{"report_id":"46773f02-f808-4b56-9696-bca4a064ebde","version":6,"status":"done","tags":[],"date":"2026-04-27T17:19:15Z","url":{"schema":"http","addr":"derivefx.com","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":0,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"title":"Welcome to Derive Fx","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"derivefx.com","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":0,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-01T17:19:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-27","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":12,"received_data":396748,"sent_data":6403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.cryptocompare.com","ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":265475,"first_seen":"2015-07-15T18:30:01Z","last_seen":"2026-04-23T05:44:15.427194Z","alert_count":0,"request_count":3,"received_data":17008,"sent_data":1417,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":2,"received_data":47702,"sent_data":1148,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-04-27T01:34:56.96102Z","alert_count":0,"request_count":4,"received_data":2362,"sent_data":2370,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-04-27T15:35:50.18066Z","alert_count":0,"request_count":4,"received_data":166792,"sent_data":1872,"comment":"","tags":null,"fingerprints":null},{"fqdn":"derivefx.com","ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":72,"request_count":72,"received_data":5881688,"sent_data":84794,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-04-27T01:45:38.866329Z","alert_count":2,"request_count":16,"received_data":7183639,"sent_data":10602,"comment":"","tags":null,"fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widgets.coingecko.com","ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":3132971,"first_seen":"2018-07-05T11:10:42Z","last_seen":"2026-04-21T04:26:28.206999Z","alert_count":0,"request_count":2,"received_data":463715,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-04-27T11:12:45.197938Z","alert_count":0,"request_count":7,"received_data":843435,"sent_data":3835,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2026-04-26T05:50:48.845645Z","alert_count":0,"request_count":10,"received_data":142271,"sent_data":4798,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-04-25T19:36:39.361844Z","alert_count":0,"request_count":2,"received_data":10592,"sent_data":1032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"192.178.25.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-04-27T01:34:56.80606Z","alert_count":0,"request_count":2,"received_data":76207,"sent_data":1102,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-26T22:38:44.781388Z","alert_count":0,"request_count":3,"received_data":127165,"sent_data":1350,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-04-26T22:44:22.368934Z","alert_count":0,"request_count":9,"received_data":93655,"sent_data":4676,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-04-27T00:31:44.668596Z","alert_count":0,"request_count":3,"received_data":185382,"sent_data":1480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b43b0aee35624cd95b910189b3dc231","sha1":"4dc7c9ec434ed06502767136789763ec11d2c4b7","sha256":"454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1","sha512":"a882f0ac848b0b6b4ca7b42bfa1d266afd0ddeba9204ae57a984a69376d59816b1ef3f4d442ea8a70396067ff5b70e0ae8eab3935b617b8e366d8e35c3bfe14c","ssdeep":"","tlshash":"c700000000000000c00000300000000000000c00000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:42:46Z","last_seen":"2026-04-30T21:37:31.864939Z","times_seen":41951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e548e88df3c2c4229e6f4918762d9660","sha1":"ee35253c4cb4df357d72b09c11ae616c46e21fcc","sha256":"64e943572216b5a16dd7d623ad3e9078ac218c16a77e4080a00c330c9718d308","sha512":"30d6800e721df920dc82500da57616d04e2caa7613e481b6cd2116ae49a0222d352b440323d892717a31634f190d1510887173e692fae3dfe3c4ca89cbe8cd5f","ssdeep":"1536:zPUrESx3I/hSOOUMGnrUz4kbAXqnKji/e:QrekUZUUSK3","tlshash":"e653f7cff1d2b3215ee2a1f2446b410de27ea518dc48180eb944fbf49e749879427f6a","size":64678,"data":"","first_seen":"2026-04-27T17:19:35.866239Z","last_seen":"2026-04-27T17:19:35.866239Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf9175b80455fb4fbcb1db90195065b4","sha1":"cde5d983fc36f2a5efd6f15400bab8e92ed21892","sha256":"3a5357e2b96761804f6b2353fecd783c64967403b17b0db6360624400047d6ea","sha512":"61d71947dba14a857f396832144315638d3f73dd3304e905a97efdcdfc4882ee2c216186c66d8e678d2e7bf5a765bfb1750d737af462c7fb2b2287e7cb20d61f","ssdeep":"","tlshash":"c71000000000000000300000000000000000000000030000000000c000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:47:52Z","last_seen":"2026-04-28T06:57:37.743552Z","times_seen":1771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"90fa476b4d12c2ffefbb3d44f91c5711","sha1":"59996d54e59a97c112d443c32f1487ee4e44a578","sha256":"103af173d4321b6fe8c708c643100664ff9285426da591e15b1ae52403f99c31","sha512":"7e0f16c0088b9b7af2afd185121f81dae5d091c0f88b0e16f88d20bbbf82d359246d70b5cf162cb87e41af94c19fde71b89f2d1b9632da936620dfa030854acd","ssdeep":"","tlshash":"cb11cccb53e423432cd657d6488fb72a4439f3975d86bc0f4e22b2b8aa259e35468c05","size":906,"data":"","first_seen":"2026-04-23T13:20:27.772415Z","last_seen":"2026-04-28T06:57:37.747693Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"ba0daf25202bca06f94af7da9a1f12d6","sha1":"015b76c0cd73c232fc2cdae161505b8a85b653ab","sha256":"2fe05dfce343ff79e08b1327869c3810f452f2e0f463aac0c83588fa3e9c76f4","sha512":"55a01dfa1c8a6ca38738b032ccc296af4c236373b4b6ddb0301a430174129385466536ae42c86f9c910d47f5ca2aba2a6a59a1307610cc7ad43d22cb57e7e117","ssdeep":"","tlshash":"5f9002a621d65500579211b4155b18849024446028449a49644195925c694329235a6c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.673611Z","times_seen":922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c14d755a2794db9088c5d73acb6169dc","sha1":"b0268b9d66a8cbdafc46caaa46d2b76671ea6482","sha256":"8244e5c132af80166020d8366b146870a601b9ac313746046fc8c231c4b37c80","sha512":"20366e8aa8b96faac5ac65f8b1bdb23b73e3fca9ffc825e811dad0d2f6509392e50fac454ef5e6bc3357b8d38191267d16322744071bf070c5ee5ad88fb8f5cb","ssdeep":"","tlshash":"83a012401c00bc40001b0250244aa4830c3e926580184f0208b8f254f7e0bc108234c0","size":75,"data":"","first_seen":"2026-04-23T09:07:29.206561Z","last_seen":"2026-04-28T06:57:37.745951Z","times_seen":1037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f38ee76ce06ccd13940482aced1c7391","sha1":"69590b192b270e6205f5adcc15d42b8500bf48e7","sha256":"550a92e330a86fa0a314c5bdde5a76c4168d753b45144d2780cbf2c26aa033dc","sha512":"947c90d8346b5e7d63d5c61af54e2770ddfb44738ebebb3a4937d1d3a70e24b3359f7d9e1388f06e43b7e28da5243b4deac70330a6e98eca03cb99d1febf96e0","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-10T08:48:35Z","last_seen":"2026-04-28T06:57:37.742454Z","times_seen":4049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-04-30T21:37:31.872637Z","times_seen":152471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-04-29T18:18:38.118872Z","times_seen":51413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90238957363b111798a74fa846d0c6a0","sha1":"5cd4cd0552f8950f50a73e2ffa1cb1a175e48193","sha256":"ba098864ed43187d1dce8066298ecee4fbd10ef0ef5f2b690afa00b7dd6065f5","sha512":"d2c03354004a6c53f3cfbb1367fe2abe6a22dffe10cbc4f17979c556a9f056218995dc64774e2bf792830bd4300c87e847aad36ce1ffb62f2c8a22e4c6c9690f","ssdeep":"12288:XSwa4nEGClHe2ot7RFZOzCAYA5GlDxkJKQh31eF:iwa40lHe9t7RFMzCAYA5j16","tlshash":"12d46de4b292b1b687866d66e47f4053b17f5d02f1044878f0f66ddc14f8e4ca2bab29","size":645198,"data":"","first_seen":"2026-04-24T15:38:02.573665Z","last_seen":"2026-04-27T17:35:07.714771Z","times_seen":2493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"e3055a143912b6911fc03c02cf5719d4","sha1":"4b01dd1698e5df4de8e4e5e8764502bf8702602e","sha256":"12ad6157baffaf39a7be4682b0c93f21ed36ec699a1159362d26b4008209b585","sha512":"a557ef75f200b1f154e5e3a1460dba04bfde9527df888cee1e14c38cc4d09d52c81e2179df8c4544b79040baf14329fde76e44c29cf13395264937fb295cb8fc","ssdeep":"","tlshash":"aaa002b875c3540082af11a46cb75c8595ad4c70501999e95814d8959d6dc76451dcac","size":68,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.78365Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b0d8913d4dfb85c2325c0773ff52ae98","sha1":"0ad631fe7c0afbb8e46dff643ecb6f157f0f17c2","sha256":"e52e1ceda3c73b493c102c8085db4343bae2f6f9fec59b841578b1c89bb0b206","sha512":"7ac853d254ec63543493f742f368dd341b6b31b00697e03d9ce9b320a49c4211fbf0d1d2aca1dd8d2fff2ab3685a90d64395751a7673a8376d0611267f0f1db1","ssdeep":"","tlshash":"c710000000000000000000000000000000030000000000000c00030000000000000003","size":2,"data":"","first_seen":"2023-06-02T19:07:43Z","last_seen":"2026-04-28T06:57:37.851966Z","times_seen":2924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d441c604d3188b0085c27fae81a1dd06","sha1":"1b51e4c428e59ddba53ccd5d29dc7ed67f164432","sha256":"08db1eb3a5ed5ccaf3aa17d90504f8d70f1cc1ebdcd758257da4605e72375851","sha512":"a1f255649cd533eb4205ed48f5066c77af38f13a226bbb0179406bbe5499b7e1d4367ac6f28ed5a94a8f9b2dcb704e3b2eb9678dd9e473aab7334f6232e0d4a6","ssdeep":"","tlshash":"1e80041c1c471100400710d1050710ccc1131054f31c045c30141cd14c357471305c3c","size":34,"data":"","first_seen":"2026-04-23T15:44:24.317738Z","last_seen":"2026-04-28T06:57:37.767846Z","times_seen":817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"01c57a8f39266556e16b72052ae7983c","sha1":"1159b10ecca127f9b6c789a2a90b83242762bb64","sha256":"2db73a87726cabd40dc23d88f079b5f62904c61d681390de5827535ce23871a2","sha512":"0f8312d5dc21581c4bb51f34a476abf07a3b175feb0ce7afb103cd0ca4e5a5dbf98c0ec05fabbd54fe79c6bd39ae0c3ebf703228dbb3f559249fd34c7b5b6760","ssdeep":"","tlshash":"e9d0c280292a6a2c89e1c63b81232081e5259420e82d1cb2fa21f326ec615478db72d2","size":267,"data":"","first_seen":"2026-04-23T09:07:29.245259Z","last_seen":"2026-04-28T06:57:37.816733Z","times_seen":1031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"852dd9819ff83180fd00156f44e3d25f","sha1":"45f0d48ff5d438e80d16338b1662ac34cc2eff30","sha256":"cb3f4f8ff27e091ad6844da23b1f031f64ef3371701d5562ddeb9616268123d2","sha512":"2137685bdaa751f589d9e7ee303227ef6070fbc9af2b78ec54466fb240e1f9efc2520934e87c3a10071d4e76ef9d32c306e0e07b9ff7e314331d740068217f9f","ssdeep":"","tlshash":"0fa002b876c35510829f11641da72884957d44605114aaf95814d4a55d7dc35812ecac","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.742029Z","times_seen":950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"944bebadff1d6d6189165045058ee571","sha1":"c3aeacc5eec66f11e152ae176a99596f88aede43","sha256":"ae4d99a2773b68e01b6751ba60dfee11892fc8b8ddceaa7ec453356efb1f6181","sha512":"b7524c30f4882e0cb97c6b9c949d0c52d1fc549e4961ea084a9b6d592a4eb12c68d96c3006c7d972f60d6033ea9feeb4990afc77727a08cbde5ed59a5f779c67","ssdeep":"24576:TO3oC39/qL7WdmOeaCx1mhi4z1sZh8FphawIPWEmZDUtILFwEjLHtNVhH3Pc03lP:TO3oC39/qnWdmOeaCx1mhi4z1sZ4anPU","tlshash":"54655cd871e2b49647b2f0e958ab4502f63a3988744cc16cf67ddbe62ca0906507bff4","size":1493639,"data":"","first_seen":"2026-04-22T13:58:53.565335Z","last_seen":"2026-04-29T23:35:33.636398Z","times_seen":4510,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-27","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba29556b026f273d7a70c058aead19d6","sha1":"2612cb57faed7520df879e72f9ff4bef2aab91c9","sha256":"8a03a467bf8684a46c870d4342e1c9d47c27f3675167aecda508485a7bd01808","sha512":"62c3ad010e2ae930ec6e03713fb8c63f084fdbcb153fe0c003d8b817fe4a3bad5a3a95e0e90dd51b392dc81d2442251fdfad02e247712b2dfc9cfbe44287c501","ssdeep":"","tlshash":"7fa002e922c65404a7d311f814671a859029946255449ec99454a5e66c6d0269227a6c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.65453Z","times_seen":1092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/jquery.form.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","size":43811,"data":"","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-04-30T14:40:38.611121Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/jquery.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-30T21:36:22.150884Z","times_seen":124364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"221ca4d17fe8c2872d1455069f505080","sha1":"d9891730f21189ed7f8a2329a2308291094aaae3","sha256":"49265bc0f60838eac69470557b9c93defe407c923da1715cd07645abd09f1874","sha512":"8face721bc6245c13e020e3aa3c6a44333d777bd4f283ee5725390615d3bae40b7103f9336b1082737c69756836bc537bc1723ac68c4e080958df883827fd66e","ssdeep":"","tlshash":"8ed0a768f73521156a1f0dd22d8fe0e914a915a2be007c0d55651d7181bed8d506cc85","size":230,"data":"","first_seen":"2026-04-23T13:20:27.828431Z","last_seen":"2026-04-28T06:57:37.843975Z","times_seen":1054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=BBA4/d=1/rs=AN8SPfrvWxNtaBTz3Cqj0GGAYEmdZ0Lg_Q/m=el_conf","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7787972872afcdbd906c5e57e1329d5","sha1":"1a6113a0a59fbeaebdc5b83a6c0c645a85c25de1","sha256":"1c1f46e579e2918fc72feeb20809a336d3f4268787ba305d0a42f20659e9f7e9","sha512":"0edddb7abfa045b048e44393bc642a54048a2d02e757219a2764a62278bb07fc648024dac40c4d54a3c890068ddfe748286b872dba80cced017209162cc6f4be","ssdeep":"1536:XNzri7CtoSq2LILZLUGtYirKrhm3oQQ4CuPKucbRrWKiuwNWms:X9tILcirKrhQCKKibs","tlshash":"6f83c8c8b6a674a59353b5b5513f000eb23f589df8084dacb288d8f2adb5948413bf7d","size":80955,"data":"","first_seen":"2026-04-27T17:15:27.633807Z","last_seen":"2026-04-27T17:53:11.915019Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-04-30T21:37:31.756711Z","times_seen":251088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"183e2e810aff9405ef12dea8191e3312","sha1":"77ad690ebaea050d02dd4151e0db9fd8c8927d30","sha256":"7a2021ff5afd4bedd3b30f48d0fe64da919272414695c6106634f82aa558f84f","sha512":"604e405bcfa5edb222ba4819a19c74535be1b459a26cbbb8c95c0485bd0b9088885b9a5c97d0be6673d327f5d9a70dd4c85fda7d406ae191dac57809e5538cea","ssdeep":"","tlshash":"63a022e220c238000b0220a008c30cc0803c8022080088cf3200a0b38c2803300aaf2c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.8277Z","times_seen":944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"6f9984a7e2f2e03dc65bafd5fd5648e6","sha1":"f059d8fb0badf0996ce805421eff7c2ae23535ad","sha256":"f67c8d014ac734ab0d5d1961dd3d09b66063a1678e1a1a735c73ab2bba06631f","sha512":"06ba88cdca54d0dedb6db7879236bfcc2f8fc2f9442f72ce76991f9d466e2bb5881433c8d7b51b492f5354b1d77cb9b77001da8252aa17e38da63aea5a3b6db7","ssdeep":"","tlshash":"c89002ed22ca5400475726b415971d84906444601445e985645096d35d658225126a6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.667243Z","times_seen":941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7d99b23e9e9b5600837f0afd9d209cd5","sha1":"9c0d77cf54bd8c58d70acc808323910406b09652","sha256":"9a223e450f5cc6b4437c7de1f29a225a4348995faa541c8607565b02413b9a4e","sha512":"dd2e08f0300f10b4551436c3982a381bcce7d7d320642c368688473981e03580659e29e1f879db3330163e204eecb622aaa0aee044eddef3a578edd849bacfda","ssdeep":"","tlshash":"679002a521c654005b9211a81467188591254865548499496445d5926c7d1229156d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.641279Z","times_seen":1066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-30T22:13:03.882384Z","times_seen":2856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5b56b5b45cd092c4c09ad63bf35ad25d","sha1":"cc987b98612a8b31ee70713224d348f4c418f787","sha256":"9b79ddcb6887a36d0456605950e616ad11d2db5b5304b82b189fd65410bba7af","sha512":"7806b89c308c01db8085f3b98c47b4358d6968050c17061c660295d54de1dcd21ab277b8faea4db94241edec7808a2a171f35c8f9b45adfeee8b10bcf2bae262","ssdeep":"","tlshash":"ef8000a83c08e082202f3832000f00ac0322caa0200a08008e8008ac0c3022a000288c","size":28,"data":"","first_seen":"2026-04-23T09:07:29.326909Z","last_seen":"2026-04-28T06:57:37.805693Z","times_seen":1084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-04-29T18:18:38.118872Z","times_seen":51413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-30T22:13:03.882384Z","times_seen":2856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2b3492beddb0203ef8328e3bef41df22","sha1":"04a80b48770168cf28c8b4c73ebbe95c7ecceccb","sha256":"cbac233b61bb6210bf71c1df4d9b0e469a280889507b7fb4e97dedc7ce3c3a01","sha512":"d141635797369b28fccdd1ef65a9274135fab02b56fcbe951845fc76d486d45b702acc1798560057e79ddb12c92096358b5678c8bee36a6d9343dcc88fc7d528","ssdeep":"","tlshash":"c710000000000000000300000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T13:02:29Z","last_seen":"2026-04-28T06:57:37.746472Z","times_seen":2869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-04-30T21:37:31.81092Z","times_seen":174249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-04-30T21:37:31.766341Z","times_seen":140825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2707293c36249150dc47e1cb81bfd7b","sha1":"f793b5e0c02283ca9c22d55612fd58e9b4cc5c3e","sha256":"b0cfb0ddf0f9ddf2d13b8880fdfe970a89f28840e259b2cb1c01f7d96a89cdd4","sha512":"01706601defa093a1a6c863be816d003000b9d9ac88b43817cbb7f96908278dff73e7ce6611754ff0072f527a1c089359163f1e5e08667f19a53033f4dd61369","ssdeep":"","tlshash":"a8c02b1a03e00341d34d01e040038129f022188f3c14665dc7846006d2141c261eec1a","size":132,"data":"","first_seen":"2026-04-23T10:38:24.174129Z","last_seen":"2026-04-28T06:57:37.751196Z","times_seen":1048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"846ab4709f9337ff2b36bd24d7cd974e","sha1":"13db26e3e902e5fa7d5757a72c3a2cc887ec4aa6","sha256":"5d59a43569c5dd4a08a9aab5713449c99dce771632fcc7cde6190b6b88b31844","sha512":"c0fb6d145e403c5417ad25e9741be5ab1df45fb6c1fa950a152caf47debd3cd3024ad0f54fe5dda4e27a13ae2c5926f09c39b9e9866b6d26e271ff805d641a73","ssdeep":"","tlshash":"3ba022f832c2000082cf00280ca32888c82e08300003a8e80800c0a08e3c830803ecac","size":68,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.747639Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-30T21:37:31.818984Z","times_seen":197236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90238957363b111798a74fa846d0c6a0","sha1":"5cd4cd0552f8950f50a73e2ffa1cb1a175e48193","sha256":"ba098864ed43187d1dce8066298ecee4fbd10ef0ef5f2b690afa00b7dd6065f5","sha512":"d2c03354004a6c53f3cfbb1367fe2abe6a22dffe10cbc4f17979c556a9f056218995dc64774e2bf792830bd4300c87e847aad36ce1ffb62f2c8a22e4c6c9690f","ssdeep":"12288:XSwa4nEGClHe2ot7RFZOzCAYA5GlDxkJKQh31eF:iwa40lHe9t7RFMzCAYA5j16","tlshash":"12d46de4b292b1b687866d66e47f4053b17f5d02f1044878f0f66ddc14f8e4ca2bab29","size":645198,"data":"","first_seen":"2026-04-24T15:38:02.573665Z","last_seen":"2026-04-27T17:35:07.714771Z","times_seen":2493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ef7ce15bd82ee7e7008ffb3059e6c2ee","sha1":"42527ba8f49e163da4ae06306beecdb0251b4ee7","sha256":"6f143f837854cec716684b7da65b10dd468590572cb37e36d43c11674567e100","sha512":"8fde1fccf803353e7bc9e796e3c50af97dea258a03c5cb43f1f6e30fde6c736379d4e1af6fddb9417c5fdc973aaa04b1e0c0c4460cf833e6d838b584f0b0c246","ssdeep":"","tlshash":"0dc0801a90b1059275709d35cdb70d25e00df14c851d660c653a3ee04ddb1270431447","size":166,"data":"","first_seen":"2026-04-23T13:20:27.838861Z","last_seen":"2026-04-28T06:57:37.756077Z","times_seen":1045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"d55fc08ca9c174cac15eb7ecf84faf1d","sha1":"0dffe543ef9a50936679ad13145e24e0ac48c28b","sha256":"6efcfc2434fa7f1ce4d66b82f44e66636b0823af5f8291f4bc25598a1882b7a6","sha512":"e4d1f5d1206c6271e2a0b2c3a6a284d11437b08b64ccf4a0b058819ebbed544dfca8b03898bd9a3e674c3bf699c710e966a66d751a7c0e730c0c219861afa6d1","ssdeep":"","tlshash":"be9002a922c65410475325e428ab5885d12444b01454d9c5544095e29d651275116a6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.663918Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:37:31.762731Z","times_seen":218113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-04-30T21:37:31.784016Z","times_seen":240788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1cfe429fe8abbcdc29241112ad08ae7a","sha1":"6a3c5a5c75942adf9992921b03abf5a99bf6c053","sha256":"432c6d6640d78afbb86dd087731c504decd7fdaf4f376a4829b90a1740d7d77d","sha512":"7c74947d3074366435049ccca4ca5fb061cc9f9e10275c7b3b79b72843b4690ca1b5da5a05c03f360aa5511276eba954d2b8b95889480d085488a2cd5b433a20","ssdeep":"","tlshash":"c710000000000000000000000000300000000000000000000000000000000000000300","size":2,"data":"","first_seen":"2023-10-13T04:26:29Z","last_seen":"2026-04-28T06:56:13.329782Z","times_seen":4162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"89c0d88b9efce94c640662aa7371fad8","sha1":"65de619f964169486d6eb18050d5935af9178967","sha256":"e9e46635ae7f750735c734ec81dd5fce0808f67aaf16f0ca565ac410fa20cb81","sha512":"25e3fe2f125d45df3e611ac5f0c2279609df14bfd7076f71716a04de784e032054b06e741f606eae0b3aee61b879939ff17842cb2f8042e1bf7ecdadac3b5bf4","ssdeep":"","tlshash":"55f0e54ff8da32952233765d2fb78410ad2d184fb80eec4c3c8e89d05f3b0089052b58","size":446,"data":"","first_seen":"2025-03-18T04:27:57.51204Z","last_seen":"2026-04-30T14:40:38.644373Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"88bbc9580eb37a23a10493a491efce35","sha1":"e74deb57c8d89ff6732166c26884422d257556f4","sha256":"030dbbd6243d53827cc03786d6d317eee900878a5b6bff788445130857167638","sha512":"1f14b55a9bbf6db061c887465385b22d8ff3a1da3f9f8009a11716775f61631af038841a1ce2712be310622af0c02ce99fe8d6c670374bdab56a8d24eb3f891c","ssdeep":"","tlshash":"ef70000a3e08a3800033b028008f00080222800202000000088000880c3080b00828b8","size":22,"data":"","first_seen":"2026-04-23T09:07:29.212798Z","last_seen":"2026-04-28T06:56:13.252421Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d6ff1ddccaf97e074ac78d7d1749a658","sha1":"82ad3da0ddfd300d797c6ecb6684ffd871709181","sha256":"3ea1dbea78e232d2444e39d273b098d8c4a367e61b45c33f1f4303cb1eeb734d","sha512":"48ee2a1c5d6cf7d615a2aed8f7c13bec4a1047a6d5a1b47ca503f31772f59cd1017f0915f80e994559553e44b520ecde6808fc5d4ca68701b21bbd8e0dcbc8e5","ssdeep":"","tlshash":"c710000000c000000000000000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-09-06T10:27:18Z","last_seen":"2026-04-28T06:57:37.762923Z","times_seen":3756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:37:31.77123Z","times_seen":205047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ff298be29451b87d3c6ddcccd831d345","sha1":"a09186b4eab2ac885db236f068b37a360640d38b","sha256":"7633191875649be900b5de5102a6d38d1d2fd1aac17e6936a9d1b2e35bd921b0","sha512":"3e5684054d7132fc5c212d25a01c1b82394157329f9a74833d03ba5a9e212bde9737fc845cf692493cf39ddbdd3242f3a4a3cb1853842ed9a50d94bdcdff7177","ssdeep":"","tlshash":"539002a5b1c65440475651b418675884a025586114549a456541e5925c790229155d6c","size":50,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.719593Z","times_