325Z","last_seen":"2026-07-23T14:08:15.993944Z","times_seen":66,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/4927.fced364a0ba99d62.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.920Z","timestamp":1784815660920,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /4927.fced364a0ba99d62.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3178\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-c6a\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3178,"size_decoded":3481,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3178), with no line terminators","md5":"22688aa881129a4b2998d3da3384125b","sha1":"985798b063bb1dde0992474f36b89f35f4752291","sha256":"5021b732469a6d605cb72a0dcbef84ab870d88e93dbd18f5e42811ca17c01088","sha512":"43923c0405fe3b96205c2d8c0609dd7f720b74a1ff08170781554ce1aa724b14f413840415f06f5db38e4aae11b4228c943af3006913b8f5df45d153404407f5","ssdeep":"","tlshash":"e761a90516827567207e58e8df76d540f4fb0e424002ca94fffccdb06aa6945b1c7ab8","first_seen":"2026-04-15T13:44:14.230499Z","last_seen":"2026-07-23T14:08:15.994483Z","times_seen":3,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/4739.75897db9f33e3f35.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:40.023Z","timestamp":1784815660023,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /4739.75897db9f33e3f35.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20287\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-4f3f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20287,"size_decoded":20592,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20287), with no line terminators","md5":"b224078a456ba3300cf28c20b39d4834","sha1":"6762137cd9a1c1b6a87392fbd1acf56fb6e439e2","sha256":"26eafa1789892633a52d0d007e782bcdaca32bcda4af24aa83cf8963ae14415b","sha512":"af0b6e0bbcb9b45b94e8b4f1b7f91af7827e1eef75a2a5043b03486c0aa3aacebf16dd0d190fd38af7472f2005aa659ac8d7cdd5416dfb6da133bfbbbaaec35c","ssdeep":"384:nZBfnMYnMNqBXHc0Kb8+9IfN+x0RScYKM/ID069pKBBDsx/1kOTwaCrDH75LgUaj:nZBfnMaMNqBXHc8+9IF+x0UcYKM/I463","tlshash":"659285c972e3f06593a258a5c0af044ff27c6d1ca18d9498f2a1d9e97c7901ed273f29","first_seen":"2026-04-15T13:44:14.226656Z","last_seen":"2026-07-23T14:08:15.99574Z","times_seen":3,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":55,"send":0,"wait":211,"receive":53,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrader.vistelyx.tech/8888.e6702d02842a9b05.js","fqdn":"webtrader.vistelyx.tech","domain":"vistelyx.tech","tld":"tech"},"ip":{"addr":"89.127.232.152","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webtrader.vistelyx.tech/","date":"2026-07-23T14:07:41.101Z","timestamp":1784815661101,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vistelyx.tech","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:CF:F7:64:06:05:BA:C6:F3:0D:CE:82:66:5A:8E:A8:BB:0C:57:ED","sha256":"42:B2:EF:C9:1D:22:FD:32:CD:AF:A4:9D:CF:76:08:94:3F:ED:3C:7E:C8:30:F0:A0:DD:25:81:4C:2A:1A:2F:27"}}},"request":{"raw":"GET /8888.e6702d02842a9b05.js HTTP/1.1\r\nHost: webtrader.vistelyx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://webtrader.vistelyx.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Thu, 23 Jul 2026 14:07:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 33867\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 May 2026 14:28:40 GMT\r\nETag: \"6a072d98-844b\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33867,"size_decoded":34172,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33867), with no line terminators","md5":"5d6da8f90ccb047963b16df9e428755e","sha1":"c950be26b80f127667b9c42fee7e363bb79907cf","sha256":"222ca9faf9906cb8e0a24723581b3aedbd575999ceb4c95a8a945d6cf148c568","sha512":"1b2770504e373ec4d9a13a9024434ab337fb1385f61baa7bd2fbe26d14538e11812932db67c18e38c7c3a5c936579c44f8be7dfd47a60897dc39ea81fb7ed968","ssdeep":"768:F3jMy/JnmgaixJWNSfIFBhWtUh2Q2jspO/tOqgL6XfGfQivn8lCnM:zm9ixHMqtovABCSo8ll","tlshash":"7de2f7f2853140e933b2c04242673606591cfe20d91acd58f6ae9d9d7be9f8d6297b3c","first_seen":"2026-04-15T13:44:14.231828Z","last_seen":"2026-07-23T14:08:15.997117Z","times_seen":3,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"webtrader.vistelyx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