seen":989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"44e00710fd359efa60bebc675b0834de","sha1":"3a8b0c63a88a21ac464a7ed2b263dcb9156fc1b0","sha256":"d7d106ecdf61ff7ad3eecdd86c84ee4fbc2eec3615c52ea48bb4c7aa534a8522","sha512":"40dc685c7ebef603a00008ffe00ca7c513363aad80bee75dd34d3bb13c795a0e9deb96fbbe9a6224ffa8e78e28ff346842a379bdcd71f05960b37cccf1f1e88a","ssdeep":"","tlshash":"4a9022bc20c20002030200b00003088880a0002000c08a00000080830c28022023083c","size":51,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.828422Z","times_seen":515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7de7246ccf4a647628745944e4ee8361","sha1":"203ed42c986ce34ef16d7bf235c8e808b5d6aebe","sha256":"897e00f9bca8b79d086de89988fc176ad6b92c306feb7777157413553448f9ab","sha512":"b3e8ece63a3b1d20e7769d66ec4084c7906c5945d46e625f844c2ec3ef5c7bdf4de4f78108c168a135318759bd82c865e6bf00196854e787a12a3e4ae0442580","ssdeep":"","tlshash":"aad0a7655300a5411ef2a05918ea1a9af1192494a0150d48ab5e9ff05e330925545d5d","size":211,"data":"","first_seen":"2026-04-23T10:38:24.212675Z","last_seen":"2026-04-28T06:57:37.811758Z","times_seen":1039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"89c0d88b9efce94c640662aa7371fad8","sha1":"65de619f964169486d6eb18050d5935af9178967","sha256":"e9e46635ae7f750735c734ec81dd5fce0808f67aaf16f0ca565ac410fa20cb81","sha512":"25e3fe2f125d45df3e611ac5f0c2279609df14bfd7076f71716a04de784e032054b06e741f606eae0b3aee61b879939ff17842cb2f8042e1bf7ecdadac3b5bf4","ssdeep":"","tlshash":"55f0e54ff8da32952233765d2fb78410ad2d184fb80eec4c3c8e89d05f3b0089052b58","size":446,"data":"","first_seen":"2025-03-18T04:27:57.51204Z","last_seen":"2026-04-30T14:40:38.644373Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-04-30T21:37:31.869273Z","times_seen":156689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e95011b6691877ba4351cbbbe30854e3","sha1":"aab00b734135458a8a6d1338cd82434ef3ac4e21","sha256":"5fc6eddb606a607734a27e7394d136b0ee28b0b30b72e11273947de31f7118c5","sha512":"5b471a8798c385b39a1c2c00896d5293da959c22eca99e77afe16ea54f525ef6b029d1ad72fec50554c1ede893cb870bb74327e3b46eb2e1f5f15fd90a9a9eab","ssdeep":"","tlshash":"e2a022b030e3200082af02202ca308c0822c003000008ce80800e0800e2cc32020cc2c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.832543Z","times_seen":1082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf688e4f41e436dc5afd5d3e9c7e5d69","sha1":"fe027179594c847f8da908fb0fc6d7cd321212fc","sha256":"a283e24e6187dbb5a4d27b66a9af47b4560072a29780bc6bad09bc9c04fdc37f","sha512":"ec6d82d1b9ef75ecb201a8953256e11e5edf54aba8df8994b885b0f0e14f0be9cdad36d899e6db87385d11bd9421bd79fb415c8d9ca637953c85827b7a3637c5","ssdeep":"","tlshash":"cfe0221339a21182b4bf20149fab238005930217c0d7ca033c2f69902f132b37883aaa","size":425,"data":"","first_seen":"2025-03-18T04:27:57.573202Z","last_seen":"2026-04-30T14:40:38.65057Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9e3669d19b675bd57058fd4664205d2a","sha1":"7a38d8cbd20d9932ba948efaa364bb62651d5ad4","sha256":"4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080","sha512":"7b0776dbac74a9abb8a0d0119c73ae82efbb1b95af009f0669e2b52c9664f7fbb458ddf3abd7ccf0617ab69362a13ade046c4f19490710e5d8937ba72efa90aa","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-04-30T16:48:54.969963Z","times_seen":55499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bffc62036a8ebe655fc45067aeb85f45","sha1":"9c0e6dd7d0406c8b73a88f5f683a3fab19682414","sha256":"d18295949e26e569884dd1f3aca05993e8bb95333ffb77482dd741a6e0613def","sha512":"e6725732e4d1b35715712d5737b61354c26452d74befa96db657fedda5289cadaa87fa09cc779995f2c35cd5e5aae6329640ecf5afdec8a783808077d5cee07f","ssdeep":"","tlshash":"5fc08c8ca856f7cc600a36223a4f23143aadf82851141920803492eaa8b1e825007cee","size":162,"data":"","first_seen":"2026-04-23T10:38:24.241721Z","last_seen":"2026-04-28T06:57:37.769504Z","times_seen":1057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-04-30T21:37:31.89692Z","times_seen":133935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"50a42204409d4960be74b60bc7449202","sha1":"4a6bc5ba299a11c027429529df32995b6f8720ba","sha256":"ad39af33539ade9ee75a3871ad6c71589cda04c00dd812a52fe57060a6514577","sha512":"6f2efbf32e20abcf74ab1d83e7568a7c3e1b06d89ec30cf7f4912a672708dece4978b4a9017e2e4d6ef6e8606070da5d21c1856236ec4677a7419e2689a17c2c","ssdeep":"","tlshash":"549002ea22c75815475651e414971a84902884a024459d455444d5d25c694329155d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.64889Z","times_seen":884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/bootstrap-select.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","size":111455,"data":"","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-04-30T14:40:38.609201Z","times_seen":429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b9ece18c950afbfa6b0fdbfa4ff731d3","sha1":"c2c53d66948214258a26ca9ca845d7ac0c17f8e7","sha256":"e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3","sha512":"b2396a002fe7aec008808687d7cbacb340b7f7a090008382f3c95870f6fb10415f61f5737c102d4bfec58fe525407ea2001e761dab1da8a501d9523921f0ec21","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000c0000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-30T16:48:55.01098Z","times_seen":46376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6593d7b12fd418cdb35bbf438de72f66","sha1":"842f4ac15c5e237ca4c7a77d13e8756cefaf9898","sha256":"1398b376fdcce25c5a5399367e76891e85121c010ec919cc243b1a519d95bbc6","sha512":"5da0f6557c7b7b8834b438e7e445da29ae1671f9a47b07630ef63db5514706a2682b179863ecc6fa118f4b3990853b354200bee532a0264fc7b21cb4f3e05572","ssdeep":"","tlshash":"c710000030000c0000000000000000000000000000c00c000000000000000000000000","size":2,"data":"","first_seen":"2023-08-03T09:01:56Z","last_seen":"2026-04-28T06:57:37.839522Z","times_seen":3579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-30T21:37:31.903782Z","times_seen":291260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d48a24ae9672ee573050e4d3aeeebe4d","sha1":"8f8c4d27852980a1ec5a8b1aba30769001314ec8","sha256":"53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255","sha512":"02dd385ce15083c89617859325e29ce885ae235c8c5be416828066dcb5db78e69229802d87aaf759224e2656ab4c23bf1740ae1d357cfdb57ebf78ab77488921","ssdeep":"","tlshash":"43800020202088288888200b20308b8abaa0a228a83a2000a08c8e2cb822e80a038820","size":29,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-30T21:37:31.868575Z","times_seen":154075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/bootstrap-select.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","size":111455,"data":"","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-04-30T14:40:38.609201Z","times_seen":429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"a7a51ff3fa8a29204c4d6f1686a1c22b","sha1":"d7608a8be17f92d72c171e6f38269dbf8c1e66ba","sha256":"21d2e086a89a2016fb290f67c6a5cb3bb70088e30a74a1f304a4829f52114c22","sha512":"b548be0874214fa3594d056d58da019370c7fc0ed95153006fa09821d75de1d9e5a4f1faaafbd40f5eae936f19b2692259c588d555659f840e0f678600ac701d","ssdeep":"","tlshash":"f49002a9b1c69440475651b4186719c4a0254864145599455540d5925c7d4229155e6c","size":50,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.6632Z","times_seen":978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-30T21:37:31.903782Z","times_seen":291260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/popper.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","size":20973,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T20:37:22.687725Z","times_seen":7240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fbade9e36a3f36d3d676c1b808451dd7","sha1":"395df8f7c51f007019cb30201c49e884b46b92fa","sha256":"594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06","sha512":"5ae625665f3e0bd0a065ed07a41989e4025b79d13930a2a8c57d6b4325226707d956a082d1e91b4d96a793562df98fd03c9dcf743c9c7b4e3055d4f9f09ba015","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000300000000300000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-30T21:37:31.797116Z","times_seen":50195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/FoOei4fj9jUnx6rvPbVHvM55F0czOW7QDMlXbJStOTQ.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f8288fa854b624215d7a9bbb9f8500","sha1":"8fd6397ce7a2e5dfab87ac92f421300994942a48","sha256":"16839e8b87e3f63527c7aaef3db547bcce79174733396ed00cc9576c94ad3934","sha512":"dfdc58bcf5cd5d4d6dc295627e9aa095453f58197e03bfeaf2d111da58dee4c5def5d2249d50a68075db2461971ff37e6542edba495b7fd34752eaa06967d0b1","ssdeep":"1536:jDIp4rESx3w/hSOOUMGnrGz4kbAXqn4ji/u:7rWkUZGUS4v","tlshash":"3f5329cfb1d2b3215ee2a1e244ab410de27ea5185c48180fbd44fbf49e749879437f6a","size":62403,"data":"","first_seen":"2026-04-23T09:07:29.108944Z","last_seen":"2026-04-28T06:57:37.635258Z","times_seen":1089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"87521b659d343aeb7e7450839ec5cb98","sha1":"4b3032e11383cd7d9e259c376dce4c99a6f56d2b","sha256":"c45439e874c4bed7bcbd5a785cb79b55a6a71e35e988147245a729bee438c9fa","sha512":"bbeec6ed240337520b5a0aacefd3b7748484aca055c6bb450adf6b9c67e1b3e363f87c4dc9a849d8397da7480ceee361ec90a2b72ce0ff2b55b2bdd28eec5783","ssdeep":"","tlshash":"c7100000000000003000000000000000000000000000c0000000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T08:44:38Z","last_seen":"2026-04-28T06:57:37.771503Z","times_seen":2922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/livestamp.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","size":1414,"data":"","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-04-30T14:40:38.626328Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"c1421189c529b47d0591f1ac5a31f9c2","sha1":"4df5f4a0ad98e373433dfe66a76e3757d2019266","sha256":"9b3f326aad3107f5b287dfa61a64ee39dbe6c3586b40a01d8733e9e45cab0cf6","sha512":"4139ef4fe0e04864dea508aa90dc310771e782b1cd8a7af25305e0471ebbed2758c233c7696a93af9c06bc0ef853c7f0d30901eb6bfba873568e64f2c2fe1486","ssdeep":"","tlshash":"e6a002bc76c25110829f117c1da72884996d44611414a9ea5914e8e56d7ea36c72ecec","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.648334Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"84c5af313a18d84195bcd1321d6dea98","sha1":"3746f45afa0f0c06fd6bde51f8112911f5b55906","sha256":"3b34a9c0c9933c5b7eaf50ff6043c3e0e87a657e6e3046031680c6b39466fb9f","sha512":"361ab3e019266a9b704d421ed24d6d0b57b4fcd5ee92d6df68c0227ec0adf79f7c5f1d00d580309c459f1e905a59ce9354bbf16eb295f19de32c4d7c7a050990","ssdeep":"","tlshash":"3da022b830c28000828f00200ce308c8a8ec082000808ae80828c8a80c2c838023ccbc","size":63,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.720438Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"221ca4d17fe8c2872d1455069f505080","sha1":"d9891730f21189ed7f8a2329a2308291094aaae3","sha256":"49265bc0f60838eac69470557b9c93defe407c923da1715cd07645abd09f1874","sha512":"8face721bc6245c13e020e3aa3c6a44333d777bd4f283ee5725390615d3bae40b7103f9336b1082737c69756836bc537bc1723ac68c4e080958df883827fd66e","ssdeep":"","tlshash":"8ed0a768f73521156a1f0dd22d8fe0e914a915a2be007c0d55651d7181bed8d506cc85","size":230,"data":"","first_seen":"2026-04-23T13:20:27.828431Z","last_seen":"2026-04-28T06:57:37.843975Z","times_seen":1054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"6f1d8ae58cf1149f75e38e1e35be8e8b","sha1":"17b0b083b783f7029ed4913ed8a8fb6d09946ec2","sha256":"98f7d5ea481e5f06faf8be71cbf2ebfc8d22df6faad66df8ffe22596a44161ed","sha512":"fcaaef0dcb7a5fc169a50f7f9dc6387e1d1d4213242858e4dc2a099e869e3d7cb00f45dcdfb511ba813b910d3d05c4c7f4eca5be79a5a53686e00889b0a645d3","ssdeep":"","tlshash":"249002a923ca5400475726a415571c84a06444b05445da85545196d25d655225126b6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.805329Z","times_seen":944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"ff298be29451b87d3c6ddcccd831d345","sha1":"a09186b4eab2ac885db236f068b37a360640d38b","sha256":"7633191875649be900b5de5102a6d38d1d2fd1aac17e6936a9d1b2e35bd921b0","sha512":"3e5684054d7132fc5c212d25a01c1b82394157329f9a74833d03ba5a9e212bde9737fc845cf692493cf39ddbdd3242f3a4a3cb1853842ed9a50d94bdcdff7177","ssdeep":"","tlshash":"539002a5b1c65440475651b418675884a025586114549a456541e5925c790229155d6c","size":50,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.719593Z","times_seen":989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0e8d7dab7655b37b5319d430dd57a385","sha1":"e5051d5af33934fe9d75863124f7ec87ba1ac4d5","sha256":"7c882140fdec68ac8ab82ce7b8f1713fe19b9a6d2179c3b21516044ecf13ce76","sha512":"06445f13279a033af762aef575d2436f2ac496963bfcac08d67ce9d5c987c791e206c2c5b3a0f7ad163568c7558c440878571717c7690d6e73ddab3eea9fa4f4","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000300000000000000000000","size":2,"data":"","first_seen":"2023-03-08T12:10:41Z","last_seen":"2026-04-28T06:57:37.792023Z","times_seen":3215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2707293c36249150dc47e1cb81bfd7b","sha1":"f793b5e0c02283ca9c22d55612fd58e9b4cc5c3e","sha256":"b0cfb0ddf0f9ddf2d13b8880fdfe970a89f28840e259b2cb1c01f7d96a89cdd4","sha512":"01706601defa093a1a6c863be816d003000b9d9ac88b43817cbb7f96908278dff73e7ce6611754ff0072f527a1c089359163f1e5e08667f19a53033f4dd61369","ssdeep":"","tlshash":"a8c02b1a03e00341d34d01e040038129f022188f3c14665dc7846006d2141c261eec1a","size":132,"data":"","first_seen":"2026-04-23T10:38:24.174129Z","last_seen":"2026-04-28T06:57:37.751196Z","times_seen":1048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-30T21:35:56.835602Z","times_seen":17886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"08ec787bcd318f1c7a7d3f78e06e863b","sha1":"d335bd811f1ae9a38c198093343c5eaa0ca2e88b","sha256":"81988dc4b5e4db24dc6d5bb604bfc85d6f21559e2e198cdeba569b03aca6272e","sha512":"3e43493139559db484c8641bfee98157137d7d45946afabf130880fa6e40b798aaac85c00e8a466bff68f9edb63525f783b944ba5e2c69cb6faf925c72a08b4b","ssdeep":"","tlshash":"2c70000a3e08a30000333028008f000c022280020a000000088002880c3080a80828b8","size":22,"data":"","first_seen":"2026-04-23T09:07:29.250456Z","last_seen":"2026-04-28T06:56:13.234686Z","times_seen":1034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0e8d7dab7655b37b5319d430dd57a385","sha1":"e5051d5af33934fe9d75863124f7ec87ba1ac4d5","sha256":"7c882140fdec68ac8ab82ce7b8f1713fe19b9a6d2179c3b21516044ecf13ce76","sha512":"06445f13279a033af762aef575d2436f2ac496963bfcac08d67ce9d5c987c791e206c2c5b3a0f7ad163568c7558c440878571717c7690d6e73ddab3eea9fa4f4","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000300000000000000000000","size":2,"data":"","first_seen":"2023-03-08T12:10:41Z","last_seen":"2026-04-28T06:57:37.792023Z","times_seen":3215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/bootstrap.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","size":55775,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T20:37:22.704013Z","times_seen":3869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"c46f95bd1ab9bf89746108cdd87d66c9","sha1":"de2affdc75440e298768ba0b2a23778a596bd963","sha256":"2eed8da773f8f48aa85bcce28a3d357486a64abab736fac54a2ac32e1cc710f5","sha512":"0175a732bdb8edb3845dbcdb1a2b4a73adaff993c2071d6e44b1b982e1e96c9dce5aea04e4d720f35e9845fbd2b7fc2730fed447b91bce18b5482e18dfa9fa5e","ssdeep":"","tlshash":"fda002e92ac65650475212a465573885a07484711888e9955840d9b65e7e02691269ac","size":58,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.710485Z","times_seen":980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fbade9e36a3f36d3d676c1b808451dd7","sha1":"395df8f7c51f007019cb30201c49e884b46b92fa","sha256":"594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06","sha512":"5ae625665f3e0bd0a065ed07a41989e4025b79d13930a2a8c57d6b4325226707d956a082d1e91b4d96a793562df98fd03c9dcf743c9c7b4e3055d4f9f09ba015","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000300000000300000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-30T21:37:31.797116Z","times_seen":50195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c012780597a31b182d6b086552266ecf","sha1":"dc7c320c20e2ea67b4fabb674e2e338684b9bcf3","sha256":"92cfb13883ce1cfcba493c854cfe233f367a59a999d932e0b31eea262bdcfb49","sha512":"91fdb2e1effed609e5816b082cfc7f60977530b47f6202fb712f7833e014e9a3c87d77d95100a943aa19f89f296c53629373e4a9d0a793d455555e95f1813d34","ssdeep":"1536:FIMDMOBoyxvtwVVh/WOaMq4rNYTCtoKLtEWgi/:TXyyeuOaMq4rNYTCtoKLtEWgi/","tlshash":"fb7386241868a8768493d507deb9ff3e9cf816790bc89a6dbcb7875c01ec6610e9f413","size":77311,"data":"","first_seen":"2026-04-27T17:19:36.073054Z","last_seen":"2026-04-27T17:19:36.073054Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bfc60714f62f15e1e72e0b21454cc99e","sha1":"d6c4a95bfd294d7232cadf121308900ae6df7e99","sha256":"69ccf59b416bc5b36e3bce0b5bb9a8b04c4d5434ef56a18dce4d5aecd9c5ac9f","sha512":"b8c4566ae95eb5dd94194c1287e516b345e4d2cfb732f6f2a75664bf2ced75df58b400bdef9b704a8cca6125e1b0bc8f602e732b3dd730eee003e545bbfcaa9f","ssdeep":"","tlshash":"c710000003000000000000000000000000000000000000000c00000000000003000000","size":2,"data":"","first_seen":"2023-06-05T09:06:05Z","last_seen":"2026-04-28T06:57:37.821645Z","times_seen":2586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-04-30T21:37:31.787926Z","times_seen":67375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d61f8370cad1d412f80b84d143e1257","sha1":"32096c2e0eff33d844ee6d675407ace18289357d","sha256":"6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d","sha512":"3d637ae63d59522dd3cb1b81c1ad67e56d46185b0971e0bc7dd2d8ad3b26090acb634c252fc6a63b3766934314ea1a6e59fa0c8c2bc027a7b6a460b291cd4dfb","ssdeep":"","tlshash":"c700000000000000c000003300000000000000000000000000000000c0000000000000","size":1,"data":"","first_seen":"2023-03-07T12:12:28Z","last_seen":"2026-04-30T21:05:35.438278Z","times_seen":70210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b9ece18c950afbfa6b0fdbfa4ff731d3","sha1":"c2c53d66948214258a26ca9ca845d7ac0c17f8e7","sha256":"e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3","sha512":"b2396a002fe7aec008808687d7cbacb340b7f7a090008382f3c95870f6fb10415f61f5737c102d4bfec58fe525407ea2001e761dab1da8a501d9523921f0ec21","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000c0000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-30T16:48:55.01098Z","times_seen":46376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-30T21:37:31.891387Z","times_seen":138102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"04b3870fa5c2671f19224830e69001fc","sha1":"d87452bfc3c8dc0871f12c5ee9fb229487a9b083","sha256":"d6df249c983e91dd7a1a847d8c8c8265923823dee9dd562c1b8c69e3a9264f16","sha512":"a9399abc73872eef47003f77a96be187fa0f3d9e0b507fafe88e9a91c95b4ff9f4b5707bb0d08bdde9a60ac95fc16fa062168d3ec7227dddcbf05a4664960324","ssdeep":"","tlshash":"8aa002b4b5c26040869f51741cb718c4a56e4d64102499e95914d8a55d7d835815dd6c","size":62,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.738785Z","times_seen":978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c716548f4cf58020b7ca072f317809bf","sha1":"c6891eefb270f65c3c832039b78d38ee730ba9c7","sha256":"5f04472b22946425a53b1cef9843e6bff7b3ed4dba183115d0d987dc050d5a7e","sha512":"7cc5312ac8769e218275f152c927773626b157285d8074305581c32a590c79289949ab5cd8adb2477fa4b28d3e9cff31844f1beca40022897b128c69641a76e5","ssdeep":"","tlshash":"2ca012b070c18000424f13292a52084084bc0410101854940c0880555b5a831012ae5c","size":81,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.682253Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"ece7936b29ded3a84e3e16fab6974d12","sha1":"9414a87e48e508a51ae8a3e02e67cd4fba776480","sha256":"010b3717109c6b06c079cba6fdd598931c10c034b23d8062fb7a257850196810","sha512":"85beb4f37ce74fd4b226ec155923394cbec8048b2d094a70c0b6a0388010ce700fd2a101dcd38ccf7eafc15d0d2f705d8880f234e6757920e18df0f9cd65dd0d","ssdeep":"","tlshash":"ec9002b521e66420476616a424571c849128587024489d455441e5925d655635215d6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.679587Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"80cbca5d7f86a5a024943dc5a08bef9f","sha1":"01f20f3873079d5997fa086b64152225cb9dc45f","sha256":"7bf6523bf719ca16e9e83821d0f354775d30927a8109f563b1286ddb3255a491","sha512":"5c6b978fded755df1023b9afbe73f5cc4e0a5a581ce3de3e13f274c036669008228fb87d9e7a43d3da366a5b248c7c9fbbc3498ae3347a898019c60c745451cb","ssdeep":"","tlshash":"f2a022f020c38000038323be23230c80c0b80822080ca8000c8880a3afa30330233fec","size":69,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.770573Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"1ae2638fe717dc1a9721c2516d6cc8f8","sha1":"da474776ace698e8eeadff08461b33750dd8703b","sha256":"1625c3753219abc041367797b87805459044bee4a7714afd7cb75b5773d03b1e","sha512":"1c29b333c88989708394cf468d5cb8921c6effc2fbdc60fe4e1d4e5b7c10a14c70fc2b5148fce4c1ff2aa869c84187c39a1d4641ebe2b4b90df3c09cdfa4a3a4","ssdeep":"","tlshash":"669002a525d75825475611a4149729849028846014459f555445d5d25c690329155d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.652836Z","times_seen":896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-04-30T21:37:31.789719Z","times_seen":217182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f207f8b5dfe1eebac63467930df5189","sha1":"8dbc6058e03353809813416c6830708abaf9d223","sha256":"97fb5f8538b89f6c1accfd19836b65a73b61fbc2e0cbf84bb858a0fffa3f1592","sha512":"7d50d121a5feee3159054b88c68b4c96d5bfe51e0c78697dc3fbc4e50f33c39e4cde2e271455167ee07e42e8d4791922d032b965cae9037c5f4e5eb44ddf4336","ssdeep":"","tlshash":"c71000030000000000000000000000000c00000000000c000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T17:04:31Z","last_seen":"2026-04-28T06:57:37.824503Z","times_seen":2556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"155ff2ab7b3c9e51852f360df788d0aa","sha1":"15996eefc12410225943c548fa5ccabeb25238a6","sha256":"cbe9dfcfcb5410bbd25a31907fb3c018239653206dd0236feead31415167340e","sha512":"4995918e58079c4ae3240ce872cd71099c57b413eed403b3f3c2e0dff56e5e6767550488b14644e3194577891aa87d8edebe965c60acccd3be34e8762960db9f","ssdeep":"","tlshash":"2f7000083c08a0000023322000cb0008002ac020008000800a2000880c3200a0002888","size":22,"data":"","first_seen":"2024-12-05T14:24:30.650167Z","last_seen":"2026-04-28T06:57:37.842622Z","times_seen":1045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"72a31cce51a0a8d97a27b6acc685cc72","sha1":"0178df22d3d2102b37996d8baa3274d051f0efaa","sha256":"9ab81cb3b6209662d55aac3c307b41383ea64fc7938abd096bf498db0fbbe8f4","sha512":"9f261bb93e87b5ab4f01040563e806ffdf9442f9181adb482803700243ba5c73354d0685ef5515c10fbf927012b82804eee5defc358450317364cbd3522bc2fe","ssdeep":"","tlshash":"e6e0c03d156b6260ab731842ffdbde1ca05437f40b4d1d4ed32031d4c077ca64a10536","size":350,"data":"","first_seen":"2026-04-23T09:07:29.334189Z","last_seen":"2026-04-28T06:57:37.795192Z","times_seen":1039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"721ba255ee9a864e04eb79883fb6b60e","sha1":"788b9a573554cd3b852a805ecb7bccd0f56d2ff8","sha256":"9641c9287ce79b5e2268da9d84f803d38115eb660bcf5da10de5363de230d360","sha512":"72b7f3ca049f073364ef8030ca0c12dbd83acba5e21122d3adfa7d419c4190c0b5a173a5c9c43f0466b60c3abb0d7852ec97454e52333e2526e78031a983ea8d","ssdeep":"","tlshash":"9ca022002ca03c0802ae30003cfb0808fa2ec23ca2c83f200800c030e8f320a0002ccc","size":70,"data":"","first_seen":"2026-04-23T09:07:29.231487Z","last_seen":"2026-04-28T06:57:37.768694Z","times_seen":1084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1618fa24561ea92b25a66fd40a89a1b","sha1":"217fbedf76b6883e83fb711f3d4df5f642ab34d3","sha256":"637d045d50470edde480f35faf2c756b5d70cf49ff9c32c79cf668f36e3dd292","sha512":"101f2198e5634cf5002290c38e8c9a2e2af6862c0f2b87541459aa0c11ccb96f1f54543a4a29fbb34c325d1f60541b65c0fdff13d99b39a7610eaa83a7b38f2d","ssdeep":"","tlshash":"90d02e4330e24f087086aba2d2ff03ae430075223b4f0248cd1a2a00b802c8b8423cce","size":280,"data":"","first_seen":"2026-04-23T13:20:27.811238Z","last_seen":"2026-04-28T06:56:13.308469Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e4c8f1de1c0855c7c2be33196d3c3537","sha1":"1fd6a880ee16bb33003559b204f8a2cff5a9e90c","sha256":"b28037e918b609ca7202c47f39ef3a8796d2878057efcf6a7e464e0e2d299b74","sha512":"27509890b76a772dfee54f13d2a388bbfbd9fc5b58110bcf6ec3eb6fdaf8c25d776559490c35319a69074980df112f6176802939fc7cc2ae17d824780d6e6b4f","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-14T17:56:21Z","last_seen":"2026-04-28T06:57:37.860702Z","times_seen":3119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"12eb2460af92f8ca0a2720950ad8d102","sha1":"34ecdc7eb047fb7d569e2fd033ec747ff396ebe6","sha256":"5fd5f142046c61e69e48cde4b7edda752fbb459bae32404b30e5b5fdbe0622ee","sha512":"8f531ddfdd3922f4f251636bb77d97a9f94a6e123d4713acae99b485e98f565a1b6a08ba9f5b16a08e44f8242c02c53afdfde89254626a98e14a2ba6d61103c1","ssdeep":"","tlshash":"03d02282b205549c71a35c73b77ebb000d5ecdd5c801edc3baa9eab202f1007a072a27","size":209,"data":"","first_seen":"2026-04-23T09:07:29.165027Z","last_seen":"2026-04-28T06:57:37.808471Z","times_seen":1057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"d541184c411d2e0ff266f06e5c983a29","sha1":"ac1d9fe0ae9c0a031a63b30825249f03bb6aac89","sha256":"f42dcf5b668f506b276e257a406d7ce854a47c9d672138b93764ba07801aecb1","sha512":"17b06446eb79fb694812b37fa5a1cfae3d4858f9fb762db01143fbd49964cdd775698b6ea44af15d84615945f3a25e10ce22b124b8447a2f99bd4272d462864b","ssdeep":"","tlshash":"bf9002a561c6541047d221a424571985902444605444ad455440d5925d750625615a6c","size":49,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.739586Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2b3492beddb0203ef8328e3bef41df22","sha1":"04a80b48770168cf28c8b4c73ebbe95c7ecceccb","sha256":"cbac233b61bb6210bf71c1df4d9b0e469a280889507b7fb4e97dedc7ce3c3a01","sha512":"d141635797369b28fccdd1ef65a9274135fab02b56fcbe951845fc76d486d45b702acc1798560057e79ddb12c92096358b5678c8bee36a6d9343dcc88fc7d528","ssdeep":"","tlshash":"c710000000000000000300000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T13:02:29Z","last_seen":"2026-04-28T06:57:37.746472Z","times_seen":2869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:37:31.805028Z","times_seen":151625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-30T21:37:31.849108Z","times_seen":137145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"944bebadff1d6d6189165045058ee571","sha1":"c3aeacc5eec66f11e152ae176a99596f88aede43","sha256":"ae4d99a2773b68e01b6751ba60dfee11892fc8b8ddceaa7ec453356efb1f6181","sha512":"b7524c30f4882e0cb97c6b9c949d0c52d1fc549e4961ea084a9b6d592a4eb12c68d96c3006c7d972f60d6033ea9feeb4990afc77727a08cbde5ed59a5f779c67","ssdeep":"24576:TO3oC39/qL7WdmOeaCx1mhi4z1sZh8FphawIPWEmZDUtILFwEjLHtNVhH3Pc03lP:TO3oC39/qnWdmOeaCx1mhi4z1sZ4anPU","tlshash":"54655cd871e2b49647b2f0e958ab4502f63a3988744cc16cf67ddbe62ca0906507bff4","size":1493639,"data":"","first_seen":"2026-04-22T13:58:53.565335Z","last_seen":"2026-04-29T23:35:33.636398Z","times_seen":4510,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-27","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"448ac1da869ef36ecc85683af6d4aede","sha1":"27f78158ca05752c90aea7a4e1eb417ff6e339be","sha256":"0a0c67ba2343a9c27e37f535cee73eac3fd469dc32307a6d7427156aa159566b","sha512":"8e52a8415eb48e5f85d1aacd8c66b16bbb930c1631dd0d3598bbb8187e5b555f80199917dc6f1b238d98ebbea7c64aba0e4a0685bfa4cd73bd2e82fa2085d36b","ssdeep":"","tlshash":"82a011282803b8ea022a0020282ab08a3e8cca30e8008b020c0e88a88fa0a8208020c2","size":77,"data":"","first_seen":"2026-04-23T09:07:29.290227Z","last_seen":"2026-04-28T06:57:37.82104Z","times_seen":1049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"205192e763163373733bd1b4a6fa806f","sha1":"a5116a4c7c70a6be792ba0d202b44ca9e55fe902","sha256":"a4da71892031d304b918d696664cea251e980be70e70ab8336acd7f18e855c45","sha512":"59c25c2f7cbf7117b4618b3747bf6710c5a88268aa128929f1be46b2444a1f6ab864237285d810c582f26f416ae1feaedeacbb9c2ecd1e5525e665cd8c012e6b","ssdeep":"","tlshash":"59a011282802b8ea022a0020282a308a3e8cca20e8008b028c0e88a8cfa0a8a00020c2","size":77,"data":"","first_seen":"2026-04-23T09:07:29.269461Z","last_seen":"2026-04-28T06:57:37.798313Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"04b3870fa5c2671f19224830e69001fc","sha1":"d87452bfc3c8dc0871f12c5ee9fb229487a9b083","sha256":"d6df249c983e91dd7a1a847d8c8c8265923823dee9dd562c1b8c69e3a9264f16","sha512":"a9399abc73872eef47003f77a96be187fa0f3d9e0b507fafe88e9a91c95b4ff9f4b5707bb0d08bdde9a60ac95fc16fa062168d3ec7227dddcbf05a4664960324","ssdeep":"","tlshash":"8aa002b4b5c26040869f51741cb718c4a56e4d64102499e95914d8a55d7d835815dd6c","size":62,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.738785Z","times_seen":978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"7525d59cb1341118c89b0ceef17986e1","sha1":"0bd69301cd3437ce2448c6412204854aafaf9f3c","sha256":"05e0ed4070840eeac5243f24372aa4541960c70cb2f0c934c45dd3b9c86c20de","sha512":"2626e91f62d2af259ce40f67d4c6e364b4c140165bf2dfdd9b4b13807622262d862a554bd4c1b7af3b58b12bd2b1a33188e63dbf1c94de7b70884459d40f8a62","ssdeep":"","tlshash":"579002a531c75400477711e454675c85906c4c70344c998554409992ac650635515aac","size":56,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.668034Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"d8bcf14df70f441f678f9deef2090673","sha1":"4409996af1d40ad8f702d67dda1f4e20ef8e0aba","sha256":"f10a4c7f9d5894a49bee6d9f74138e614ca77df2199c71c5493efd8ae729c772","sha512":"bd1b6fba89e82768b453684cd8befa49a2bd53ef032e610841fcc7cccc6fdaf038519e16822101c1a8134bd3ac4a6ded590b30930f3dc6e8bd4e9d48b451b0ab","ssdeep":"","tlshash":"fba002b475d25010d29f11642da75884966d44601014a9f96818d4e95d6d835417dc6d","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.661164Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"69bffd0d447c177a2bd933602fd36337","sha1":"ad0ac60474291fad98a9f0569fec9b62f066fd9a","sha256":"ad84f6d8c30b41dfdc379f7afac853ba8d9289d447098be43a332cae2e901dee","sha512":"6150f50939e867429806a276586d65d9ffa461edb1c06154532f5154a85eb453b13bddd5fb3efc2d1e66fb2a5227e349891ca555ea46ccf3a821944ad3b964c7","ssdeep":"","tlshash":"f2c022c43969a578c1289c3f5077c540f7960584d0028a20e281feaebaa830948f9dd6","size":189,"data":"","first_seen":"2026-04-23T09:07:29.220517Z","last_seen":"2026-04-28T06:57:37.840113Z","times_seen":1036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10d4cdf5364929643783d1852bee7592","sha1":"12f3e5ceb9c69b01fee4f382d406a64341e7b0fa","sha256":"6e8bd864b47f9ca8cae036381ffd0693124a306d93fe88a3824430844693d86a","sha512":"aa6a6f9e70a01363a6db702e23055b0d640aac67f895e0d8e18d6fd7c81793b80e5346d84d99ca68fb0dab458783634dd46874a6dfbfd3ee9d204aab48fa3779","ssdeep":"","tlshash":"1b1194c66079342f4ecbced9049f18243ac0f9229f0c0d26f669dbe2e53152759b1347","size":981,"data":"","first_seen":"2026-04-23T09:07:29.271536Z","last_seen":"2026-04-28T06:57:37.741986Z","times_seen":1035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"ba29556b026f273d7a70c058aead19d6","sha1":"2612cb57faed7520df879e72f9ff4bef2aab91c9","sha256":"8a03a467bf8684a46c870d4342e1c9d47c27f3675167aecda508485a7bd01808","sha512":"62c3ad010e2ae930ec6e03713fb8c63f084fdbcb153fe0c003d8b817fe4a3bad5a3a95e0e90dd51b392dc81d2442251fdfad02e247712b2dfc9cfbe44287c501","ssdeep":"","tlshash":"7fa002e922c65404a7d311f814671a859029946255449ec99454a5e66c6d0269227a6c","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.65453Z","times_seen":1092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/FoOei4fj9jUnx6rvPbVHvM55F0czOW7QDMlXbJStOTQ.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f8288fa854b624215d7a9bbb9f8500","sha1":"8fd6397ce7a2e5dfab87ac92f421300994942a48","sha256":"16839e8b87e3f63527c7aaef3db547bcce79174733396ed00cc9576c94ad3934","sha512":"dfdc58bcf5cd5d4d6dc295627e9aa095453f58197e03bfeaf2d111da58dee4c5def5d2249d50a68075db2461971ff37e6542edba495b7fd34752eaa06967d0b1","ssdeep":"1536:jDIp4rESx3w/hSOOUMGnrGz4kbAXqn4ji/u:7rWkUZGUS4v","tlshash":"3f5329cfb1d2b3215ee2a1e244ab410de27ea5185c48180fbd44fbf49e749879437f6a","size":62403,"data":"","first_seen":"2026-04-23T09:07:29.108944Z","last_seen":"2026-04-28T06:57:37.635258Z","times_seen":1089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"b6701e8ade2624ff9e3b19f2995b4c13","sha1":"b2ff6e69ac79cb2b2cea3069c75a4e4a54a2af8c","sha256":"b6594e0be17f8980e5e3e4d2c6a80e450390eb815df9bfe77534728151ebb47e","sha512":"6cf2e3b2b5cdf5f2e437244f15fed2578b3648ad5907983f033368929631dc74c189aeccc6ae8b7f75fbc599e8898f75618e09d246ca5ed5f199442e20964533","ssdeep":"","tlshash":"48a022fc32c22c2083ef20200ceb28c0ec2c00300028a8f8a800c8a8cc3e830802ecfc","size":73,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.736207Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:37:31.807124Z","times_seen":216207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5bb9efc156051613af00441d4ad5a60","sha1":"4c9050aac72529fe8213230fa0879351812f4671","sha256":"b30757f7923476fe1122bdbbc243cd513664a826e8f7e49612b4b13a6a1df320","sha512":"f95c06ee685422ca8161ff9335dd12f74aac466972b3c8aa1e923797933d507ebb909761a074927061197482f5170883405af1106d9860535fe223fa40f36520","ssdeep":"","tlshash":"d3d0a7a4f82d6064990a5d473b8752cc3d5012133e14bf2904206a5cc26b904c6dc882","size":229,"data":"","first_seen":"2026-04-23T09:07:29.302138Z","last_seen":"2026-04-28T06:57:37.825666Z","times_seen":1064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"2efccd9846db8386590c71ab1775f72d","sha1":"88d57904906464ee5d38992931c0653087ad029d","sha256":"ab18f1aadfb36b3e80c5782fa8185e516eb14f6227d2acfaef2b876539fcd57a","sha512":"822dee0a45e5fc8f4c9882c102cfccce0ef9faaf126557dd784b4922511c923aa5539f0dff206aa77d9b3ec795440bab9c5a62de8a9f705a6b3ac841424f873c","ssdeep":"","tlshash":"aca002b5b5d2510092df11752ca718c4956d4860141499ed6814d8a56d6d835d23dc6c","size":62,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.698345Z","times_seen":903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"08ec787bcd318f1c7a7d3f78e06e863b","sha1":"d335bd811f1ae9a38c198093343c5eaa0ca2e88b","sha256":"81988dc4b5e4db24dc6d5bb604bfc85d6f21559e2e198cdeba569b03aca6272e","sha512":"3e43493139559db484c8641bfee98157137d7d45946afabf130880fa6e40b798aaac85c00e8a466bff68f9edb63525f783b944ba5e2c69cb6faf925c72a08b4b","ssdeep":"","tlshash":"2c70000a3e08a30000333028008f000c022280020a000000088002880c3080a80828b8","size":22,"data":"","first_seen":"2026-04-23T09:07:29.250456Z","last_seen":"2026-04-28T06:56:13.234686Z","times_seen":1034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"856ae3e8132f56d8e08b177042745400","sha1":"65b4f02723bbbb2b435d9667b020e6118633c339","sha256":"d0399c1ad867927eba32d230f325273e10085a20a583b2ce255225adf7ef4a96","sha512":"25f496f4d50091adae98cd3491b464d1293999df9ae6d907001e4453fd0340aaf6ae43dba4fc320222bb5d6071dea64372ad7099667e81b4c1ce71b088a04795","ssdeep":"","tlshash":"fa01260c06047d9c95069cd8c7c6a6615b9c9267be413115f82f454dbae3ae75870457","size":684,"data":"","first_seen":"2026-04-23T17:25:56.947928Z","last_seen":"2026-04-28T02:25:30.21351Z","times_seen":3300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=BBA4/d=1/rs=AN8SPfrvWxNtaBTz3Cqj0GGAYEmdZ0Lg_Q/m=el_conf","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7787972872afcdbd906c5e57e1329d5","sha1":"1a6113a0a59fbeaebdc5b83a6c0c645a85c25de1","sha256":"1c1f46e579e2918fc72feeb20809a336d3f4268787ba305d0a42f20659e9f7e9","sha512":"0edddb7abfa045b048e44393bc642a54048a2d02e757219a2764a62278bb07fc648024dac40c4d54a3c890068ddfe748286b872dba80cced017209162cc6f4be","ssdeep":"1536:XNzri7CtoSq2LILZLUGtYirKrhm3oQQ4CuPKucbRrWKiuwNWms:X9tILcirKrhQCKKibs","tlshash":"6f83c8c8b6a674a59353b5b5513f000eb23f589df8084dacb288d8f2adb5948413bf7d","size":80955,"data":"","first_seen":"2026-04-27T17:15:27.633807Z","last_seen":"2026-04-27T17:53:11.915019Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a7a51ff3fa8a29204c4d6f1686a1c22b","sha1":"d7608a8be17f92d72c171e6f38269dbf8c1e66ba","sha256":"21d2e086a89a2016fb290f67c6a5cb3bb70088e30a74a1f304a4829f52114c22","sha512":"b548be0874214fa3594d056d58da019370c7fc0ed95153006fa09821d75de1d9e5a4f1faaafbd40f5eae936f19b2692259c588d555659f840e0f678600ac701d","ssdeep":"","tlshash":"f49002a9b1c69440475651b4186719c4a0254864145599455540d5925c7d4229155e6c","size":50,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.6632Z","times_seen":978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"26652d91bcd6beee3afeb783c34cd38b","sha1":"9144f0001af5f37b01a76738fe34d589bd55587e","sha256":"a171e692c683d57a5dfea8c6d8b2611bbc3d0c4e35d6fa61cb2e3a9c3edf8302","sha512":"d5f5673b167d64d56a214410568681ffbf3c95ebd97a3a0ce987ed8d6095e283ab71d4a0b125af28e7bf57917b342a4cc95c823faa6e88115918854079135d27","ssdeep":"192:yzEjQfb/44Tmlavb+Nvyv8kYh0sxVjocbVW27sTM73Mc3Udq6bRXnLNy9nwQiFJX:+OQfbwxavBv5YisxVMcU27sTMDpXiFJX","tlshash":"9d22b70fa39579fcd7c15598b7a36b036cf4821b53082b1988cba0582cddf5942ab9ed","size":10007,"data":"","first_seen":"2026-03-19T22:23:51.236573Z","last_seen":"2026-04-30T21:37:31.815663Z","times_seen":28794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=derivefx.com","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b620a6d04e6f9e7807ec22d1a11ac2ba","sha1":"03693030cfb3b5ca3f548f790ea8151ddf6b8404","sha256":"86cf1e26177dffd78f5c5069421a250e9c713c935d870e8105c72634bdae95b2","sha512":"f60a608e893104da19be7119939b23e7fe9ea893e3e7db73c2b31d55959dd371e504ace149f68a74ace88b67e787e075386c70cbf74fc632f387655ea282377f","ssdeep":"12288:Gdc8RLxSn7pfK+OBING50o+Vcmxjb8kSbmpV:Gy8RFSn7pfKPqG5P+V9jbPV","tlshash":"80355c4dbb462815c39262a808ff11c6613a724a5805c8acb63cd6e56e7cddd21fff39","size":1097984,"data":"","first_seen":"2026-04-27T17:18:26.47048Z","last_seen":"2026-04-27T17:19:36.211854Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"24d3c0b3d9ae37cee478753d3a8ec384","sha1":"237fd03da6752cc4024ab80963ce25bab3be27a7","sha256":"3f1e0fc26b50554dac1bcb4ad7d600f1f842f6e241a41c85f598fb19553d9a3f","sha512":"29994344bf8c205fac4458f2deeb4f674b58c87d78f1b07f1a3bc2894a9124d2f4b97a1aa46d1cfc70291133434d1958cba03b7444642d31c359129316184e3d","ssdeep":"","tlshash":"2f9022e822c20000038200a800032888c02008200000b8000000c0b28c3c0228022aac","size":56,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.64662Z","times_seen":961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c6a675552648c0becb8283f05c172483","sha1":"5023fde21a93efcc45f3ef1278a03020db274d7f","sha256":"954edbbc5f5c2074629bd1c9f2d76ebffd42111688e6782d8ebe3a1e28d08652","sha512":"7118d9842a6480ca5dfd3cdafbc073a3cdb5cb0043599c499d1e5eaa5756fbcccc090d6cdd46957091e0d3b314de979f19cac0726489d35caafd4b6c1cd8433b","ssdeep":"","tlshash":"c710000000000000000000000000000000003000000300000000300000000000000000","size":2,"data":"","first_seen":"2023-03-07T15:42:45Z","last_seen":"2026-04-28T06:57:37.846356Z","times_seen":2629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"88bbc9580eb37a23a10493a491efce35","sha1":"e74deb57c8d89ff6732166c26884422d257556f4","sha256":"030dbbd6243d53827cc03786d6d317eee900878a5b6bff788445130857167638","sha512":"1f14b55a9bbf6db061c887465385b22d8ff3a1da3f9f8009a11716775f61631af038841a1ce2712be310622af0c02ce99fe8d6c670374bdab56a8d24eb3f891c","ssdeep":"","tlshash":"ef70000a3e08a3800033b028008f00080222800202000000088000880c3080b00828b8","size":22,"data":"","first_seen":"2026-04-23T09:07:29.212798Z","last_seen":"2026-04-28T06:56:13.252421Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf688e4f41e436dc5afd5d3e9c7e5d69","sha1":"fe027179594c847f8da908fb0fc6d7cd321212fc","sha256":"a283e24e6187dbb5a4d27b66a9af47b4560072a29780bc6bad09bc9c04fdc37f","sha512":"ec6d82d1b9ef75ecb201a8953256e11e5edf54aba8df8994b885b0f0e14f0be9cdad36d899e6db87385d11bd9421bd79fb415c8d9ca637953c85827b7a3637c5","ssdeep":"","tlshash":"cfe0221339a21182b4bf20149fab238005930217c0d7ca033c2f69902f132b37883aaa","size":425,"data":"","first_seen":"2025-03-18T04:27:57.573202Z","last_seen":"2026-04-30T14:40:38.65057Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-30T21:37:31.874422Z","times_seen":139951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ff727817abdbf227f00af3ed93ec7825","sha1":"999b125a465cd3efb3cb6fc0d6e3a635909b9066","sha256":"8db560cebeb2515ceee73bebe9eafb46aa250578c00857c4dfffaa9ae5e0f7c1","sha512":"581ea68d6c8b383df2a2ff867e5598967fc09a27b7a0e295332b6257e863180da8cd3d513fb58daaf6cd27e41835928564e2167e71493d33d998db28c53bedd3","ssdeep":"","tlshash":"539002aa21d65402575211a415571888a1a4447014c49b85545695926c69166523597c","size":51,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.758346Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b0d8913d4dfb85c2325c0773ff52ae98","sha1":"0ad631fe7c0afbb8e46dff643ecb6f157f0f17c2","sha256":"e52e1ceda3c73b493c102c8085db4343bae2f6f9fec59b841578b1c89bb0b206","sha512":"7ac853d254ec63543493f742f368dd341b6b31b00697e03d9ce9b320a49c4211fbf0d1d2aca1dd8d2fff2ab3685a90d64395751a7673a8376d0611267f0f1db1","ssdeep":"","tlshash":"c710000000000000000000000000000000030000000000000c00030000000000000003","size":2,"data":"","first_seen":"2023-06-02T19:07:43Z","last_seen":"2026-04-28T06:57:37.851966Z","times_seen":2924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0cc175b9c0f1b6a831c399e269772661","sha1":"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8","sha256":"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb","sha512":"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:35:10.529571Z","times_seen":67215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"f2f1d783a258a064f7da827d82c5b0a2","sha1":"4acb17f12e77e8d0d2204bcf480f77d4c0cf37bb","sha256":"c8b90c4261834cdbffdeaf4c6bb87df3e76e08d5b4ed5e6a8ea7d6d00af4df92","sha512":"d5ed63e5b76b1e27a58a4faae6038bf11f7753c458482e0c4f35b2e13ac6c7dc48e574ae75e6df73b5694297eb73c964888212e56403aad184f09c5215cbca9c","ssdeep":"","tlshash":"b2a002f876c65000829f26642de71cc499ad48601015e9e96824d9e56e6dc35412ecac","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.792634Z","times_seen":933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"338abf93e6a5f7d2a293722a87719962","sha1":"b392381104d89a7cf3f187184f1da75a05a0df11","sha256":"164a3be237713c388f122a804b7ad1180d00a435b5cc66c994125d0670448fa3","sha512":"a40113a661bae8bdd281df35d6e2395e50aa54050b6a40516b81913a80391e38099c7ae43f0bebec3a6d503e60f607468b1ff558e0f85fb3505ac52e1ff2d0c4","ssdeep":"","tlshash":"d8d0a73d5c3c517d343b4099aa7f91f2a8997c5813191e04aab061ed1ab0088a4d0337","size":238,"data":"","first_seen":"2026-04-23T09:07:29.23384Z","last_seen":"2026-04-28T06:57:37.798872Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2b3492beddb0203ef8328e3bef41df22","sha1":"04a80b48770168cf28c8b4c73ebbe95c7ecceccb","sha256":"cbac233b61bb6210bf71c1df4d9b0e469a280889507b7fb4e97dedc7ce3c3a01","sha512":"d141635797369b28fccdd1ef65a9274135fab02b56fcbe951845fc76d486d45b702acc1798560057e79ddb12c92096358b5678c8bee36a6d9343dcc88fc7d528","ssdeep":"","tlshash":"c710000000000000000300000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T13:02:29Z","last_seen":"2026-04-28T06:57:37.746472Z","times_seen":2869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"87521b659d343aeb7e7450839ec5cb98","sha1":"4b3032e11383cd7d9e259c376dce4c99a6f56d2b","sha256":"c45439e874c4bed7bcbd5a785cb79b55a6a71e35e988147245a729bee438c9fa","sha512":"bbeec6ed240337520b5a0aacefd3b7748484aca055c6bb450adf6b9c67e1b3e363f87c4dc9a849d8397da7480ceee361ec90a2b72ce0ff2b55b2bdd28eec5783","ssdeep":"","tlshash":"c7100000000000003000000000000000000000000000c0000000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T08:44:38Z","last_seen":"2026-04-28T06:57:37.771503Z","times_seen":2922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7de7246ccf4a647628745944e4ee8361","sha1":"203ed42c986ce34ef16d7bf235c8e808b5d6aebe","sha256":"897e00f9bca8b79d086de89988fc176ad6b92c306feb7777157413553448f9ab","sha512":"b3e8ece63a3b1d20e7769d66ec4084c7906c5945d46e625f844c2ec3ef5c7bdf4de4f78108c168a135318759bd82c865e6bf00196854e787a12a3e4ae0442580","ssdeep":"","tlshash":"aad0a7655300a5411ef2a05918ea1a9af1192494a0150d48ab5e9ff05e330925545d5d","size":211,"data":"","first_seen":"2026-04-23T10:38:24.212675Z","last_seen":"2026-04-28T06:57:37.811758Z","times_seen":1039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5221752f0019ddc23db2409b1e580b7d","sha1":"ab2478705eb3045a4b015a4dfc026aedfb68c146","sha256":"735c310717158d6446da1b32223eace957c2174abaa4c6f9485152896a13f04d","sha512":"67798577d46bdef59ef5a829f7641f636100137c6f5c8f744fc89d95745cbe15576a93d2e1d8ddcc33eb8411af12511a32eee19835a8fa3c658454b96634e129","ssdeep":"6144:3a0BeSZhdWf9rJBeqyHHUKmEmZRdWm9o+BYz3E4msXllWq:3nurJBexKkEOXllWq","tlshash":"cd944cd977a2707392a2f1a5902f0103b17a6896f44c8c7cb798ddd16eb494942fbf38","size":422727,"data":"","first_seen":"2026-04-24T15:38:02.474016Z","last_seen":"2026-04-27T17:35:07.799535Z","times_seen":2498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"e95011b6691877ba4351cbbbe30854e3","sha1":"aab00b734135458a8a6d1338cd82434ef3ac4e21","sha256":"5fc6eddb606a607734a27e7394d136b0ee28b0b30b72e11273947de31f7118c5","sha512":"5b471a8798c385b39a1c2c00896d5293da959c22eca99e77afe16ea54f525ef6b029d1ad72fec50554c1ede893cb870bb74327e3b46eb2e1f5f15fd90a9a9eab","ssdeep":"","tlshash":"e2a022b030e3200082af02202ca308c0822c003000008ce80800e0800e2cc32020cc2c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.832543Z","times_seen":1082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"45210da832f9626829457a65e9e7c4d0","sha1":"ad5dd33dfa81a91517182f453879cc056a9f1230","sha256":"e6184ce10e266134fdcfa401e8f1a95005bcd4f18d16b62b757323e2833fe9a9","sha512":"00a0bdd98e82b3077db4b7cf7746140c204af743c208484934d7cb46b1c55bd31c8a29bd756d3c1eab8737df20f565c0b2a1c4e19b7c9a2785ca091696761cbc","ssdeep":"","tlshash":"c7100000000c00cc000000000000000000000000000c00000000000000000000000000","size":2,"data":"","first_seen":"2023-04-20T09:58:30Z","last_seen":"2026-04-28T06:57:37.80789Z","times_seen":2957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e4c8f1de1c0855c7c2be33196d3c3537","sha1":"1fd6a880ee16bb33003559b204f8a2cff5a9e90c","sha256":"b28037e918b609ca7202c47f39ef3a8796d2878057efcf6a7e464e0e2d299b74","sha512":"27509890b76a772dfee54f13d2a388bbfbd9fc5b58110bcf6ec3eb6fdaf8c25d776559490c35319a69074980df112f6176802939fc7cc2ae17d824780d6e6b4f","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-14T17:56:21Z","last_seen":"2026-04-28T06:57:37.860702Z","times_seen":3119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/moment.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","size":150941,"data":"","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-04-30T14:40:38.639372Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"40286c984e0fd59b419d75a87cada0fa","sha1":"8fb875515a6a96844db2e2e38c8cbc07d4c78222","sha256":"b1bef410e7f1ef8c4c51b858b25226aba05c2b97a53e29cdc7242c1b65cb4812","sha512":"1db2d7344d641dfef37716fde725ece2a4450140c45cb1514549328e0b040e0656d0c6f51edb84d09d02b2c580a8e681c1a5f050ffe8735a826d94a04494019a","ssdeep":"","tlshash":"5ba022ee22c22c20030220a0008b2880a82800300c08a8202080c8a2cc3e03280228fc","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.78283Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fc37fbde490e37c1258738a18b9aa4c7","sha1":"6d5ea0a4d72da4d0d8143a7c6bc9587996310a36","sha256":"e07862ed6c43d99f0b9e44fd424cbd1bfdff756a89c8d84629ca99850ee9f521","sha512":"8179b8a095306d118fde7d089843298346d0c2e1879f2db096390c0a8e23238d2030cd99455173bc81daf17f65b567a0645f10bf8169b888df9cedd768366f90","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000000030000000000300000","size":2,"data":"","first_seen":"2023-03-08T07:07:40Z","last_seen":"2026-04-28T06:57:37.755502Z","times_seen":1075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8fc1edd05f51734b573c6926a8bf8cdf","sha1":"f1c922b375d4472265c837bbf4485855086256f6","sha256":"ed8c5f3746bbae191f4cb59f7f985d19ebb9f2914a36ec89597d56f8885aa22d","sha512":"2bd97e780498269b160a0fc6d2f924b95fa898d5309d164c12fb7b7f3e2e3df59c7e9ab5964fc4830219dd5eecc65c9a15cee16f0d1dc661486ddb68ef93b7c6","ssdeep":"","tlshash":"c7100000000000000000000000000003c0000030000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T14:25:49Z","last_seen":"2026-04-28T06:57:37.740542Z","times_seen":3083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/popper.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","size":20973,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T20:37:22.687725Z","times_seen":7240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-04-30T21:37:31.8894Z","times_seen":45355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4484ffc789d88ca2c9dad3c923b2ef4","sha1":"ab6e9bcf45fe415da33202ba4faaa9b07a1a84fe","sha256":"2718b5730b2bcbf613b566e0fbf969e1cae215eb6a4fb76c04536b02395184d7","sha512":"1e9f8e3700d47d29ea14f6f4598a0dd295ee497b4d749038dc02a4f2813efa6e2df743de79a9623577480b1ac9cb1b436a3c46890e0fa6754b8ef8d5b455249a","ssdeep":"","tlshash":"cde01a0ad5aa5cc35133381d420f9421246236a7d4c6d908be0fe2f44fb40588a43a48","size":378,"data":"","first_seen":"2025-03-18T04:27:57.575526Z","last_seen":"2026-04-30T14:40:38.697558Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5b56b5b45cd092c4c09ad63bf35ad25d","sha1":"cc987b98612a8b31ee70713224d348f4c418f787","sha256":"9b79ddcb6887a36d0456605950e616ad11d2db5b5304b82b189fd65410bba7af","sha512":"7806b89c308c01db8085f3b98c47b4358d6968050c17061c660295d54de1dcd21ab277b8faea4db94241edec7808a2a171f35c8f9b45adfeee8b10bcf2bae262","ssdeep":"","tlshash":"ef8000a83c08e082202f3832000f00ac0322caa0200a08008e8008ac0c3022a000288c","size":28,"data":"","first_seen":"2026-04-23T09:07:29.326909Z","last_seen":"2026-04-28T06:57:37.805693Z","times_seen":1084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f38ee76ce06ccd13940482aced1c7391","sha1":"69590b192b270e6205f5adcc15d42b8500bf48e7","sha256":"550a92e330a86fa0a314c5bdde5a76c4168d753b45144d2780cbf2c26aa033dc","sha512":"947c90d8346b5e7d63d5c61af54e2770ddfb44738ebebb3a4937d1d3a70e24b3359f7d9e1388f06e43b7e28da5243b4deac70330a6e98eca03cb99d1febf96e0","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-10T08:48:35Z","last_seen":"2026-04-28T06:57:37.742454Z","times_seen":4049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d61f8370cad1d412f80b84d143e1257","sha1":"32096c2e0eff33d844ee6d675407ace18289357d","sha256":"6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d","sha512":"3d637ae63d59522dd3cb1b81c1ad67e56d46185b0971e0bc7dd2d8ad3b26090acb634c252fc6a63b3766934314ea1a6e59fa0c8c2bc027a7b6a460b291cd4dfb","ssdeep":"","tlshash":"c700000000000000c000003300000000000000000000000000000000c0000000000000","size":1,"data":"","first_seen":"2023-03-07T12:12:28Z","last_seen":"2026-04-30T21:05:35.438278Z","times_seen":70210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4484ffc789d88ca2c9dad3c923b2ef4","sha1":"ab6e9bcf45fe415da33202ba4faaa9b07a1a84fe","sha256":"2718b5730b2bcbf613b566e0fbf969e1cae215eb6a4fb76c04536b02395184d7","sha512":"1e9f8e3700d47d29ea14f6f4598a0dd295ee497b4d749038dc02a4f2813efa6e2df743de79a9623577480b1ac9cb1b436a3c46890e0fa6754b8ef8d5b455249a","ssdeep":"","tlshash":"cde01a0ad5aa5cc35133381d420f9421246236a7d4c6d908be0fe2f44fb40588a43a48","size":378,"data":"","first_seen":"2025-03-18T04:27:57.575526Z","last_seen":"2026-04-30T14:40:38.697558Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"9dc52560bcaab00691f3d54f85199cb4","sha1":"75dc667f72f489b7683f39064bd2a7d4c4326c9e","sha256":"b99362e1684a7512c6809553c97c764faad09ad15cff848131088f625a374055","sha512":"4bd01848d809df3793ccbe70b9e8caa20be72f7e062733bdbb9ade71248e02b8ab1438afea6f4c5c30a10ba67001b4d0eb209207e942770b52b5bde38271ed06","ssdeep":"","tlshash":"dba002b877c65010829f26a42de71c84b5ad44a05015d9ea5824d5d55e6dc35412ed6c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.79346Z","times_seen":934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/jquery.form.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","size":43811,"data":"","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-04-30T14:40:38.611121Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c77751d6fff126bb44092cce6d15f611","sha1":"b347255083b66b2c23d08dc6ded9b27ca18266a7","sha256":"6b94fc39e1a35d38b78747a80dc99c0d56d0c2d7fe0077f3f9a1651915534b57","sha512":"b6316cc8a1e76ec3e846c5e681531f6966c64af430738f782dc63ce9219aafbe59f03b57c5d705699be436b5288f3db6594bda912b05407b3464e1f06030dedf","ssdeep":"","tlshash":"5fc02b1c1e27c02c51c6e10dfd134654ccf50e001d0a00ccc71075808030f41c85fd80","size":143,"data":"","first_seen":"2026-04-23T09:07:29.248639Z","last_seen":"2026-04-28T06:57:37.809554Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9ab4c1b5e09f493aa9b452766cddb7ee","sha1":"7f3ce6114d8bad723a7a0522fd8ebc980999f676","sha256":"31bd9995e7328652c3375f00a02eabed1f015b2e04bbf01a5ca6ae8bc7eb98a4","sha512":"62aceb9667cd9506c8292dadd04d8c00acf8cc0de35c2f355ff917dd5aee653690dc12c23106bc1f72f4c47db1aabab7fd1c580fa424679cc0120945bb57bbce","ssdeep":"","tlshash":"c710000000000000003000000000000000000000000000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-08T15:47:52Z","last_seen":"2026-04-28T06:57:37.754938Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"20d929873393115727c4b824aed08ef1","sha1":"008f1cc30b1125484ee15f8e4a33798444683398","sha256":"f0d68ed36335cbe3b3fb0f48d3a75aad1191e6852d7fc28d0d9b12825ca49c43","sha512":"3a107a1860f2e6093a21ebcc999fb94beee3d3b077d8ead80fd417a8ce6e1b6e66b47b4005e1c53b720da9cb0d9ca7fbe0a262534ff039d718c08da88f33f088","ssdeep":"","tlshash":"c3a022b832c20008e28f00b80cb30a80802e00a080008eec8828e0e82c2c83c822ec2c","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.712238Z","times_seen":1086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-04-29T18:18:38.118872Z","times_seen":51413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c6a675552648c0becb8283f05c172483","sha1":"5023fde21a93efcc45f3ef1278a03020db274d7f","sha256":"954edbbc5f5c2074629bd1c9f2d76ebffd42111688e6782d8ebe3a1e28d08652","sha512":"7118d9842a6480ca5dfd3cdafbc073a3cdb5cb0043599c499d1e5eaa5756fbcccc090d6cdd46957091e0d3b314de979f19cac0726489d35caafd4b6c1cd8433b","ssdeep":"","tlshash":"c710000000000000000000000000000000003000000300000000300000000000000000","size":2,"data":"","first_seen":"2023-03-07T15:42:45Z","last_seen":"2026-04-28T06:57:37.846356Z","times_seen":2629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"b37fb993934fb9957c6e3dae92c177c5","sha1":"11a50edc8e83dab4cc52476922e91b5d54dca8d4","sha256":"d9fff616c1f8d375a5f9b94dccdde265fbf1311eaec553b6e9eafef13292a20d","sha512":"659b7c9c9ea737fd1c84309275c711c500ffbf9b4fb76d13ea774a997a509308925cb487db25f00e2978bdbb82ac9cfb37eb8b14ff16747e02959801f3588e98","ssdeep":"","tlshash":"43a022f038c220008aaf20200ce30cc0c03c8022000088ef3b00c0ba2c2c83a00aee3c","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.659243Z","times_seen":947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:37:31.819606Z","times_seen":213261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-04-30T21:37:31.81092Z","times_seen":174249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d11fd4f5e84304758ca1694f700fa671","sha1":"ce45a7ba15355cea0834c2f386dab31046f48c23","sha256":"4577df5c08628c6300ca82e2421d8c01ca22544309f54b81a11dd8f444b4644e","sha512":"7c8b8b8fd3e3093a22a39dab4cdffeb7b8e5c2c101c0a0d2039cff7d5d2ceb74c6b513fe8b73007d7b533c43495091be9b8fbad9d06bf3991b97623aabbecb40","ssdeep":"","tlshash":"c71000000000000000000000000000000000c000000000000000000000300000000000","size":2,"data":"","first_seen":"2023-03-26T01:44:17Z","last_seen":"2026-04-30T05:00:27.958602Z","times_seen":1394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5211f88b121a49abb299fa66c4e53ba","sha1":"5bc27c5f90b58d6a41cf060461fcaffb3fa2d012","sha256":"53f88578c2e31a526ac4e2ad05a69eb9950ad6cdee670f48cd0b99e434eb64ff","sha512":"7e9288cd76313f422a01ba1cf58b1fa7ac2698f9fa45b214f3cdcd6561df4317d032138b18c12d54baa36e731322981d5bce80b43d2cde5affc914d488807c45","ssdeep":"768:76SzD7dXzhaiDmyht9yfZk8VJddOmWJpsbLkqGMe/i3yo88:DXzhacmyht9uVJzO5jeyP/wdj","tlshash":"0ef2f1caf67c96c98a355d836d2fa8792d290166d52cbee6edd0dec0bccd013740ea11","size":36644,"data":"","first_seen":"2026-04-27T17:19:36.290666Z","last_seen":"2026-04-27T17:19:36.290666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"4a60e3001a666fafa4f35dd077f3a60b","sha1":"5858814301ccab2ddb98e4525190f405dc64db4d","sha256":"abe82312563cfd513f2b04eb5a73320353517044bb069a85f5b41c48772332aa","sha512":"77cc23ca729304f14d6e8862384fc4dad358bd2c71e53b2b7f331fa460544f4f6c3f22ff0fae962cc42c7ae889bb2b7ee3c6a992aee7afcbe70ada52134cd077","ssdeep":"","tlshash":"469002aa21d65500579211b4145b1984902444601844994d644095925c69432e235a6c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.669407Z","times_seen":918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"72a31cce51a0a8d97a27b6acc685cc72","sha1":"0178df22d3d2102b37996d8baa3274d051f0efaa","sha256":"9ab81cb3b6209662d55aac3c307b41383ea64fc7938abd096bf498db0fbbe8f4","sha512":"9f261bb93e87b5ab4f01040563e806ffdf9442f9181adb482803700243ba5c73354d0685ef5515c10fbf927012b82804eee5defc358450317364cbd3522bc2fe","ssdeep":"","tlshash":"e6e0c03d156b6260ab731842ffdbde1ca05437f40b4d1d4ed32031d4c077ca64a10536","size":350,"data":"","first_seen":"2026-04-23T09:07:29.334189Z","last_seen":"2026-04-28T06:57:37.795192Z","times_seen":1039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d59027efbf52434cb206fbe2ae19ce1","sha1":"4c81029e1a072e453103fb2641c4ab9c8bc3ad78","sha256":"d1916a60203e191b50abb9a988f01455b1b883c30426b17632aa4f0025b86749","sha512":"fb643bdc7e8cb7b57a2512720dba71ae26dfa5f38072e9f095350d1292cf98c7e574b00e53ff7b11817db934e658916686e108a238a1d5d470ee37a8b6fa984b","ssdeep":"","tlshash":"50e068002492d009118ccef4d8fb23046284dc91fa5e6a0dd114d33dee2285a24b388d","size":378,"data":"","first_seen":"2026-04-23T09:07:29.204041Z","last_seen":"2026-04-28T06:57:37.802209Z","times_seen":1047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-04-30T21:37:31.90218Z","times_seen":121205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-04-30T21:37:31.89692Z","times_seen":133935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a389297b27b206c567e0ce123369e52","sha1":"9d6a91b37bf636c1aada32bbeb5b634a73dc3f1f","sha256":"e77bbb0eeb6e20b969557e7984418a9f1d7a63fc02cec473815fdd10ae3e71b3","sha512":"0ce1e9a59fb7f9cfdfadb3553ce4c32fc9a3e399e2340e322c14bc40709715ce6513616131a6835680d8bd40a7ce07a8c719a213fde2d60518055ef39abb548f","ssdeep":"","tlshash":"f0a00263c529c5570038956195d7313ae11c57608815a00d039a974975e945ffe9c59a","size":63,"data":"","first_seen":"2024-01-07T03:16:58Z","last_seen":"2026-04-30T12:17:38.561739Z","times_seen":484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9e3669d19b675bd57058fd4664205d2a","sha1":"7a38d8cbd20d9932ba948efaa364bb62651d5ad4","sha256":"4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080","sha512":"7b0776dbac74a9abb8a0d0119c73ae82efbb1b95af009f0669e2b52c9664f7fbb458ddf3abd7ccf0617ab69362a13ade046c4f19490710e5d8937ba72efa90aa","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-04-30T16:48:54.969963Z","times_seen":55499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"b4e92699ffaef2b82967e888e80fe0ff","sha1":"2497c684769952f88f0f7680bb7d2947f181c21a","sha256":"108642668da5d427b5b1b04f1241a1953e8013360097fc9d90b6806291f75823","sha512":"688a1aa366bba111e7f0e5163715e7063a530733fa706ede4cb2ee15a3362459fceec44f674b2d1d404aad1106eb2e1376cfa919c9f8984026b8567b971be7e0","ssdeep":"","tlshash":"eba022fc3ec20000828f00202ca32880a0bc80300008f8fa0800c8b00f3e832c02ecac","size":70,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.674957Z","times_seen":980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"7d99b23e9e9b5600837f0afd9d209cd5","sha1":"9c0d77cf54bd8c58d70acc808323910406b09652","sha256":"9a223e450f5cc6b4437c7de1f29a225a4348995faa541c8607565b02413b9a4e","sha512":"dd2e08f0300f10b4551436c3982a381bcce7d7d320642c368688473981e03580659e29e1f879db3330163e204eecb622aaa0aee044eddef3a578edd849bacfda","ssdeep":"","tlshash":"679002a521c654005b9211a81467188591254865548499496445d5926c7d1229156d6c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.641279Z","times_seen":1066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-04-30T21:37:31.890402Z","times_seen":151143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c14d755a2794db9088c5d73acb6169dc","sha1":"b0268b9d66a8cbdafc46caaa46d2b76671ea6482","sha256":"8244e5c132af80166020d8366b146870a601b9ac313746046fc8c231c4b37c80","sha512":"20366e8aa8b96faac5ac65f8b1bdb23b73e3fca9ffc825e811dad0d2f6509392e50fac454ef5e6bc3357b8d38191267d16322744071bf070c5ee5ad88fb8f5cb","ssdeep":"","tlshash":"83a012401c00bc40001b0250244aa4830c3e926580184f0208b8f254f7e0bc108234c0","size":75,"data":"","first_seen":"2026-04-23T09:07:29.206561Z","last_seen":"2026-04-28T06:57:37.745951Z","times_seen":1037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"654c80a60ecaa2c0226420c12f00b87b","sha1":"bf9214d6171b74d235230362d1e6c840bbfa6fb6","sha256":"b9a3cd142c89ccaab690683d88362116a8588fc038c07d1bc80c85ecdcb2baa4","sha512":"1819e5f01e2b2c585fc49cdae6c6dbd721fef0aea6834ef9a776c5d16fa160ea5af63bb5b365c65f286498f6bd4484be0846824254ccafc233b16e7c7866228a","ssdeep":"","tlshash":"94f0e1489f9eb730c5b5000c493be1a431ed01ad1509cc42cc94cc1c00f0ece0a0f948","size":580,"data":"","first_seen":"2025-03-18T04:27:57.612482Z","last_seen":"2026-04-30T14:40:38.748626Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"40af5dd5ec3f3c92c469876ecc3eaef3","sha1":"84b3b9023fc664c0df0936d0cbbbfd7e9e998ad5","sha256":"b97a305725fb3c2a78921d7490c99430a1aa8ec0651a4725ede41f8f7d86ce55","sha512":"c95ac2b2418d94eff4a44dbe8768c9a19f6b74309ff285a9f73426456a1c62f91007957d355dc5bbdad396efd4038a96488359e5b72beaed37a86b613f7ff2be","ssdeep":"","tlshash":"4ba002b4b5c26040829f51b45cb75884b56e4d611024d9ea6914e4955d7d835815dc6c","size":62,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.809047Z","times_seen":977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa32a5e5c0fe5c99e04da38381333ffd","sha1":"7f3eff8f82c37991b6f95b25a79a932d35b1d9bb","sha256":"09a83be2791cac54fcad1f5ecbcf2e47858b4258980830517fcf2f9b2e0eb360","sha512":"0686ddf3fbec323f40f16d74627baee2a6bd67a56996ba3de3abb08ae78a27da46a20a9750dcd4876de6d6cd2ed190d343d67fde689e30f93e9e29e201f96be5","ssdeep":"","tlshash":"66c08cc477a28558d294982f61379100a7ab040cfc084460f181fd68eae920ab8baaca","size":147,"data":"","first_seen":"2026-04-23T09:07:29.263799Z","last_seen":"2026-04-28T06:57:37.858679Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"43be7d282d770bce277feb010355ac8d","sha1":"c0558bdd74ce17082d2e00b9416ee76d9fd4b688","sha256":"d5c340d6d8a2bb320e7f71394c0f93aee05e2346b385c6eb372ecf8970a3eedd","sha512":"a3edb371289afcd0935788555863cb449c888152e27e2a6c73f28da06ab342c257952491b0ecca531cdeecd7137465b414f3a65de0030409843f110dd6b1779c","ssdeep":"","tlshash":"4d9022a230c20000038202b0200b0c80802808202008cc000000c0822ca80230200a2e","size":53,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.759268Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-30T21:35:56.835602Z","times_seen":17886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ece7936b29ded3a84e3e16fab6974d12","sha1":"9414a87e48e508a51ae8a3e02e67cd4fba776480","sha256":"010b3717109c6b06c079cba6fdd598931c10c034b23d8062fb7a257850196810","sha512":"85beb4f37ce74fd4b226ec155923394cbec8048b2d094a70c0b6a0388010ce700fd2a101dcd38ccf7eafc15d0d2f705d8880f234e6757920e18df0f9cd65dd0d","ssdeep":"","tlshash":"ec9002b521e66420476616a424571c849128587024489d455441e5925d655635215d6c","size":52,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.679587Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"20d929873393115727c4b824aed08ef1","sha1":"008f1cc30b1125484ee15f8e4a33798444683398","sha256":"f0d68ed36335cbe3b3fb0f48d3a75aad1191e6852d7fc28d0d9b12825ca49c43","sha512":"3a107a1860f2e6093a21ebcc999fb94beee3d3b077d8ead80fd417a8ce6e1b6e66b47b4005e1c53b720da9cb0d9ca7fbe0a262534ff039d718c08da88f33f088","ssdeep":"","tlshash":"c3a022b832c20008e28f00b80cb30a80802e00a080008eec8828e0e82c2c83c822ec2c","size":72,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.712238Z","times_seen":1086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7854b30785e383f96f60b93c3c724dcf","sha1":"d7af2c6cd7e2c414b1a3d26fa9d800dd81799771","sha256":"c156061b47b0361d24e96c61eafdd435086fa7b8b0c5345c16460c846418f99a","sha512":"ec419b4e08767c3716fc534216bc49825a9959d07ed3db5c7d16aaa23f6a6ae9bb241b2a515d46fc886a95f584b2ba048be9d8e7725c647aedd1520f10436b96","ssdeep":"","tlshash":"c71000000000030000000c000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T11:36:13Z","last_seen":"2026-04-28T06:57:37.867999Z","times_seen":4597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"01c57a8f39266556e16b72052ae7983c","sha1":"1159b10ecca127f9b6c789a2a90b83242762bb64","sha256":"2db73a87726cabd40dc23d88f079b5f62904c61d681390de5827535ce23871a2","sha512":"0f8312d5dc21581c4bb51f34a476abf07a3b175feb0ce7afb103cd0ca4e5a5dbf98c0ec05fabbd54fe79c6bd39ae0c3ebf703228dbb3f559249fd34c7b5b6760","ssdeep":"","tlshash":"e9d0c280292a6a2c89e1c63b81232081e5259420e82d1cb2fa21f326ec615478db72d2","size":267,"data":"","first_seen":"2026-04-23T09:07:29.245259Z","last_seen":"2026-04-28T06:57:37.816733Z","times_seen":1031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=derivefx.com","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b620a6d04e6f9e7807ec22d1a11ac2ba","sha1":"03693030cfb3b5ca3f548f790ea8151ddf6b8404","sha256":"86cf1e26177dffd78f5c5069421a250e9c713c935d870e8105c72634bdae95b2","sha512":"f60a608e893104da19be7119939b23e7fe9ea893e3e7db73c2b31d55959dd371e504ace149f68a74ace88b67e787e075386c70cbf74fc632f387655ea282377f","ssdeep":"12288:Gdc8RLxSn7pfK+OBING50o+Vcmxjb8kSbmpV:Gy8RFSn7pfKPqG5P+V9jbPV","tlshash":"80355c4dbb462815c39262a808ff11c6613a724a5805c8acb63cd6e56e7cddd21fff39","size":1097984,"data":"","first_seen":"2026-04-27T17:18:26.47048Z","last_seen":"2026-04-27T17:19:36.211854Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7525d59cb1341118c89b0ceef17986e1","sha1":"0bd69301cd3437ce2448c6412204854aafaf9f3c","sha256":"05e0ed4070840eeac5243f24372aa4541960c70cb2f0c934c45dd3b9c86c20de","sha512":"2626e91f62d2af259ce40f67d4c6e364b4c140165bf2dfdd9b4b13807622262d862a554bd4c1b7af3b58b12bd2b1a33188e63dbf1c94de7b70884459d40f8a62","ssdeep":"","tlshash":"579002a531c75400477711e454675c85906c4c70344c998554409992ac650635515aac","size":56,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.668034Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8bcf14df70f441f678f9deef2090673","sha1":"4409996af1d40ad8f702d67dda1f4e20ef8e0aba","sha256":"f10a4c7f9d5894a49bee6d9f74138e614ca77df2199c71c5493efd8ae729c772","sha512":"bd1b6fba89e82768b453684cd8befa49a2bd53ef032e610841fcc7cccc6fdaf038519e16822101c1a8134bd3ac4a6ded590b30930f3dc6e8bd4e9d48b451b0ab","ssdeep":"","tlshash":"fba002b475d25010d29f11642da75884966d44601014a9f96818d4e95d6d835417dc6d","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.661164Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"338abf93e6a5f7d2a293722a87719962","sha1":"b392381104d89a7cf3f187184f1da75a05a0df11","sha256":"164a3be237713c388f122a804b7ad1180d00a435b5cc66c994125d0670448fa3","sha512":"a40113a661bae8bdd281df35d6e2395e50aa54050b6a40516b81913a80391e38099c7ae43f0bebec3a6d503e60f607468b1ff558e0f85fb3505ac52e1ff2d0c4","ssdeep":"","tlshash":"d8d0a73d5c3c517d343b4099aa7f91f2a8997c5813191e04aab061ed1ab0088a4d0337","size":238,"data":"","first_seen":"2026-04-23T09:07:29.23384Z","last_seen":"2026-04-28T06:57:37.798872Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-04-30T21:37:31.761948Z","times_seen":163935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8a5a951b04691c075473030ba4329839","sha1":"9dfbaae48f484a6843f7b30412df702cfea2bf3a","sha256":"06e54efdf2ca1388d4f4b2c2ce7a75d8718bb04b914fa6bf6eb8bf54c7e95bc6","sha512":"cefd7c93389131b247df7d99d15c6cc3160ebdce66b5eb3c0ce62d9375b1a01242d37dca8998d57e608ade34b782520be10a449048c4f8c5c6181ce18c6cf88a","ssdeep":"","tlshash":"ff8000ac3e08e28232233ae2000b08ac83a2ea80280a20020ac0208a0c3020a0023888","size":29,"data":"","first_seen":"2026-04-23T09:07:29.257401Z","last_seen":"2026-04-28T06:57:37.799983Z","times_seen":1087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9ab4c1b5e09f493aa9b452766cddb7ee","sha1":"7f3ce6114d8bad723a7a0522fd8ebc980999f676","sha256":"31bd9995e7328652c3375f00a02eabed1f015b2e04bbf01a5ca6ae8bc7eb98a4","sha512":"62aceb9667cd9506c8292dadd04d8c00acf8cc0de35c2f355ff917dd5aee653690dc12c23106bc1f72f4c47db1aabab7fd1c580fa424679cc0120945bb57bbce","ssdeep":"","tlshash":"c710000000000000003000000000000000000000000000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-08T15:47:52Z","last_seen":"2026-04-28T06:57:37.754938Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"654c80a60ecaa2c0226420c12f00b87b","sha1":"bf9214d6171b74d235230362d1e6c840bbfa6fb6","sha256":"b9a3cd142c89ccaab690683d88362116a8588fc038c07d1bc80c85ecdcb2baa4","sha512":"1819e5f01e2b2c585fc49cdae6c6dbd721fef0aea6834ef9a776c5d16fa160ea5af63bb5b365c65f286498f6bd4484be0846824254ccafc233b16e7c7866228a","ssdeep":"","tlshash":"94f0e1489f9eb730c5b5000c493be1a431ed01ad1509cc42cc94cc1c00f0ece0a0f948","size":580,"data":"","first_seen":"2025-03-18T04:27:57.612482Z","last_seen":"2026-04-30T14:40:38.748626Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d171fda0a782424615751b6529e3de2","sha1":"31e3f9ea37ec008d03f099cb2382738e40e6ed9e","sha256":"e4af0104acbc1e1c8ad8b256e52f093d8b09255fc5f0d106dbe4825016994bb3","sha512":"c7da9bb3013aee401b82b163631e88d9a1092bee8df62f630e1596fd1aff8ca9cd508b62132dc3e1338d14eef1608c86e6f01ed382f862f7e683adc5e52b5552","ssdeep":"","tlshash":"7ea012681802b8d5011a0020141570493d4cc520e8004b010c0d48a88f9194100010c2","size":77,"data":"","first_seen":"2026-04-23T09:07:29.331837Z","last_seen":"2026-04-28T06:57:37.770147Z","times_seen":1048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa32a5e5c0fe5c99e04da38381333ffd","sha1":"7f3eff8f82c37991b6f95b25a79a932d35b1d9bb","sha256":"09a83be2791cac54fcad1f5ecbcf2e47858b4258980830517fcf2f9b2e0eb360","sha512":"0686ddf3fbec323f40f16d74627baee2a6bd67a56996ba3de3abb08ae78a27da46a20a9750dcd4876de6d6cd2ed190d343d67fde689e30f93e9e29e201f96be5","ssdeep":"","tlshash":"66c08cc477a28558d294982f61379100a7ab040cfc084460f181fd68eae920ab8baaca","size":147,"data":"","first_seen":"2026-04-23T09:07:29.263799Z","last_seen":"2026-04-28T06:57:37.858679Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73cffa172df581e1417b3380bf189952","sha1":"c14dc8dfcedda14dfb6202ae9e0141422ea39bd4","sha256":"789cebe4be3c4e1098f04b45f09e113fbb80d7dea01b9c8a5b1b9a0a1af14b44","sha512":"294775493517fff0e586d24ae8bd482c679ff15b8a40519285040ca4eef3f508b967d5b84b2c41021e731da5c08c83093bf171b0abd7d9b7de88a32ad9f5e97e","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodP5rUzpI4Oz:XYBctCo254Oz","tlshash":"e234198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","size":230964,"data":"","first_seen":"2025-04-07T11:07:41.7631Z","last_seen":"2026-04-30T14:40:38.639832Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/slick.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","size":87157,"data":"","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-04-30T14:40:38.620398Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"1eaecd23c1ad3a3e5cb97645e2f33165","sha1":"61baf2941d4efd6787f7ccfb269ad290f6262f47","sha256":"24ad04d28b7955369563d8a469b291df0aa5e6306e335b9e3056281c858ba472","sha512":"e415cd86d4da352393fe9ce5ae1bf761443f375b88bbeb11b92d86059232d91a6c0a09f0efd7c589787dbe4e71aea6eb3d39055a5348a1a6b307c3d597f74df2","ssdeep":"","tlshash":"8501f9479413d17fedbf5124cdade7029b963d211a1e1765f4dd14488ba013b61d88f1","size":659,"data":"","first_seen":"2025-03-18T04:27:57.630136Z","last_seen":"2026-04-30T14:40:38.824158Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"80cbca5d7f86a5a024943dc5a08bef9f","sha1":"01f20f3873079d5997fa086b64152225cb9dc45f","sha256":"7bf6523bf719ca16e9e83821d0f354775d30927a8109f563b1286ddb3255a491","sha512":"5c6b978fded755df1023b9afbe73f5cc4e0a5a581ce3de3e13f274c036669008228fb87d9e7a43d3da366a5b248c7c9fbbc3498ae3347a898019c60c745451cb","ssdeep":"","tlshash":"f2a022f020c38000038323be23230c80c0b80822080ca8000c8880a3afa30330233fec","size":69,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.770573Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"0127b7d2a451660bbac7db22a58f150f","sha1":"d39a580d402f4519f72215251ebe5cadae4c6400","sha256":"e8440c91af0d97cbc7e78d0be454f9af13ba485aab1915302c1ec572539c4a90","sha512":"ec989a2b1fe0b07a98c1375e84f80b056163c970a91fab1e7ba47f43503a6eb1904a93d54a2056ebfc16914d40f2ea225f598e02c8a166ce951c008ece9fb968","ssdeep":"","tlshash":"0aa002b575d2510092df11b52da71884a56d44601414d9ee6814d4955d6dc35823dc6c","size":62,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.678307Z","times_seen":923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:37:31.866623Z","times_seen":228501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"601d3a60456c67c202f873986fe96a4d","sha1":"24e2a9cf72538e68f9ee70e69ba260bbb17fb028","sha256":"02b7280cae64aca6acc011dc7ecf048fff672c55d2a9611d06fef3cee78b0ff1","sha512":"22cd30a33a07631c0e07fceae7faf50576e8660c72944cb8bc8539e0ce624317eb07e6eed4dfccce1968fef5c07368c5517479cd217d388de5c4bfdb7d6e129b","ssdeep":"","tlshash":"23a022b0b0c3000082cf02302cab08c0802c00208020ccf80800c0802cacc32020cc2e","size":65,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.829221Z","times_seen":1063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fc02d24728a47553bdb290edcd655be7","sha1":"484f90383b4f50029b010f31eede4ecab94dd6a1","sha256":"0380b6ffbd9313184a0b844ef136d3f0787088c2fc3d1327aadff738d47bb4e3","sha512":"42d0c55fe16f0e50ecb719f69fd432a2c3a1369ab82db166c89b38dc89ac1af255adfe9cfcb1d3fcba23954f4a74c65e156ad45fcb8105c470dec7f9be0cceb0","ssdeep":"","tlshash":"10b012052d637440111b64002aca3011253fa5d4cd08ca324c3cc35d87b07870822cc7","size":94,"data":"","first_seen":"2026-04-23T09:07:29.169091Z","last_seen":"2026-04-28T06:57:37.857808Z","times_seen":1028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"f3df91b988608a9a30a53243147a5e01","sha1":"eac829e03cb5b4f1af7e42e2bf4dad341b53a5fd","sha256":"7c8765164f3c236a04f052fc41511cf443aaf7e8cbe21b9eb9bc9832e8a66093","sha512":"ffb937adfd512344bb1e89278d681fefcbbb935c9367460ca2d1cc91d0bc48f530f9c953ffee1b5ead7363e504e5e12b72e506dc483ba39b674e47c924fd0a22","ssdeep":"","tlshash":"53a002f922c65510575212b815572884942444611444a9855540e9b25c7a23797269ec","size":60,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.641801Z","times_seen":974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1e1834b7cf83746c8b9284a857252b8b","sha1":"7926f9f9be79c5e7fb9a8b978ea8f32d1fe5f49d","sha256":"d321d2982bc2993db9611f647201b7383ff083943edcaba5caf417f80108bbfc","sha512":"7f44aac42bfb714533326b8019931efbd2e34ce4d98f86d3c6833fc06aff54a4bfa0924d53bca2cd95a9f07bb579923e4caf35326aedea67f0efec6897d0df0d","ssdeep":"","tlshash":"c99022a02c2cb00000203200820f00302203228fc8808000a0008c2a2c3080ca8c2080","size":56,"data":"","first_seen":"2026-04-27T17:19:36.358676Z","last_seen":"2026-04-27T17:19:36.358676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d11fd4f5e84304758ca1694f700fa671","sha1":"ce45a7ba15355cea0834c2f386dab31046f48c23","sha256":"4577df5c08628c6300ca82e2421d8c01ca22544309f54b81a11dd8f444b4644e","sha512":"7c8b8b8fd3e3093a22a39dab4cdffeb7b8e5c2c101c0a0d2039cff7d5d2ceb74c6b513fe8b73007d7b533c43495091be9b8fbad9d06bf3991b97623aabbecb40","ssdeep":"","tlshash":"c71000000000000000000000000000000000c000000000000000000000300000000000","size":2,"data":"","first_seen":"2023-03-26T01:44:17Z","last_seen":"2026-04-30T05:00:27.958602Z","times_seen":1394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f207f8b5dfe1eebac63467930df5189","sha1":"8dbc6058e03353809813416c6830708abaf9d223","sha256":"97fb5f8538b89f6c1accfd19836b65a73b61fbc2e0cbf84bb858a0fffa3f1592","sha512":"7d50d121a5feee3159054b88c68b4c96d5bfe51e0c78697dc3fbc4e50f33c39e4cde2e271455167ee07e42e8d4791922d032b965cae9037c5f4e5eb44ddf4336","ssdeep":"","tlshash":"c71000030000000000000000000000000c00000000000c000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T17:04:31Z","last_seen":"2026-04-28T06:57:37.824503Z","times_seen":2556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/bootstrap.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","size":55775,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T20:37:22.704013Z","times_seen":3869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"c716548f4cf58020b7ca072f317809bf","sha1":"c6891eefb270f65c3c832039b78d38ee730ba9c7","sha256":"5f04472b22946425a53b1cef9843e6bff7b3ed4dba183115d0d987dc050d5a7e","sha512":"7cc5312ac8769e218275f152c927773626b157285d8074305581c32a590c79289949ab5cd8adb2477fa4b28d3e9cff31844f1beca40022897b128c69641a76e5","ssdeep":"","tlshash":"2ca012b070c18000424f13292a52084084bc0410101854940c0880555b5a831012ae5c","size":81,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.682253Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ce8913e6fdd1813c213bc50e1eacc038","sha1":"7717de1d1504deafb949bcd3313d08ce06215745","sha256":"760445c4c980ceab5def49cbb0ab4f14fea40a02d7a253cef6344b4f3190fdc3","sha512":"590236865e3dd3821a19fbc774c44e8e8c05e8dd0e643f5165e36f3616de578837ea77da6e26be2534cce2ec91fe03c828bad9a14461367a74890f914f16e1fa","ssdeep":"","tlshash":"75e0266010e2d04e12988ef5c9f713315346edd1f60e8a1dc509e30aea2582ac9f39df","size":358,"data":"","first_seen":"2026-04-23T13:20:27.784546Z","last_seen":"2026-04-28T06:57:37.772185Z","times_seen":1040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92eb5ffee6ae2fec3ad71c777531578f","sha1":"e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98","sha256":"3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d","sha512":"5267768822ee624d48fce15ec5ca79cbd602cb7f4c2157a516556991f22ef8c7b5ef7b18d1ff41c59370efb0858651d44a936c11b7b144c48fe04df3c6a3e8da","ssdeep":"","tlshash":"c700000000000003c00000300000000000000000000000000003000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-04-30T21:36:22.745326Z","times_seen":73108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c77751d6fff126bb44092cce6d15f611","sha1":"b347255083b66b2c23d08dc6ded9b27ca18266a7","sha256":"6b94fc39e1a35d38b78747a80dc99c0d56d0c2d7fe0077f3f9a1651915534b57","sha512":"b6316cc8a1e76ec3e846c5e681531f6966c64af430738f782dc63ce9219aafbe59f03b57c5d705699be436b5288f3db6594bda912b05407b3464e1f06030dedf","ssdeep":"","tlshash":"5fc02b1c1e27c02c51c6e10dfd134654ccf50e001d0a00ccc71075808030f41c85fd80","size":143,"data":"","first_seen":"2026-04-23T09:07:29.248639Z","last_seen":"2026-04-28T06:57:37.809554Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"53c1a65ed5dfb43174d48f89be3ecc89","sha1":"16933fb4242d896bdb9b65e57e8966b6ea187e7a","sha256":"3e2afa54748b876667671789defab0b7a784ea162237d0725abfa5fb8d9b2622","sha512":"2359b9b74b912a99ab88361da998b8468011a50fd43de6af1e2a4d53f39b336b144ad2b781e84ce0423d06d4cb944a8225fa3f42bfeb98725acce35219c09674","ssdeep":"1536:zPUrESx3I/hSOOUMGnrUz4kbAXqnKji/e:QrekUZUUSK3","tlshash":"a353f7cff1d2b3215ee2a1f2446b410de27ea518dc48180eb944fbf49e749879427f6a","size":63198,"data":"","first_seen":"2026-04-27T17:19:36.382827Z","last_seen":"2026-04-28T02:07:13.312503Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/moment.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","size":150941,"data":"","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-04-30T14:40:38.639372Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f1290186a5d0b1ceab27f4e77c0c5d68","sha1":"aff024fe4ab0fece4091de044c58c9ae4233383a","sha256":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","sha512":"aa66509891ad28030349ba9581e8c92528faab6a34349061a44b6f8fcd8d6877a67b05508983f12f8610302d1783401a07ec41c7e9ebd656de34ec60d84d9511","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-04-30T21:05:35.468892Z","times_seen":78672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"69bffd0d447c177a2bd933602fd36337","sha1":"ad0ac60474291fad98a9f0569fec9b62f066fd9a","sha256":"ad84f6d8c30b41dfdc379f7afac853ba8d9289d447098be43a332cae2e901dee","sha512":"6150f50939e867429806a276586d65d9ffa461edb1c06154532f5154a85eb453b13bddd5fb3efc2d1e66fb2a5227e349891ca555ea46ccf3a821944ad3b964c7","ssdeep":"","tlshash":"f2c022c43969a578c1289c3f5077c540f7960584d0028a20e281feaebaa830948f9dd6","size":189,"data":"","first_seen":"2026-04-23T09:07:29.220517Z","last_seen":"2026-04-28T06:57:37.840113Z","times_seen":1036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/slick.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","size":87157,"data":"","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-04-30T14:40:38.620398Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3388cf0f26132fd183b8b54151dde7eb","sha1":"67e9f9735e0421a4e5c3f8d778df2a765b7ef6ee","sha256":"fc2b4029b271dbeb67c46130e822cbcfd4ccfb27538bf8fb80935c09b2f9fcb9","sha512":"c4d91661b182e8344fd0fbf983993450ac7b4e97e2a7ac46b3806a515fe8c06a53ec7d40a5651f64a340337453fcdd1ecf4efb2418322a13376c31434349209a","ssdeep":"","tlshash":"aae07dc958ab1303d591d0854af7486eb082a0a830220a1c55b685a86af20316820d33","size":299,"data":"","first_seen":"2026-04-23T09:07:29.309172Z","last_seen":"2026-04-28T06:57:37.794555Z","times_seen":1028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7854b30785e383f96f60b93c3c724dcf","sha1":"d7af2c6cd7e2c414b1a3d26fa9d800dd81799771","sha256":"c156061b47b0361d24e96c61eafdd435086fa7b8b0c5345c16460c846418f99a","sha512":"ec419b4e08767c3716fc534216bc49825a9959d07ed3db5c7d16aaa23f6a6ae9bb241b2a515d46fc886a95f584b2ba048be9d8e7725c647aedd1520f10436b96","ssdeep":"","tlshash":"c71000000000030000000c000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T11:36:13Z","last_seen":"2026-04-28T06:57:37.867999Z","times_seen":4597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/livestamp.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","size":1414,"data":"","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-04-30T14:40:38.626328Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-04-30T21:37:31.806432Z","times_seen":173330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"721ba255ee9a864e04eb79883fb6b60e","sha1":"788b9a573554cd3b852a805ecb7bccd0f56d2ff8","sha256":"9641c9287ce79b5e2268da9d84f803d38115eb660bcf5da10de5363de230d360","sha512":"72b7f3ca049f073364ef8030ca0c12dbd83acba5e21122d3adfa7d419c4190c0b5a173a5c9c43f0466b60c3abb0d7852ec97454e52333e2526e78031a983ea8d","ssdeep":"","tlshash":"9ca022002ca03c0802ae30003cfb0808fa2ec23ca2c83f200800c030e8f320a0002ccc","size":70,"data":"","first_seen":"2026-04-23T09:07:29.231487Z","last_seen":"2026-04-28T06:57:37.768694Z","times_seen":1084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b43b0aee35624cd95b910189b3dc231","sha1":"4dc7c9ec434ed06502767136789763ec11d2c4b7","sha256":"454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1","sha512":"a882f0ac848b0b6b4ca7b42bfa1d266afd0ddeba9204ae57a984a69376d59816b1ef3f4d442ea8a70396067ff5b70e0ae8eab3935b617b8e366d8e35c3bfe14c","ssdeep":"","tlshash":"c700000000000000c00000300000000000000c00000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:42:46Z","last_seen":"2026-04-30T21:37:31.864939Z","times_seen":41951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"e6ad7632da5f0d7f8c376732d6eed73d","sha1":"ea8d34ece6e6988be7a06194995b7064925cd616","sha256":"ffa06c9efed34a8b52b90d8f07fb27e284604bc742c5d2fa3431b5b7321757d9","sha512":"ff13f6574a72769731cec9c0519e32780e6f27d542ace9695792f19579bae561f6826434ff6a1c84ad4073ae9fdc3697046317a9b40ff251237a54605ef27124","ssdeep":"","tlshash":"4e9002b931cb54114b5251e424571c849068487024489d495544d5925c650225116a7c","size":50,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.754821Z","times_seen":1021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"12eb2460af92f8ca0a2720950ad8d102","sha1":"34ecdc7eb047fb7d569e2fd033ec747ff396ebe6","sha256":"5fd5f142046c61e69e48cde4b7edda752fbb459bae32404b30e5b5fdbe0622ee","sha512":"8f531ddfdd3922f4f251636bb77d97a9f94a6e123d4713acae99b485e98f565a1b6a08ba9f5b16a08e44f8242c02c53afdfde89254626a98e14a2ba6d61103c1","ssdeep":"","tlshash":"03d02282b205549c71a35c73b77ebb000d5ecdd5c801edc3baa9eab202f1007a072a27","size":209,"data":"","first_seen":"2026-04-23T09:07:29.165027Z","last_seen":"2026-04-28T06:57:37.808471Z","times_seen":1057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf9175b80455fb4fbcb1db90195065b4","sha1":"cde5d983fc36f2a5efd6f15400bab8e92ed21892","sha256":"3a5357e2b96761804f6b2353fecd783c64967403b17b0db6360624400047d6ea","sha512":"61d71947dba14a857f396832144315638d3f73dd3304e905a97efdcdfc4882ee2c216186c66d8e678d2e7bf5a765bfb1750d737af462c7fb2b2287e7cb20d61f","ssdeep":"","tlshash":"c71000000000000000300000000000000000000000030000000000c000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:47:52Z","last_seen":"2026-04-28T06:57:37.743552Z","times_seen":1771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3388cf0f26132fd183b8b54151dde7eb","sha1":"67e9f9735e0421a4e5c3f8d778df2a765b7ef6ee","sha256":"fc2b4029b271dbeb67c46130e822cbcfd4ccfb27538bf8fb80935c09b2f9fcb9","sha512":"c4d91661b182e8344fd0fbf983993450ac7b4e97e2a7ac46b3806a515fe8c06a53ec7d40a5651f64a340337453fcdd1ecf4efb2418322a13376c31434349209a","ssdeep":"","tlshash":"aae07dc958ab1303d591d0854af7486eb082a0a830220a1c55b685a86af20316820d33","size":299,"data":"","first_seen":"2026-04-23T09:07:29.309172Z","last_seen":"2026-04-28T06:57:37.794555Z","times_seen":1028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73cffa172df581e1417b3380bf189952","sha1":"c14dc8dfcedda14dfb6202ae9e0141422ea39bd4","sha256":"789cebe4be3c4e1098f04b45f09e113fbb80d7dea01b9c8a5b1b9a0a1af14b44","sha512":"294775493517fff0e586d24ae8bd482c679ff15b8a40519285040ca4eef3f508b967d5b84b2c41021e731da5c08c83093bf171b0abd7d9b7de88a32ad9f5e97e","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodP5rUzpI4Oz:XYBctCo254Oz","tlshash":"e234198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","size":230964,"data":"","first_seen":"2025-04-07T11:07:41.7631Z","last_seen":"2026-04-30T14:40:38.639832Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"09b743dc6690dcc13288a5a377167fdb","sha1":"30a3755f061b33f1f9d7357f63925660fd078ce0","sha256":"09b8a3a59e60530c364ec297c2371216d2b007229a9a678e12f960a8b6888c98","sha512":"456b133f4150b6ca4b6c82644d01f1b0d86e60fa9b263c00c9a096874657c4328f7dd43970fb526fa80f5857720db5de2574c868d19eef8c9a9ba53873f9db5c","ssdeep":"","tlshash":"989002b521da5421d75211a41d575884902445601444a965944099965c69022523596c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.812485Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"155ff2ab7b3c9e51852f360df788d0aa","sha1":"15996eefc12410225943c548fa5ccabeb25238a6","sha256":"cbe9dfcfcb5410bbd25a31907fb3c018239653206dd0236feead31415167340e","sha512":"4995918e58079c4ae3240ce872cd71099c57b413eed403b3f3c2e0dff56e5e6767550488b14644e3194577891aa87d8edebe965c60acccd3be34e8762960db9f","ssdeep":"","tlshash":"2f7000083c08a0000023322000cb0008002ac020008000800a2000880c3200a0002888","size":22,"data":"","first_seen":"2024-12-05T14:24:30.650167Z","last_seen":"2026-04-28T06:57:37.842622Z","times_seen":1045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f623e75af30e62bbd73d6df5b50bb7b5","sha1":"50c9e8d5fc98727b4bbc93cf5d64a68db647f04f","sha256":"3f39d5c348e5b79d06e842c114e6cc571583bbf44e4b0ebfda1a01ec05745d43","sha512":"2ac968752f624be3e3df46764b51b7831feb70d40307df5d587d4793bffeaf8b4042a1fd6d465df2aacc3304328d431ef10e083baf690b8cc535480a4fef092f","ssdeep":"","tlshash":"c700000003003000c00000300000000000000000000000000000000000000000000300","size":1,"data":"","first_seen":"2023-03-07T01:27:27Z","last_seen":"2026-04-30T21:36:22.707278Z","times_seen":59628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"f0db5a717936f2ca5f4d45cfe51e4468","sha1":"50385d524af52d7556ba3e59e9d421222c49d984","sha256":"75f7c6d22cc19c4a5258bec9172f7a113b53c1ac48cbf98fc841d07ef9528f68","sha512":"6daa4280288770efdb1fadc04cf961097d74773fb3660bc00daff1b8402a8655e05b81804fbd590538601febbb7511c4002a9107f6eb7668483c9732eec87eda","ssdeep":"","tlshash":"d4a022e823c302000ba200e020033880803080300c00b8000800c8b20e3a0a2e0228ec","size":59,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.703455Z","times_seen":999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"7e3d013340acc0540fc46cc272494c5c","sha1":"71c759a7f4f23a21bcc55f281898509f1831f569","sha256":"b81c500f2f018a205dd441034f08f9545a03bb7024497d45379b358565096694","sha512":"b77feb3d325fb103043acb0cb6f8275a8506a951fd8cc6e47a94016ede67b22895efbaa1d439941b81d537fc241574aa8fcd6f1c309f530d2deee34afb0a132e","ssdeep":"","tlshash":"139002a922c65510475215a415572c84903848602448be465440d5a25c7902291269ac","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.677603Z","times_seen":957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"ea6a1f06d37b571be2dba047b623c32d","sha1":"9861c5681993eac33c7f7b896c446c24245e9e48","sha256":"ef38eb642e69e83db9c4f028f43774b4e088d941e379bda6183914cbc85c451b","sha512":"719d819f87d605ce4134a91eaa2aff5d94286acca7d369b7cf86639e2b76c105f8cd5a2856d8a8e5ba4cdaf61bbff39db177000e4e18ba0482fc850cd6f75b9b","ssdeep":"","tlshash":"89a002b4b5c3504082df21643ca719c5956d44605014ade95814d4955d7d835521dc6c","size":61,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.670101Z","times_seen":1040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"cf8a2ce4d016f00bc6900a65aa8deb6d","sha1":"898a1ddd6d39a16ead9411c59de6d0b62a17515d","sha256":"3d47c9fe004a6fae3557de89db9215cb4e3ecdc3896ebef1a088d54b72ad4dc3","sha512":"6edd2afd3efbc3101837b647e8b682e4801ef82514d546e80576267cba21f937a3727f196bd238e204fe6d28b8d4f69b1665c8027178e167114486f0e2a30008","ssdeep":"","tlshash":"84a002bc76c25010829f25a83cfb5885956d44b01025d9e95814d4d59e6d836411ec6c","size":64,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.813101Z","times_seen":1026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"297ae5b7e56994c927c68953285c6492","sha1":"c74303038e1e417c3507a4f0c76711c2addc36b4","sha256":"06c5e9dafc9c918a560047bb43247f0daeea9f3d47da2ab6ab16e850ba502e21","sha512":"a8ab16464ee5b9e4c01f09eb83157932b5f24b6d7d0bc925da954299190f21e9a146e98504a0bbb72579f16d1e0cbaf3f9890a8050ade8b68f424ca28cef44f5","ssdeep":"","tlshash":"e6a022b830c28000828f00a00ce30888b0ec00200080caea0828c0802c2c838023cc3c","size":63,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.802416Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"09d00148cd6e851f6054a0cca02ae814","sha1":"6a532754ab3a87c8a1ac238a169580b20b6dba44","sha256":"c41de80fd3c7a5ee98db833a483ba162fd6ca74cfbbb57c340f0c062cc749708","sha512":"3fb38b0b78179a5f90d9f2c814c1bd8bbc47bf0b941b609f09d9d1f7728224bd1c1d306e83b45bbe7d3886cb0a0234b28547f99ed116f3860919c3d1c585b00e","ssdeep":"","tlshash":"249002b529c6545447d251a429571c849028486035489d459442d9a25ca51235215a6d","size":54,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.768891Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d6ff1ddccaf97e074ac78d7d1749a658","sha1":"82ad3da0ddfd300d797c6ecb6684ffd871709181","sha256":"3ea1dbea78e232d2444e39d273b098d8c4a367e61b45c33f1f4303cb1eeb734d","sha512":"48ee2a1c5d6cf7d615a2aed8f7c13bec4a1047a6d5a1b47ca503f31772f59cd1017f0915f80e994559553e44b520ecde6808fc5d4ca68701b21bbd8e0dcbc8e5","ssdeep":"","tlshash":"c710000000c000000000000000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-09-06T10:27:18Z","last_seen":"2026-04-28T06:57:37.762923Z","times_seen":3756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/jquery.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-30T21:36:22.150884Z","times_seen":124364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"40af5dd5ec3f3c92c469876ecc3eaef3","sha1":"84b3b9023fc664c0df0936d0cbbbfd7e9e998ad5","sha256":"b97a305725fb3c2a78921d7490c99430a1aa8ec0651a4725ede41f8f7d86ce55","sha512":"c95ac2b2418d94eff4a44dbe8768c9a19f6b74309ff285a9f73426456a1c62f91007957d355dc5bbdad396efd4038a96488359e5b72beaed37a86b613f7ff2be","ssdeep":"","tlshash":"4ba002b4b5c26040829f51b45cb75884b56e4d611024d9ea6914e4955d7d835815dc6c","size":62,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.809047Z","times_seen":977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ce8913e6fdd1813c213bc50e1eacc038","sha1":"7717de1d1504deafb949bcd3313d08ce06215745","sha256":"760445c4c980ceab5def49cbb0ab4f14fea40a02d7a253cef6344b4f3190fdc3","sha512":"590236865e3dd3821a19fbc774c44e8e8c05e8dd0e643f5165e36f3616de578837ea77da6e26be2534cce2ec91fe03c828bad9a14461367a74890f914f16e1fa","ssdeep":"","tlshash":"75e0266010e2d04e12988ef5c9f713315346edd1f60e8a1dc509e30aea2582ac9f39df","size":358,"data":"","first_seen":"2026-04-23T13:20:27.784546Z","last_seen":"2026-04-28T06:57:37.772185Z","times_seen":1040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-04-30T21:37:31.8894Z","times_seen":45355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8a5a951b04691c075473030ba4329839","sha1":"9dfbaae48f484a6843f7b30412df702cfea2bf3a","sha256":"06e54efdf2ca1388d4f4b2c2ce7a75d8718bb04b914fa6bf6eb8bf54c7e95bc6","sha512":"cefd7c93389131b247df7d99d15c6cc3160ebdce66b5eb3c0ce62d9375b1a01242d37dca8998d57e608ade34b782520be10a449048c4f8c5c6181ce18c6cf88a","ssdeep":"","tlshash":"ff8000ac3e08e28232233ae2000b08ac83a2ea80280a20020ac0208a0c3020a0023888","size":29,"data":"","first_seen":"2026-04-23T09:07:29.257401Z","last_seen":"2026-04-28T06:57:37.799983Z","times_seen":1087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6593d7b12fd418cdb35bbf438de72f66","sha1":"842f4ac15c5e237ca4c7a77d13e8756cefaf9898","sha256":"1398b376fdcce25c5a5399367e76891e85121c010ec919cc243b1a519d95bbc6","sha512":"5da0f6557c7b7b8834b438e7e445da29ae1671f9a47b07630ef63db5514706a2682b179863ecc6fa118f4b3990853b354200bee532a0264fc7b21cb4f3e05572","ssdeep":"","tlshash":"c710000030000c0000000000000000000000000000c00c000000000000000000000000","size":2,"data":"","first_seen":"2023-08-03T09:01:56Z","last_seen":"2026-04-28T06:57:37.839522Z","times_seen":3579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0cc175b9c0f1b6a831c399e269772661","sha1":"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8","sha256":"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb","sha512":"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:35:10.529571Z","times_seen":67215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"90fa476b4d12c2ffefbb3d44f91c5711","sha1":"59996d54e59a97c112d443c32f1487ee4e44a578","sha256":"103af173d4321b6fe8c708c643100664ff9285426da591e15b1ae52403f99c31","sha512":"7e0f16c0088b9b7af2afd185121f81dae5d091c0f88b0e16f88d20bbbf82d359246d70b5cf162cb87e41af94c19fde71b89f2d1b9632da936620dfa030854acd","ssdeep":"","tlshash":"cb11cccb53e423432cd657d6488fb72a4439f3975d86bc0f4e22b2b8aa259e35468c05","size":906,"data":"","first_seen":"2026-04-23T13:20:27.772415Z","last_seen":"2026-04-28T06:57:37.747693Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T21:37:31.77123Z","times_seen":205047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5221752f0019ddc23db2409b1e580b7d","sha1":"ab2478705eb3045a4b015a4dfc026aedfb68c146","sha256":"735c310717158d6446da1b32223eace957c2174abaa4c6f9485152896a13f04d","sha512":"67798577d46bdef59ef5a829f7641f636100137c6f5c8f744fc89d95745cbe15576a93d2e1d8ddcc33eb8411af12511a32eee19835a8fa3c658454b96634e129","ssdeep":"6144:3a0BeSZhdWf9rJBeqyHHUKmEmZRdWm9o+BYz3E4msXllWq:3nurJBexKkEOXllWq","tlshash":"cd944cd977a2707392a2f1a5902f0103b17a6896f44c8c7cb798ddd16eb494942fbf38","size":422727,"data":"","first_seen":"2026-04-24T15:38:02.474016Z","last_seen":"2026-04-27T17:35:07.799535Z","times_seen":2498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"44e00710fd359efa60bebc675b0834de","sha1":"3a8b0c63a88a21ac464a7ed2b263dcb9156fc1b0","sha256":"d7d106ecdf61ff7ad3eecdd86c84ee4fbc2eec3615c52ea48bb4c7aa534a8522","sha512":"40dc685c7ebef603a00008ffe00ca7c513363aad80bee75dd34d3bb13c795a0e9deb96fbbe9a6224ffa8e78e28ff346842a379bdcd71f05960b37cccf1f1e88a","ssdeep":"","tlshash":"4a9022bc20c20002030200b00003088880a0002000c08a00000080830c28022023083c","size":51,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.828422Z","times_seen":515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"dcb9a369a33bac02eda756d479dc9900","sha1":"33ce5d30d8db14838c677476ed1153d5e93d3af7","sha256":"2bdfd3d78675666844ea4836d11ef2572ded36d162ef22a05f72ec931ed6778c","sha512":"8bdf76bcf17b4306e5b58de1918540e2f1720d83731621100ba982e59eddca2b5401922ef91c55eb4fa8240e37e6faba461ea7761c6bfe010a5df288e5ed488b","ssdeep":"","tlshash":"a9a022b038c30000828f00a00ce30880e02c00200000cefa0808c0c00c2c830800ec2c","size":63,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.798634Z","times_seen":885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfcf28d0734569a6a693bc8194de62bf","sha1":"a36a6718f54524d846894fb04b5b885b4e43e63b","sha256":"333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3","sha512":"da637b3f32d7c7e410ab619520e0cf4529169a5c326ecbf4ca7a3bc2330ad49a84fba4d6c8919264eec5dc75ef80137f78cda40e26f3f741b5c9ff259d6efdbf","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000300000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-30T06:58:03.897866Z","times_seen":61601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"80ca5cd11656be980bce8201993dba7f","sha1":"de50663d81896c0aa91d957737a053ca2b353f6f","sha256":"d48f9d4e53c38dc790f47249b86060ab6b4c6d71fada3a10a0ff40d4e4368592","sha512":"a4ca685143e4cafdcb10b4baea5a96e0527a3bb01d9da55a6955d20c4582c4a74f4769d4b1916a5237622eadec3e6c715d10ef086de2cd059d05a4158f2b1b58","ssdeep":"","tlshash":"2aa022f83bc2800082bf00a02ca33880c0bc80300000b8e80c00c8b00f3e8b0803ecac","size":71,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.774815Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e3055a143912b6911fc03c02cf5719d4","sha1":"4b01dd1698e5df4de8e4e5e8764502bf8702602e","sha256":"12ad6157baffaf39a7be4682b0c93f21ed36ec699a1159362d26b4008209b585","sha512":"a557ef75f200b1f154e5e3a1460dba04bfde9527df888cee1e14c38cc4d09d52c81e2179df8c4544b79040baf14329fde76e44c29cf13395264937fb295cb8fc","ssdeep":"","tlshash":"aaa002b875c3540082af11a46cb75c8595ad4c70501999e95814d8959d6dc76451dcac","size":68,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.78365Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bfc60714f62f15e1e72e0b21454cc99e","sha1":"d6c4a95bfd294d7232cadf121308900ae6df7e99","sha256":"69ccf59b416bc5b36e3bce0b5bb9a8b04c4d5434ef56a18dce4d5aecd9c5ac9f","sha512":"b8c4566ae95eb5dd94194c1287e516b345e4d2cfb732f6f2a75664bf2ced75df58b400bdef9b704a8cca6125e1b0bc8f602e732b3dd730eee003e545bbfcaa9f","ssdeep":"","tlshash":"c710000003000000000000000000000000000000000000000c00000000000003000000","size":2,"data":"","first_seen":"2023-06-05T09:06:05Z","last_seen":"2026-04-28T06:57:37.821645Z","times_seen":2586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-04-30T21:37:31.808511Z","times_seen":173284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"09b743dc6690dcc13288a5a377167fdb","sha1":"30a3755f061b33f1f9d7357f63925660fd078ce0","sha256":"09b8a3a59e60530c364ec297c2371216d2b007229a9a678e12f960a8b6888c98","sha512":"456b133f4150b6ca4b6c82644d01f1b0d86e60fa9b263c00c9a096874657c4328f7dd43970fb526fa80f5857720db5de2574c868d19eef8c9a9ba53873f9db5c","ssdeep":"","tlshash":"989002b521da5421d75211a41d575884902445601444a965944099965c69022523596c","size":51,"data":"","first_seen":"2023-04-12T03:42:53Z","last_seen":"2026-04-30T14:40:38.812485Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1eaecd23c1ad3a3e5cb97645e2f33165","sha1":"61baf2941d4efd6787f7ccfb269ad290f6262f47","sha256":"24ad04d28b7955369563d8a469b291df0aa5e6306e335b9e3056281c858ba472","sha512":"e415cd86d4da352393fe9ce5ae1bf761443f375b88bbeb11b92d86059232d91a6c0a09f0efd7c589787dbe4e71aea6eb3d39055a5348a1a6b307c3d597f74df2","ssdeep":"","tlshash":"8501f9479413d17fedbf5124cdade7029b963d211a1e1765f4dd14488ba013b61d88f1","size":659,"data":"","first_seen":"2025-03-18T04:27:57.630136Z","last_seen":"2026-04-30T14:40:38.824158Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"45210da832f9626829457a65e9e7c4d0","sha1":"ad5dd33dfa81a91517182f453879cc056a9f1230","sha256":"e6184ce10e266134fdcfa401e8f1a95005bcd4f18d16b62b757323e2833fe9a9","sha512":"00a0bdd98e82b3077db4b7cf7746140c204af743c208484934d7cb46b1c55bd31c8a29bd756d3c1eab8737df20f565c0b2a1c4e19b7c9a2785ca091696761cbc","ssdeep":"","tlshash":"c7100000000c00cc000000000000000000000000000c00000000000000000000000000","size":2,"data":"","first_seen":"2023-04-20T09:58:30Z","last_seen":"2026-04-28T06:57:37.80789Z","times_seen":2957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"acf3739c216f193db1dd18253615e166","sha1":"6d0e8d0ceeb4904266afa75cb778027ed7e6c2bb","sha256":"87483e81c470ce47300312dd6b386d5fbd280c6032989452b4be0c71a1916d2a","sha512":"d328551d1f4cf42bc49b87badc49a7806e299cf3b043502b90702400eb5b3a45b2b494de18c9f017627e2c1c71e746b8715f36781864d7429ba57723a6ba411f","ssdeep":"","tlshash":"1fa022e038bafc00082f203a3c8ea000082fe000e008880080bcc02ab2f2b820800cca","size":69,"data":"","first_seen":"2026-04-23T13:20:27.808196Z","last_seen":"2026-04-28T06:57:37.86741Z","times_seen":1045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/#","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"84c5af313a18d84195bcd1321d6dea98","sha1":"3746f45afa0f0c06fd6bde51f8112911f5b55906","sha256":"3b34a9c0c9933c5b7eaf50ff6043c3e0e87a657e6e3046031680c6b39466fb9f","sha512":"361ab3e019266a9b704d421ed24d6d0b57b4fcd5ee92d6df68c0227ec0adf79f7c5f1d00d580309c459f1e905a59ce9354bbf16eb295f19de32c4d7c7a050990","ssdeep":"","tlshash":"3da022b830c28000828f00200ce308c8a8ec082000808ae80828c8a80c2c838023ccbc","size":63,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.720438Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf9175b80455fb4fbcb1db90195065b4","sha1":"cde5d983fc36f2a5efd6f15400bab8e92ed21892","sha256":"3a5357e2b96761804f6b2353fecd783c64967403b17b0db6360624400047d6ea","sha512":"61d71947dba14a857f396832144315638d3f73dd3304e905a97efdcdfc4882ee2c216186c66d8e678d2e7bf5a765bfb1750d737af462c7fb2b2287e7cb20d61f","ssdeep":"","tlshash":"c71000000000000000300000000000000000000000030000000000c000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:47:52Z","last_seen":"2026-04-28T06:57:37.743552Z","times_seen":1771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"ff727817abdbf227f00af3ed93ec7825","sha1":"999b125a465cd3efb3cb6fc0d6e3a635909b9066","sha256":"8db560cebeb2515ceee73bebe9eafb46aa250578c00857c4dfffaa9ae5e0f7c1","sha512":"581ea68d6c8b383df2a2ff867e5598967fc09a27b7a0e295332b6257e863180da8cd3d513fb58daaf6cd27e41835928564e2167e71493d33d998db28c53bedd3","ssdeep":"","tlshash":"539002aa21d65402575211a415571888a1a4447014c49b85545695926c69166523597c","size":51,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.758346Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-04-30T21:37:31.822369Z","times_seen":139161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd3e5e88f56e2223d9ef3dc30817863f","sha1":"080ad8c078433403b83c284a02d2e95c22ec7ba6","sha256":"4be943c66cdfd8c2fa8c3570f14629e556bfa6e01afc413275d0440e3be97ddf","sha512":"8fa361b5ec195581ab7b7a2d52be9901fba9da0939063c36878180193414e26ff1bc86231176ffb68c31dde5b90a91ee7def81ac5ef7dfc00826de6b7a13670b","ssdeep":"3072:XJNmEj9es4bkvJ3NnvRx3kSzACvVcUJjNMByu3NFpFH4dzr+FnbTGssAEElTsF:ZrI0JSXYdzknbTGjn","tlshash":"4494e9d9b26274629266fca0a47f00c7b53dac57a4884c6cb249dcd62df090952b3f7f","size":419116,"data":"","first_seen":"2026-04-21T18:59:47.631327Z","last_seen":"2026-04-27T18:37:50.680091Z","times_seen":948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"297ae5b7e56994c927c68953285c6492","sha1":"c74303038e1e417c3507a4f0c76711c2addc36b4","sha256":"06c5e9dafc9c918a560047bb43247f0daeea9f3d47da2ab6ab16e850ba502e21","sha512":"a8ab16464ee5b9e4c01f09eb83157932b5f24b6d7d0bc925da954299190f21e9a146e98504a0bbb72579f16d1e0cbaf3f9890a8050ade8b68f424ca28cef44f5","ssdeep":"","tlshash":"e6a022b830c28000828f00a00ce30888b0ec00200080caea0828c0802c2c838023cc3c","size":63,"data":"","first_seen":"2023-05-10T00:33:02Z","last_seen":"2026-04-30T14:40:38.802416Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"2377721b193947f7550b2c9da55bc17b","sha1":"e0111961c3a541291e76160eff884c64ec0d3511","sha256":"ff322534742820e4075629c7c9fd791c0baba5d7ac1cb30b1d743da9537704d8","sha512":"00fd2ded89e6b2972acecfc869eb3a5ce3a98d42a660bf3e53f8172f0741db611945d6d345ea69c3b5479243f15db8caa0874baa9cd077dac09eb9a0e8a14324","ssdeep":"","tlshash":"90513fa2605ca01b9513c5d1f8a23eeef4de0058c77269d07e1c29dfeada8b7049716d","size":3011,"data":"","first_seen":"2026-04-21T18:59:47.652149Z","last_seen":"2026-04-30T21:39:56.737992Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"18f81894edf7060469ee06b02fe87b0c","sha1":"dae81c5b40fcbce0f11547ed5557f09660c97ea6","sha256":"82b81e50af7fd7bf987f2a4ab3a15cfb8ae09dcfa303d2dcbb6498d17633f191","sha512":"2e4df1a88decc6614b31bcf52651fda04893968115e715682a0bac62de17d3cfddc0f1504ab8d9a08c07bcc43968a7790578ad554a7eaa7574ac17628d0d8ea0","ssdeep":"","tlshash":"c2f0dcb34135a419d2428730e6c1a93ee283950496697ca5332810a6f2c834a808faa8","size":470,"data":"","first_seen":"2026-04-21T20:18:24.05129Z","last_seen":"2026-04-30T20:13:06.880087Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5e56b7278d27a20ca39b5a1120fa12d3","sha1":"05cfdd235ad8475899f729ece7e5ffa3cf6aafcc","sha256":"5ea95f1fe07b78c0ad9352e351030a3504d21bc3fb9922d952bb4feaac3bbc07","sha512":"ad0e92d3c7fcea5f33b5c96ba9a459a4d6cae0dd66f6cd5153e03c872adfba922725b8fe8ca276a5cabb0c76efc40df6a25dc78f8bb7d510ef3e2f98e491243f","ssdeep":"","tlshash":"2af0dcb34135a419d242c730e6c5a93ee283950596597ca5332810a6f6c824a808faa8","size":470,"data":"","first_seen":"2026-04-21T20:18:24.052381Z","last_seen":"2026-04-30T20:13:06.880741Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/bootstrap-select.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"323c-69cfcf30-13729013ca16479a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2190\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12860,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"3c13518e758f95b39f33ce9249aef2ea","sha1":"edbb8b3ed265e6a52a60d58aa45309f1716fb056","sha256":"032c55f8092688bd96e242ab5c1b7c63d8c04bd502ef4bfadb277e7ac57ddf47","sha512":"6cad1c0d0875376ef0cc6f9cb0a1bc161a535ba54301a9ef48b9005974d729c924496b81ae36d46e3b3beb96e75d7b7244a2bf66c2323493c5db70a728787561","ssdeep":"192:NAEV3IkN9UXliukFaFfF70Vi2Ar9kyWSDCJiUzuDcL5:kliu9F70Vi2ArLlDCJn","tlshash":"1242119db3d202704099806a398a7e6677dee451324eccb973dfe25c2f80543e9377a6","first_seen":"2023-05-22T09:42:17Z","last_seen":"2026-04-30T14:40:38.627101Z","times_seen":389,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/row-bgimage-3.png","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/row-bgimage-3.png HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"767f-69cfcf30-6c63f524c704b707;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 30335\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 637 x 321, 8-bit/color RGBA, non-interlaced","md5":"4fb3f9e980052107dc63d209f3e3a4e6","sha1":"42e7058bb8018444ad63b60822f504673e83b084","sha256":"e15aaf1d7e0e6d01a65f5142340ae08db269c646596baf9e8678b951014718f9","sha512":"858a60b8f5ac9b069638816288c901df10f578dbae07b45f8ef2206364a93a2a05d82516858f4c5f51a7e83a02a6d51f088e09ac6d415a0807f0212dd5fa7a75","ssdeep":"768:IdVL1Bg91o2uFmlwsGPKNL6aFpq9jsbr8EbQfWB3B:IdzeHo5FttU6SpmjQr8EbS0B","tlshash":"4dd2f13398b29448c01de0327b86db13067f4bf0ca59fa56677124723525764cf6bd6e","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-04-30T14:40:38.635114Z","times_seen":365,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 120999\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 17:18:12 GMT\r\nexpires: Wed, 21 Apr 2027 17:18:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Apr 2026 19:10:48 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 518438\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":419116,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"fd3e5e88f56e2223d9ef3dc30817863f","sha1":"080ad8c078433403b83c284a02d2e95c22ec7ba6","sha256":"4be943c66cdfd8c2fa8c3570f14629e556bfa6e01afc413275d0440e3be97ddf","sha512":"8fa361b5ec195581ab7b7a2d52be9901fba9da0939063c36878180193414e26ff1bc86231176ffb68c31dde5b90a91ee7def81ac5ef7dfc00826de6b7a13670b","ssdeep":"3072:XJNmEj9es4bkvJ3NnvRx3kSzACvVcUJjNMByu3NFpFH4dzr+FnbTGssAEElTsF:ZrI0JSXYdzknbTGjn","tlshash":"4494e9d9b26274629266fca0a47f00c7b53dac57a4884c6cb249dcd62df090952b3f7f","first_seen":"2026-04-21T18:59:47.631327Z","last_seen":"2026-04-27T18:37:50.680091Z","times_seen":948,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":163,"dns":2,"connect":27,"send":0,"wait":22,"receive":52,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/FoOei4fj9jUnx6rvPbVHvM55F0czOW7QDMlXbJStOTQ.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"GET /js/th/FoOei4fj9jUnx6rvPbVHvM55F0czOW7QDMlXbJStOTQ.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23749\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 17:05:46 GMT\r\nexpires: Tue, 27 Apr 2027 17:05:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 785\r\nlast-modified: Mon, 20 Apr 2026 09:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62403,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61144)","md5":"81f8288fa854b624215d7a9bbb9f8500","sha1":"8fd6397ce7a2e5dfab87ac92f421300994942a48","sha256":"16839e8b87e3f63527c7aaef3db547bcce79174733396ed00cc9576c94ad3934","sha512":"dfdc58bcf5cd5d4d6dc295627e9aa095453f58197e03bfeaf2d111da58dee4c5def5d2249d50a68075db2461971ff37e6542edba495b7fd34752eaa06967d0b1","ssdeep":"1536:jDIp4rESx3w/hSOOUMGnrGz4kbAXqn4ji/u:7rWkUZGUS4v","tlshash":"3f5329cfb1d2b3215ee2a1e244ab410de27ea5185c48180fbd44fbf49e749879437f6a","first_seen":"2026-04-23T09:07:29.108944Z","last_seen":"2026-04-28T06:57:37.635258Z","times_seen":1089,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":93,"dns":2,"connect":8,"send":0,"wait":10,"receive":7,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/storage/app/public/photos/8s2cbTpt36Kbusrnd2uKGBz5PYwWLA9CkSnWoDmW.png","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /storage/app/public/photos/8s2cbTpt36Kbusrnd2uKGBz5PYwWLA9CkSnWoDmW.png HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2026 19:33:41 GMT\r\netag: \"26caa-69d01615-469e71c0f63849eb;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 158890\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":158890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1739 x 678, 8-bit/color RGBA, non-interlaced","md5":"d5cf496339128377fff26adad1e401e7","sha1":"2557c57ecfd73853d1406fb97c2e12553d88a32d","sha256":"a3cbc005deebad552b4b535a882c81e2f6b707f47b57a55df4290accfe9bd027","sha512":"3ff275cfad99cf6cd0cc22f9d502e7f56c7442646bd23f2aed7a6970ac8412d030f19135fe5253648a93af2c05d293f1d522451c6ccd5e2f70f520b73e43140c","ssdeep":"3072:buywUGu+8wEvHOLrS6T3DDcrYIdRGU+aPY7/E:CyxGB8wEvufSCDyxLO/E","tlshash":"57f3f009a9b3e52dfcdf01b0ed861bca130591a2d5690870f7be581cef45f9ca9a2713","first_seen":"2026-04-27T17:19:35.616694Z","last_seen":"2026-04-27T17:19:35.616694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?rKZGlA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /generate_204?rKZGlA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T21:39:25.757764Z","times_seen":14442449,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"15da-69cfcf30-3a678b95ff899568;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1703\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5594,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-30T21:35:56.835602Z","times_seen":17886,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/proccess-box-arrow.png","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/proccess-box-arrow.png HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"3fce-69cfcf30-49d75eba2ca48c8f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 16334\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":16334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1490 x 263, 8-bit/color RGBA, non-interlaced","md5":"0dd316e116e17f7d7517466f824ce9b7","sha1":"4543ef53c6fa9fe6e4a3247e3549a2558d9c8178","sha256":"70a4fe15a5bd83d6c6be718edd76d79f376a2ec053ed4f145c10a89f7722ca83","sha512":"6d7a588326f88ddfe15a0ef2f0c114793a7be74c09c1ea24cbb69dab07a37f1ebcc108da1968f8a8f04164b2d0110d1d75e649545b83ee998b30fb9e2b1fbf20","ssdeep":"384:k+EBl/lCSqJz6KOG3QgdziFeKzU6Cb0HC63jjfLy:k/RlCj/BRBigKzU6Coi63jDm","tlshash":"a972cfc7e09f1c32dd446a7af0fb1f57b694478e0a6041717fadcd6518239486acbc86","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-04-30T14:40:38.620934Z","times_seen":371,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 18:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 18:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 426286\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-30T21:37:31.514353Z","times_seen":776197,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:52.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 18:29:34 GMT\r\nexpires: Wed, 21 Apr 2027 18:29:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 514158\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-04-30T21:39:56.703678Z","times_seen":2892,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/ajax-loader.gif","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/slick/ajax-loader.gif HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/temp/custom/slick/slick-theme.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:49 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"1052-69cfcf30-2008f8edf2b1d16d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4178\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-04-30T21:37:22.553697Z","times_seen":36881,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/themify/themify-icons.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/themify/themify-icons.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"4599-69cfcf30-c4d8b4e937cb290a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2689\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":17817,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8550d4f5955437a51f49a5abff88a7a4","sha1":"e360e1412a31c69ed2188a9816d394478895c106","sha256":"9c66fe2fab3a1d65b14b92a20d4c817ed481d74846a8a5f33d3616200b973602","sha512":"c1eb60c4cf0c1a51bc2172d549b7d735304572c6d82e61675d6e3feb9ee74fe354eaa83da5d8cea4ab16b471879314e54cc21e4ad1ddcfc990852fe28677752d","ssdeep":"192:TjlG8SWxB5iQYxil3EguJ+JvZ247F52WM:s8NbAlMJdFg","tlshash":"f182d39495bf1ca41319e0c1734bf215bb0db6aa9a450c5ce293ff4cafd3a1199c2adc","first_seen":"2025-03-18T04:27:57.388175Z","last_seen":"2026-04-30T14:40:38.616041Z","times_seen":358,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/livestamp.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/livestamp.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"586-69cfcf30-78acbc2882f87581;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 590\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (520)","md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-04-30T14:40:38.626328Z","times_seen":393,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/row-bgimage-1.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/row-bgimage-1.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"eae4-69cfcf30-16f540df7ef12be2;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 60132\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":60132,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"c7feed19158ba81cae88cc2e4301ff66","sha1":"6e60297f5a9a1d8de2c95ec8152fbe1405ab04a3","sha256":"f43cd1a0f11fadf305cf2779a848d36348a987eec3c246cb0fc1dfa98e6405c3","sha512":"c75b2186d9befb2b2ab53262f9e1d77766abee44dfead060338dc43a33a3ef69780bb31beef5a469742c71231bb2163c5a9ce20549e39558a317d78c0736551f","ssdeep":"1536:NYHDndRCr/EpnjVSEbdwI5MG75BEDOsZxtBVdX:oDdRCzlXIGGd6DbdX","tlshash":"e343019a8fe5afa2ece8177575d7dba08d122c4743d5c1ea8ad10225a3fc231b81c4dc","first_seen":"2025-03-18T04:27:57.382441Z","last_seen":"2026-04-30T14:40:38.627683Z","times_seen":369,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:49.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 143170\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 12:40:32 GMT\r\nexpires: Sat, 24 Apr 2027 12:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 24 Apr 2026 09:10:42 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 275897\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":422727,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"5221752f0019ddc23db2409b1e580b7d","sha1":"ab2478705eb3045a4b015a4dfc026aedfb68c146","sha256":"735c310717158d6446da1b32223eace957c2174abaa4c6f9485152896a13f04d","sha512":"67798577d46bdef59ef5a829f7641f636100137c6f5c8f744fc89d95745cbe15576a93d2e1d8ddcc33eb8411af12511a32eee19835a8fa3c658454b96634e129","ssdeep":"6144:3a0BeSZhdWf9rJBeqyHHUKmEmZRdWm9o+BYz3E4msXllWq:3nurJBexKkEOXllWq","tlshash":"cd944cd977a2707392a2f1a5902f0103b17a6896f44c8c7cb798ddd16eb494942fbf38","first_seen":"2026-04-24T15:38:02.474016Z","last_seen":"2026-04-27T17:35:07.799535Z","times_seen":2498,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:49.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/player/8456c9de/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 446632\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 07:44:54 GMT\r\nexpires: Thu, 22 Apr 2027 07:44:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 22 Apr 2026 04:28:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 466435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1493639,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"56dbe9bf62eea12176a187ec85baf891","sha1":"1094b8799f5bd304d67e78a82cf18485457d89a4","sha256":"69fb674001054d564ddb078305eac3b62bc0814823a9c82b66830cfa6236cb7c","sha512":"dc61b521f5094883badaa5402b6e217f2e266eb7d70d691351d85a2a076e5897c1c819f11226da2c98cb7cb5d7d7b29929c88654464c0e0734a63d81287988cc","ssdeep":"24576:TO3oC39/qL7WdmOeaCx1mhi4z1sZh8FphawIPWEmZDUtILFwEjLHtNVhH3M:TO3oC39/qnWdmOeaCx1mhi4z1sZ4anPD","tlshash":"b5256cd87192b09603a3f0e418ef4902f17a2a84718cd4adf67ddae62cb1546457bff8","first_seen":"2026-04-22T13:58:53.287276Z","last_seen":"2026-04-29T23:35:33.49039Z","times_seen":4571,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-27","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/44081942/cc-powered-by-light-mode.png?width=185","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 16:47:22 GMT","end":"Wed, 22 Jul 2026 17:47:13 GMT"},"fingerprint":{"sha1":"2E:DD:BD:BE:41:8E:5D:61:D5:7D:F5:38:C2:AE:75:A4:D0:05:93:C6","sha256":"91:97:69:F7:C0:9F:1F:CB:DF:8D:1A:88:BB:E7:BA:82:64:A0:2C:46:5D:B8:07:51:0A:92:BE:1F:F4:B0:DD:F2"}}},"request":{"raw":"GET /media/44081942/cc-powered-by-light-mode.png?width=185 HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 7191\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 27 Apr 2027 17:18:51 GMT\r\nlast-modified: Thu, 19 Jun 2025 17:21:30 GMT\r\naccept-ranges: bytes\r\netag: \"1ab3ab983ee1db1:0\"\r\nvary: Accept-Encoding\r\nimageprocessedby: ImageProcessor/2.5.2.0 - ImageProcessor.Web/4.8.2.0\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nage: 1044385\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9f2f7d262959568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 33, 8-bit/color RGBA, non-interlaced","md5":"93060be98c362aa037ebce82d04b28b4","sha1":"b8139f5ef08991d9486df2d43d29ec58aa411d51","sha256":"35736416592a885016d621e54e517b3406031a4da520bba8e553db054a596071","sha512":"1820fdd4a926f450baf4d0ba36337f83dbf2354d506bf829a8aafcca706068467b8746b4504d8959e4231a6cdf6bb46dbb9e4345923c0a3a7bb1cd303d165cf5","ssdeep":"192:q4oRi9cyvSC+6uqYXk7zs+EWKv1cISjiDdxuuwpiE:T0i6ynHG+EWKvFwqPzwwE","tlshash":"99e19ef30c480fe6950492c61cc2a97c1db8479e51f74bbdbabce85f9424421de6e292","first_seen":"2024-05-16T05:45:05Z","last_seen":"2026-04-30T14:40:38.637778Z","times_seen":430,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/jquery.form.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"ab23-69cfcf30-b395663500104d1a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11605\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":43811,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-04-30T14:40:38.611121Z","times_seen":537,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 27 Apr 2026 17:18:51 GMT\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23175,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da021909beab0ff8237ca3132d715150","sha1":"cb4dfe7ecbaffe34c9c0f7264a20376fea1c3c02","sha256":"c598de7a97f99eca9a992b31e0ae65ebb1c1744981af3d577c965041fcff3594","sha512":"2ce8f240884297d891fb4e24220c80e23067b7d9185aa514deeaa9b04269f061f1a0cf806096ab311b78ad83467682e96ddcf9d394fb0e9746c4bb7ce702ace7","ssdeep":"384:cO3B3u3UOCZVOrkOOc/3O9K4O+VZO3wyOYbbOJW8v9AeUtGv4RK0:ddeU9Al","tlshash":"89a2bc66142fa580aa472ce337df3d31df4fb194b450887a6ffd2898ac56c22636630c","first_seen":"2025-09-17T09:11:46.441038Z","last_seen":"2026-04-30T14:40:38.632222Z","times_seen":406,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/forex-investment-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/forex-investment-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"1994b-69cfcf30-2d65ab9dfb02b8c9;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 104779\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":104779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"6d151c71ab3804dd08464df134c5eb5c","sha1":"f61ed4d743c8ac0234e6f658bbe73fb8ac49016d","sha256":"1b96f6c6d53f390d0364b45bdab190e4f66e357e1648023acf2dfa6f0de3f3d9","sha512":"0c092a4e518ba544cf24b6fb50371b794c42c30c8534c09ac58e197cc5e9d57370d3834d717d8aa3ec1680000616d3ee9bf175941fcdf1fb17ffcf27042d2b59","ssdeep":"3072:ZvsEfdDR84g4acvSPqKdLJ3r9VfCyb9CwxX5:Z0uR8IacvSP3dd3rOOX5","tlshash":"e1a312754d4f85c99ee1473293d48db20fdd8d615b80cb69ba2e60aebd72826e407b30","first_seen":"2025-03-18T04:27:57.381676Z","last_seen":"2026-04-30T14:40:38.610533Z","times_seen":351,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://www.youtube.com\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 272\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 08:18:28 GMT\r\nexpires: Sat, 24 Apr 2027 08:18:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Sep 2023 03:18:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin\r\nage: 291623\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e78ea4caa31c35bac97a41e5930ffe8","sha1":"dbf99131b9b5087e664b9fdc7097c97655474517","sha256":"6fa88a20839537ae66da730e5bd183035265176d972bc8df075b89da0c6186ea","sha512":"cf798ef67c90f90f23635beb202095a2c76052d491c224aa14535bb9b16f28fa9a850b8db887f158afd01d634aecb9e2b05a27efdfd225d3583e6297bdd78b43","ssdeep":"","tlshash":"2ef09e6d577829d8930f87c0be5974127d9f23e85194b3b541d4f9326138ee2d141cd9","first_seen":"2025-05-26T15:52:21.952281Z","last_seen":"2026-04-30T21:37:31.592853Z","times_seen":21335,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/popper.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/popper.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"51ed-69cfcf30-5672d741981a62b8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7130\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20973,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (20800)","md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T20:37:22.687725Z","times_seen":7240,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/moment.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/moment.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"24d9d-69cfcf30-d58901b1f32a16d8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 31497\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":150941,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-04-30T14:40:38.639372Z","times_seen":1176,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 14:58:03 GMT","end":"Sun, 26 Jul 2026 14:58:02 GMT"},"fingerprint":{"sha1":"28:01:15:B1:F6:14:ED:7E:5A:C4:36:40:D4:51:0A:F7:BD:16:E9:31","sha256":"4D:F0:56:5E:65:97:FB:02:03:94:69:9B:31:B0:A5:F4:1D:35:D8:8D:41:A5:6A:9B:C8:E7:5D:A3:87:81:E0:95"}}},"request":{"raw":"GET /coingecko-coin-price-marquee-widget.js HTTP/1.1\r\nHost: widgets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: x78/JLvR0bZ8v385JLO+OmwFDvOLrbVxif7AM9NbenNsuLllxm0Di+XJXChU5Chj5hfjJVIy3sw=\r\nx-amz-request-id: TNSJJZSVD7XM5KVB\r\nx-amz-replication-status: FAILED\r\nlast-modified: Mon, 07 Apr 2025 09:46:41 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8IU8gJZQXRiGC6A_MmJu74Yaw9wjwSfp\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 468291\r\nexpires: Tue, 28 Apr 2026 17:18:48 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"73cffa172df581e1417b3380bf189952\"\r\ncontent-encoding: br\r\ncf-ray: 9f2f7d13dd175693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230964,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36129)","md5":"73cffa172df581e1417b3380bf189952","sha1":"c14dc8dfcedda14dfb6202ae9e0141422ea39bd4","sha256":"789cebe4be3c4e1098f04b45f09e113fbb80d7dea01b9c8a5b1b9a0a1af14b44","sha512":"294775493517fff0e586d24ae8bd482c679ff15b8a40519285040ca4eef3f508b967d5b84b2c41021e731da5c08c83093bf171b0abd7d9b7de88a32ad9f5e97e","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodP5rUzpI4Oz:XYBctCo254Oz","tlshash":"e234198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","first_seen":"2025-04-07T11:07:41.7631Z","last_seen":"2026-04-30T14:40:38.639832Z","times_seen":672,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":22,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/v3_0473660.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/v3_0473660.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"195d-69cfcf30-15652e0219bf9a44;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 6493\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":6493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 128x128, components 3","md5":"79516e0e08ecd4f26f179e82549f2f89","sha1":"f6038347935fb667021cb58791368b43fffcc8f3","sha256":"97a3df4c61f939660a54cfbfb1ac77cc7939b88ea38d2574c324ec85e422ade7","sha512":"d439d49ee43be35e9a52984b8c20f3ca9dd2c85689db9d0ceb9208682409db3b80abd489030deb42664f4561a5ca98c665b86ed1508848d868ff667435f97821","ssdeep":"96:XmZEsqS7Wn26kKX9aufHJe9+0BzgrZqk+a2aenqhddfmHTD/mZU:XKUS95DufH89IrZpfdKua","tlshash":"2bd16d636f329f81d9faf8f8420ad817422cc8d7a927bf4b5b390955bd738b14b42065","first_seen":"2025-03-18T04:27:57.420628Z","last_seen":"2026-04-30T14:40:38.634567Z","times_seen":309,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/slider-mainbg.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/slider-mainbg.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"143fe-69cfcf30-88529c020f63c44c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 82942\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82942,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x730, components 3","md5":"039468794089e95ad715cae031648be5","sha1":"e8938bf54dda55d865849dd8b1313245f2261ed0","sha256":"02dfb50024fb0c935d552f003c96f65409a5e6092010b74fe1f3b08d1b5f309f","sha512":"61d01e7cd7dcc988705ff19d6e0ff8fe5c47f8cacfb5e054e1720859f2c04cc27a1f90d10527853aa2168b5f150ad1cb6ce9a24f8399de64834194e1c55d0b29","ssdeep":"1536:2cm23K8MTTSc2erxQ1DzUGDfA190SgLpWP43uco/4Z:xvaTSqmpUGDI190SAuct","tlshash":"bf83f13bc74f6b92d2eb1732c9c397a8af55a4b0e152010a966d813fbf6d7d66e07001","first_seen":"2025-03-18T04:27:57.416294Z","last_seen":"2026-04-30T14:40:38.630068Z","times_seen":311,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/flaticon/Flaticon.woff2","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/flaticon/Flaticon.woff2 HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/temp/custom/flaticon/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:49 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"3d14-69cfcf30-645af1d7e8549dd6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 15636\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":15636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15636, version 1.0","md5":"7e6e07c9567fead57aad008ba0f35ad8","sha1":"d5fc38cc2b8feeee4abaf792ec9a0975988d5595","sha256":"97715d73c5593d1985486d8af235ffac8e7a08cad8e5c0517b115fa7bc372053","sha512":"ef21213d3cbdf6c17abfdb044c8dc8ec159173ff43ab2e9c833d6416a23df06785ccb8dc056f6f587b8712c1028f1d56a4c454f62a807fe5f35ca368fae86f5e","ssdeep":"384:Uc5Cd909FNFKcI3gyIaNMqhmM21zjlBRc2:UYCdSbecwfh4N1","tlshash":"2d62d16323b0dfa8e7df61618d25f03dc35f092590228eeed3d5e9940028fe46da0ac5","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-04-30T14:40:38.605273Z","times_seen":382,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 120999\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 17:18:12 GMT\r\nexpires: Wed, 21 Apr 2027 17:18:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Apr 2026 19:10:48 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 518439\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":419116,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"fd3e5e88f56e2223d9ef3dc30817863f","sha1":"080ad8c078433403b83c284a02d2e95c22ec7ba6","sha256":"4be943c66cdfd8c2fa8c3570f14629e556bfa6e01afc413275d0440e3be97ddf","sha512":"8fa361b5ec195581ab7b7a2d52be9901fba9da0939063c36878180193414e26ff1bc86231176ffb68c31dde5b90a91ee7def81ac5ef7dfc00826de6b7a13670b","ssdeep":"3072:XJNmEj9es4bkvJ3NnvRx3kSzACvVcUJjNMByu3NFpFH4dzr+FnbTGssAEElTsF:ZrI0JSXYdzknbTGjn","tlshash":"4494e9d9b26274629266fca0a47f00c7b53dac57a4884c6cb249dcd62df090952b3f7f","first_seen":"2026-04-21T18:59:47.631327Z","last_seen":"2026-04-27T18:37:50.680091Z","times_seen":948,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 143170\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 12:40:32 GMT\r\nexpires: Sat, 24 Apr 2027 12:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 24 Apr 2026 09:10:42 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 275899\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":422727,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"5221752f0019ddc23db2409b1e580b7d","sha1":"ab2478705eb3045a4b015a4dfc026aedfb68c146","sha256":"735c310717158d6446da1b32223eace957c2174abaa4c6f9485152896a13f04d","sha512":"67798577d46bdef59ef5a829f7641f636100137c6f5c8f744fc89d95745cbe15576a93d2e1d8ddcc33eb8411af12511a32eee19835a8fa3c658454b96634e129","ssdeep":"6144:3a0BeSZhdWf9rJBeqyHHUKmEmZRdWm9o+BYz3E4msXllWq:3nurJBexKkEOXllWq","tlshash":"cd944cd977a2707392a2f1a5902f0103b17a6896f44c8c7cb798ddd16eb494942fbf38","first_seen":"2026-04-24T15:38:02.474016Z","last_seen":"2026-04-27T17:35:07.799535Z","times_seen":2498,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/menu.svg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/menu.svg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"3d6-69cfcf30-6c4d403e8d3621f0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 482\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"464397bb0033a309123c20bdc1306166","sha1":"1dd2aff9a642f3c01942fafa22fa27483762f223","sha256":"dc1db702ebdb8a1218082fd20e55ec5a0af59e92393f2a7ab7f9bacc790499a2","sha512":"4009186075ca4204205219bdd31c92c89ae212af6a4c90688687333e02bba751ac4a6eecb54d363c42e7821d13e25e5100df3add3e8f9d1b05f5512e9c477f90","ssdeep":"","tlshash":"a311214f4752dcbe243643a877f425c63bf08c57c1b149e09a273c37f42d5608e99168","first_seen":"2025-04-28T01:39:11.795951Z","last_seen":"2026-04-30T14:40:38.623306Z","times_seen":355,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/8456c9de/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:49.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/player/8456c9de/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 59120\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Apr 2026 22:25:37 GMT\r\nexpires: Mon, 26 Apr 2027 22:25:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 22 Apr 2026 04:28:11 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 67992\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":518755,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"66ef061729b27a4257a868ada7f49f37","sha1":"3d7b5e2bb844723e8e834a26e74169f53b86d32c","sha256":"f140b6831469664f09fb07ae991e983b46752deaa9d8a8b214852f235ea6e7d0","sha512":"0decb25ecfbf4819354251af5188e52fa9b5333c9828998606993817b52a6e43793f7c6ebfb87ffab61c628fa709c858898723f01e1c8d666dc7f7cf2df818fb","ssdeep":"6144:Q8d5Fe/qoMOg7USBfrIoI3M5Kdl5+Oi4f7:jYxMOg7USZIoIc5Kdl5FD","tlshash":"6fb4d972f0e1233cb2278d5997d9954d7339d983e2e22afff11166dacbc76811326206","first_seen":"2026-04-21T05:00:52.033852Z","last_seen":"2026-04-30T21:37:31.737691Z","times_seen":6846,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:50.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 18:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 18:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 426284\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-30T21:37:31.514353Z","times_seen":776197,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/large/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/1/large/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 12242\r\nx-amz-id-2: nx0KvfiqGvDw4MnJemf5dwEAuPu0VQzNco/YptjhKVwnaQct2dk5hj78zsbVfR2mBa8+7ZTq6So=\r\nx-amz-request-id: F556GJ1MTFPEXH9P\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"565e8c524f6da22928811f836d0b92a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K_Yd_oAsiQpaEoTt9rotaTCh6C_AUMdt\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 646\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPBDUDI2uX7%2BTheE0%2FVlcp%2FeuBTWOoUq%2FhA%2FCBd75Is0XljeV2WAjKtvePZEJeTLxeIiuOpK%2Bj0QJbNTKU2sLGNZDb%2B0rc40%2FA8%2Bkov1oJLlwKW6jzEnETwdi%2FLwkeGLDZjN2e89rEV0Lz1j\"}]}\r\ncf-ray: 9f2f7d1b8f065699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"565e8c524f6da22928811f836d0b92a2","sha1":"c52a8b6052273f04ffe097517461948beb849d3b","sha256":"1eb4e75d64a76a5d1fba301715ae227c683b34e8f75291670cdf7ae2a59de86f","sha512":"eaec675e23843f9fbe93edf354d54bd9b35001daa17b2345f6193e004035f1d16e0f5fdd933826a0dfb2e58e803174adf0cffdedba3ed561b1f1f528b15f4263","ssdeep":"192:CcG4VfIT9czHUiIxaA0BOlAD6sXLsU9Hogsr/ncqUd/gaPQ8SB+Dfd4rfMst/C0b:1G4VfIOExaA0Bz6aLmncqqoFBdLMoC0","tlshash":"1a42c005aae317c9cfa9803311a524136489c3800e65e8e6b1d4dc7cee9eb096fb37e5","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T15:02:15.776496Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":84,"dns":5,"connect":1,"send":0,"wait":6,"receive":1,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/bootstrap-select.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"323c-69cfcf30-13729013ca16479a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2190\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":12860,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"3c13518e758f95b39f33ce9249aef2ea","sha1":"edbb8b3ed265e6a52a60d58aa45309f1716fb056","sha256":"032c55f8092688bd96e242ab5c1b7c63d8c04bd502ef4bfadb277e7ac57ddf47","sha512":"6cad1c0d0875376ef0cc6f9cb0a1bc161a535ba54301a9ef48b9005974d729c924496b81ae36d46e3b3beb96e75d7b7244a2bf66c2323493c5db70a728787561","ssdeep":"192:NAEV3IkN9UXliukFaFfF70Vi2Ar9kyWSDCJiUzuDcL5:kliu9F70Vi2ArLlDCJn","tlshash":"1242119db3d202704099806a398a7e6677dee451324eccb973dfe25c2f80543e9377a6","first_seen":"2023-05-22T09:42:17Z","last_seen":"2026-04-30T14:40:38.627101Z","times_seen":389,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/crypto-investment-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/crypto-investment-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"16fbc-69cfcf30-ec4dfdbca1fa0435;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 94140\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94140,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"67019c83e967a0e72bf006b3c202f439","sha1":"01d41a39c437ea54138820ffaaab58bb86e21bf3","sha256":"d9319dba8677abd747aa26cde0db12276501d81b30cad9e175329c07fd3275bc","sha512":"665129cbc534ddaadd9510bbfe1690d485d85073b72e4667cf721b4d76f8ca317ce5581e92d226b9f078cc5be1cdbe421c008b16bd1af0c20cdd33d2092491f5","ssdeep":"1536:xiM96fkCGRm49r8NLZo7HxbE9QXjiv3cjSr6KgRTry8iycEymo++o+YZSRekfcwB:E+mk3R5r8NLZAZXTM9OtTry8Hymo++Sk","tlshash":"f7930250ea6b896050ccc536a8812bacdb265ab7a7d6350f38edf7cde1484f42937d06","first_seen":"2025-03-18T04:27:57.417698Z","last_seen":"2026-04-30T14:40:38.619023Z","times_seen":353,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 12:37:39 GMT\r\nexpires: Tue, 27 Apr 2027 12:37:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 16872\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-04-30T21:33:30.570224Z","times_seen":43672,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-04-30T21:36:32.290906Z","times_seen":68362,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/FoOei4fj9jUnx6rvPbVHvM55F0czOW7QDMlXbJStOTQ.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:52.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /js/th/FoOei4fj9jUnx6rvPbVHvM55F0czOW7QDMlXbJStOTQ.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23749\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 17:05:46 GMT\r\nexpires: Tue, 27 Apr 2027 17:05:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 786\r\nlast-modified: Mon, 20 Apr 2026 09:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62403,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61144)","md5":"81f8288fa854b624215d7a9bbb9f8500","sha1":"8fd6397ce7a2e5dfab87ac92f421300994942a48","sha256":"16839e8b87e3f63527c7aaef3db547bcce79174733396ed00cc9576c94ad3934","sha512":"dfdc58bcf5cd5d4d6dc295627e9aa095453f58197e03bfeaf2d111da58dee4c5def5d2249d50a68075db2461971ff37e6542edba495b7fd34752eaa06967d0b1","ssdeep":"1536:jDIp4rESx3w/hSOOUMGnrGz4kbAXqn4ji/u:7rWkUZGUS4v","tlshash":"3f5329cfb1d2b3215ee2a1e244ab410de27ea5185c48180fbd44fbf49e749879437f6a","first_seen":"2026-04-23T09:07:29.108944Z","last_seen":"2026-04-28T06:57:37.635258Z","times_seen":1089,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/jquery.form.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"ab23-69cfcf30-b395663500104d1a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11605\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43811,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-04-30T14:40:38.611121Z","times_seen":537,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/slick.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/slick/slick.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"726-69cfcf30-cc4d5afa4c84b7a3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 480\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"68a281f599d6a4fa5e8cab54bc5f59fe","sha1":"515cb38cbd76ebee91d05f7544758f4eceaac07e","sha256":"1b786863757c336ef237105e2560e02e2e54b90781ecafb63732662caffe4cbb","sha512":"e001ba8f09719604413c08ad5aa641cc9a5fe286c2d049fa0e86e12972f3d0a72e2cbbb9322734766aaad2fd892ba98c8cc5c91a290da36dd9f36995fe861857","ssdeep":"","tlshash":"2e3119dc0152c5d68b3384444fd38649eeefa0930c241698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-13T11:05:16Z","last_seen":"2026-04-30T14:40:38.629454Z","times_seen":613,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/about.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/about.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"aac0-69cfcf30-d610f87f9018c389;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 43712\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":43712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 570x590, components 3","md5":"6662d34c4f26f1f26586d8b0718889cc","sha1":"1ca95815bd8c654a8365e6139c7bfc3c7e0af298","sha256":"48fb855c939d83924f83ac5349c8ef9d349ed88299720755a5c4870c5e6374bd","sha512":"d9996ba23333a2b4452837d7875cb6df0203d263d1d44c16afca1ea126d398cdd1b3d3c37ccc25e402bb3022359d0669ecd0adde0fcf379d4ed0d61acb260f3b","ssdeep":"768:TmNXFtG2SzAhaf7oHK1sNolxl6K7CMV55gRWDwyCe+dPLiHnGYRhCeN1:TU1tG2SzAWkKXHl6K7LV0jH0n3RB","tlshash":"2e13f10085136a734b169cf6a32bc469d44affd693b092ce9b30c0692484fc1db976f7","first_seen":"2024-08-19T16:43:15.382088Z","last_seen":"2026-04-30T14:40:38.63114Z","times_seen":339,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 18:29:34 GMT\r\nexpires: Wed, 21 Apr 2027 18:29:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 514157\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-04-30T21:39:56.703678Z","times_seen":2892,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 01:56:46 GMT\r\nexpires: Sun, 25 Apr 2027 01:56:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 228125\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-04-30T20:33:36.982361Z","times_seen":12345,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:52.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Mon, 27 Apr 2026 17:18:52 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T21:39:25.757764Z","times_seen":14442449,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:55.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1777310335231\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: 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%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260424.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 904829326\r\nX-YouTube-Page-Label: youtube.embeds.web_20260424_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1777310332129\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 12149\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12149,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260424.01.00\",\"configInfo\":{\"appInstallData\":\"CPu0vs8GELGR0RwQlLbQHBC8pNAcELD-0BwQ3rzOHBCBzc4cEPyyzhwQi4_RHBDxtNAcEKz10BwQvbauBRC1pdEcEJ_PgBMQyPfPHBC9mbAFEJmNsQUQwonRHBDM-dAcEMPegBMQh6zOHBDM364FENr3zhwQk5mAExD824ATEMbGzxwQndCwBRCu1s8cEL2KsAUQ3M-AExC45M4cEMGP0BwQpKnRHBDLo9EcEJT-sAUQ9quwBRCL988cEJSD0BwQ-_bQHBCJsM4cELjggBMQwv7QHCpYQ0FNU1BCVV8tWnEtRE1lVUVwVUNuQTc1RlhKRFdkMERqcmJ3Q3pLZ3JBUUR6ZjhGeTdjRy15YTI1QWFmaVEzcS1RYVhsQWJNUXBxbEJzb19sRVVkQnc9PTAA\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://derivefx.com/\"}},\"events\":[{\"eventTimeMs\":1777310331997,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332000,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332006,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332006,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332006,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332007,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332166,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332167,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331509,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331348,\"latencyActionBaselined\":{\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331376,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331509,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331510,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331703,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331818,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331678,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331786,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331676,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331705,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331677,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331734,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331676,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331712,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332175,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h3\",\"transportProtocol\":\"quic\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310331981,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332177,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332180,\"latencyActionInfo\":{\"serverTimeMs\":104,\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310332216,\"screenCreated\":{\"csn\":\"7xM8XaureAgUuhEf\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"e5rvafHXF9uAq7YPiJbmoQo\"}}}},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1777310332217,\"latencyActionInfo\":{\"clientScreenNonce\":\"7xM8XaureAgUuhEf\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1777310332217,\"screenCreated\":{\"csn\":\"vIRhceghdiDrI5jA\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"7xM8XaureAgUuhEf\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1777310332218,\"visualElementHidden\":{\"csn\":\"7xM8XaureAgUuhEf\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1777310332218,\"latencyActionInfo\":{\"clientScreenNonce\":\"vIRhceghdiDrI5jA\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1777310332218,\"visualElementAttached\":{\"csn\":\"vIRhceghdiDrI5jA\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMImMDW98SOlAMVB5L0Bx3VHxXvygEELfr7ZQ==\"}]},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1777310332220,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"22\"}},{\"eventTimeMs\":1777310332221,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"23\"}},{\"eventTimeMs\":1777310332235,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"64BE59GfI6TECw66\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"36\"}},{\"eventTimeMs\":1777310332238,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"39\"}},{\"eventTimeMs\":1777310332327,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"128\"}},{\"eventTimeMs\":1777310332328,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"130\"}},{\"eventTimeMs\":1777310332329,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"131\"}},{\"eventTimeMs\":1777310332336,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"137\"}},{\"eventTimeMs\":1777310332357,\"visualElementAttached\":{\"csn\":\"vIRhceghdiDrI5jA\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"158\"}},{\"eventTimeMs\":1777310332358,\"visualElementShown\":{\"csn\":\"vIRhceghdiDrI5jA\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"160\"}},{\"eventTimeMs\":1777310332419,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"220\"}},{\"eventTimeMs\":1777310332665,\"visualElementAttached\":{\"csn\":\"vIRhceghdiDrI5jA\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"466\"}},{\"eventTimeMs\":1777310332665,\"visualElementShown\":{\"csn\":\"vIRhceghdiDrI5jA\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"467\"}},{\"eventTimeMs\":1777310332666,\"visualElementAttached\":{\"csn\":\"vIRhceghdiDrI5jA\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"467\"}},{\"eventTimeMs\":1777310332666,\"visualElementShown\":{\"csn\":\"vIRhceghdiDrI5jA\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"467\"}},{\"eventTimeMs\":1777310332666,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"YdJlY4AWx4USVgPo\",\"clientScreenNonce\":\"7xM8XaureAgUuhEf\"},\"context\":{\"lastActivityMs\":\"467\"}},{\"eventTimeMs\":1777310332666,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"YdJlY4AWx4USVgPo\",\"clientScreenNonce\":\"vIRhceghdiDrI5jA\"},\"context\":{\"lastActivityMs\":\"468\"}},{\"eventTimeMs\":1777310332667,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"468\"}},{\"eventTimeMs\":1777310332667,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"468\"}},{\"eventTimeMs\":1777310332667,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"468\"}},{\"eventTimeMs\":1777310332679,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"480\"}},{\"eventTimeMs\":1777310333050,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFA==\"},\"context\":{\"lastActivityMs\":\"851\"}},{\"eventTimeMs\":1777310333055,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"856\"}},{\"eventTimeMs\":1777310333230,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"1031\"}},{\"eventTimeMs\":1777310333230,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"1031\"}},{\"eventTimeMs\":1777310333232,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"qFBERSGPKYsataSz\"},\"context\":{\"lastActivityMs\":\"1033\"}},{\"eventTimeMs\":1777310334055,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAFCaQA==\"},\"context\":{\"lastActivityMs\":\"1856\"}},{\"eventTimeMs\":1777310334055,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"1857\"}},{\"eventTimeMs\":1777310334057,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAAD1AIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAACiBQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAABA\"},\"context\":{\"lastActivityMs\":\"1858\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"e5rvafHXF9uAq7YPiJbmoQo\",\"clientCounter\":\"15741\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Mon, 27 Apr 2026 17:18:55 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-30T21:37:31.754548Z","times_seen":242721,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 23 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 377773\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T22:07:11.739382Z","times_seen":6173,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 23 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 377773\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T22:07:11.739382Z","times_seen":6173,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.30\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; expires=Mon, 27-Apr-2026 19:18:51 GMT; Max-Age=7200; path=/; samesite=lax; secure\nroyal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D; expires=Mon, 27-Apr-2026 19:18:51 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 10510\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":34925,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (626), with CRLF line terminators","md5":"81253ab5245e743a782483c2a901597e","sha1":"e58931147e45ab8148f1f7bdd0493e0c01d806c4","sha256":"b6c8ce274103b6b138e96d6a98cc5861f1d79805a19e17daa0592ad95acf390d","sha512":"108b3fad3011517db67f9a1639bea09df70828fbb2babc86d2a6476aa9c5a46895621f4395e5a1ed93ce66dd298453580e0a92618974fd7805b433fe50baba04","ssdeep":"384:K0Q2lBXFELE/vOf9fCrRxqLDRdqL6BRmqLbsL6ddzLSLC3LmLO5dLTLg0LSL7ALf:AcFELEHOXFx7uvBIV8JO05jC7esv","tlshash":"d8f282247089657b016381a792312399fadfcab7c72b8991b6fd23770fe2c04d91743a","first_seen":"2026-04-27T17:19:35.728799Z","last_seen":"2026-04-27T17:19:35.728799Z","times_seen":1,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/bootstrap-select.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"1b35f-69cfcf30-38db57868c392d03;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24194\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":111455,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-04-30T14:40:38.609201Z","times_seen":429,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/738/large/CG_EOS_Icon.png?1731705232","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/738/large/CG_EOS_Icon.png?1731705232 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: LdaA15tCyQPvKqiQDElDrkDgoCM8OilwZaPVfIWNlsEuSo4r/73V3tTwBU6VoUd5ar1WrJCi3rirABbRc28ScoB/ZERKAJIO\r\nx-amz-request-id: 3Y1QWXV2CXJ4S57S\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 15 Nov 2024 21:13:55 GMT\r\netag: \"e57d503851189addb2768cf2c838a64d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1WzZRILTVssxSmYKEl54vLexpATuWM8L\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 24537\r\nserver: cloudflare\r\nage: 2968\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5KNje%2FGvo1DMo5hwIj2E6XmMBgmzyeRiULkrXaUMAq%2F1BypqLyhOye%2Bz7x8Uy3O4UCka38zEUbS0xM8rQJZo4CFXy7XDDLHUjCcYUnLEM4q4RJE9Le5ae41xde%2FR4auC4Yon1szeKyAmvI%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f2f7d23feee56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"e57d503851189addb2768cf2c838a64d","sha1":"9e549bcc32f84550061ad391348c883f900f208c","sha256":"16bd234f9403281e3bcf1eaa6d291b47c6b051926b942e7790e9ca114bcaf511","sha512":"a2b016e9c4b77bee3c47f4d47b3377aa178fa35e961eb4abcdcf7579bf9c20a0557a350858a7e99760d66f20c12f222352be0ae9482542785d56a2b512d0c587","ssdeep":"384:IrUUKAlDpY+iqWepCiwr4bAoMKJTGa+YQAi9bUxAivP5z9SHb2hhMlRepSTtIvQq:IRPfTWeLwbOr+Yqbr+z92bp5+oq","tlshash":"85b2e053bfa045652f998c7090bbc24637f78f81d55e0e8acabd192c7fa72c451d720a","first_seen":"2024-11-25T11:23:20.548553Z","last_seen":"2026-04-30T14:40:38.635635Z","times_seen":734,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derivefx.com/","date":"2026-04-27T17:19:00.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://derivefx.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1176\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1176,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en-US\",null,\"TE_20260421\",null,null,[4,0]]],1871,[[1777310330494,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"8791B330-C480-4BAB-8102-1406D732534A\\\",[\\\"https://derivefx.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,22000000],[null,23000000],[null,100000000],[null,100000000],[null,149000000],[null,123000000],null,[null,268000000],[null,270000000],11961,10510,34925]],[\\\"translate:page_load_to_initialized\\\",[null,270000000],[1,763000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1777310340496]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://derivefx.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Mon, 27 Apr 2026 17:19:00 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-04-30T21:39:25.754294Z","times_seen":508895,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/flaticon/flaticon.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/flaticon/flaticon.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"c25-69cfcf30-2996b91b7f6cf4ed;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 599\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea599ea4d42d8857576411a32ca71ad1","sha1":"9a3f3981a4d5d504c8dd78eae45e57d047ba3ed5","sha256":"5392f32016b9330f52883b8c33216665f1d5704d7824690ffc905842391568c1","sha512":"5df631c177a112132ae79305062ccc47b0f80c1d9723d16962bab79a1c3578173a8204c1361068e95eeb3a9ffc9f30356f15858fc2957280a58504ba5c9cd90b","ssdeep":"","tlshash":"1b51f554867e4040e7559b881f9f7780a768b02fcdc49c09b2059f6cfee19ad83c1aec","first_seen":"2025-04-28T01:39:11.855739Z","last_seen":"2026-04-30T14:40:38.603811Z","times_seen":355,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 23 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 377773\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T22:07:11.739382Z","times_seen":6173,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/themify/themify-icons.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/themify/themify-icons.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"4599-69cfcf30-c4d8b4e937cb290a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2689\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17817,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8550d4f5955437a51f49a5abff88a7a4","sha1":"e360e1412a31c69ed2188a9816d394478895c106","sha256":"9c66fe2fab3a1d65b14b92a20d4c817ed481d74846a8a5f33d3616200b973602","sha512":"c1eb60c4cf0c1a51bc2172d549b7d735304572c6d82e61675d6e3feb9ee74fe354eaa83da5d8cea4ab16b471879314e54cc21e4ad1ddcfc990852fe28677752d","ssdeep":"192:TjlG8SWxB5iQYxil3EguJ+JvZ247F52WM:s8NbAlMJdFg","tlshash":"f182d39495bf1ca41319e0c1734bf215bb0db6aa9a450c5ce293ff4cafd3a1199c2adc","first_seen":"2025-03-18T04:27:57.388175Z","last_seen":"2026-04-30T14:40:38.616041Z","times_seen":358,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/crypto-investment-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/crypto-investment-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"16fbc-69cfcf30-ec4dfdbca1fa0435;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 94140\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94140,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"67019c83e967a0e72bf006b3c202f439","sha1":"01d41a39c437ea54138820ffaaab58bb86e21bf3","sha256":"d9319dba8677abd747aa26cde0db12276501d81b30cad9e175329c07fd3275bc","sha512":"665129cbc534ddaadd9510bbfe1690d485d85073b72e4667cf721b4d76f8ca317ce5581e92d226b9f078cc5be1cdbe421c008b16bd1af0c20cdd33d2092491f5","ssdeep":"1536:xiM96fkCGRm49r8NLZo7HxbE9QXjiv3cjSr6KgRTry8iycEymo++o+YZSRekfcwB:E+mk3R5r8NLZAZXTM9OtTry8Hymo++Sk","tlshash":"f7930250ea6b896050ccc536a8812bacdb265ab7a7d6350f38edf7cde1484f42937d06","first_seen":"2025-03-18T04:27:57.417698Z","last_seen":"2026-04-30T14:40:38.619023Z","times_seen":353,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/intlTelInput.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/intlTelInput.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"70c8-69cfcf30-a3e323c277331a82;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2915\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":28872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"36ad59bd54fb93f8e30e3273470b91f1","sha1":"687880cd4146a6841f427ccf8f7dc38084996db7","sha256":"67215ee6059ca860b0c9947f70b739ab8cf2c53ba74d7ab1aa950cbf84fa7c2b","sha512":"d9a968bca0889c579b40efbaf1fc6d6f9fddcd48f80116f33693da9de3bee54ec1a56fa59b4e50a6980371be72e6de645d85cd0f162392c5e4a13daf4be19ed3","ssdeep":"384:9QVEnIft6NOMiac6LHvybiRF6y+CV5mxX5Yl:9jIft6T","tlshash":"d3d24c25cb603409b13bf372e6a04782eb37102be90246acb3da7d55dfa50e455e2fe1","first_seen":"2025-03-18T04:27:46.827076Z","last_seen":"2026-04-30T14:40:38.614092Z","times_seen":357,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/large/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/279/large/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 9561\r\nx-amz-id-2: AfuKWJd+EqcwweT0VgEm6+/c0BTGHR9A2laflJDnhk0QvXATj/+WqhfB5XSuG2MDc8uRZHMi04g=\r\nx-amz-request-id: 5ZK48BRCW41ZWPT6\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"af87366546180c799987073ac53f0733\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6vmhZ_PH5UG1O..xRx9fhSAwELb.H8zx\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5MPKekc5A8Er5HdMNGAdtCHDdksWrSgaufUHmV3i92RmoasfcJLJKRtGgN%2Ba1IbgN94S3RpDgKwtHB7K4v8ut9uLVWZEvkYYreaBjk41JdCqZy0EVPPXBID5w6qnxZLvRnyjkxN5pLuDKGP\"}]}\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:85\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=13114\r\nage: 6137\r\ncf-cache-status: HIT\r\ncf-ray: 9f2f7d1b8f105699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"39d54251b232d1e9e8a9665e7c2c5117","sha1":"025f4d72498175bf3219ba5fe2a6341b791d8b24","sha256":"5212de593ffa17b5acc04260fe702e32b3bb815f2eda4d7ca15b085967bd39f3","sha512":"c2f616084a077398dbed12026099332369ae72f8743c1a3acf1603af3a8ce032ac090cf0bc89d11270e8e2e6bd7d79383d556db591d19459bb873aab16daa0db","ssdeep":"96:dFdUh3pppql79CzKT7MLbrbKIgB1lpIRrFjWzR6/KPax4SfPUFvzJ/OWCVe8pabE:ZSfpEAzXzvElkFjy4rNcFvzYJVjaLypt","tlshash":"e112bf6f3030faa4599c8beb653659c09457b5b3868c38230aeee8ddecc54e088813c5","first_seen":"2025-04-01T12:02:22.555194Z","last_seen":"2026-04-30T15:02:15.748606Z","times_seen":403,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":72,"dns":5,"connect":1,"send":0,"wait":8,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/2/large/litecoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/2/large/litecoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: QitQ/rG7CZyd1QJbzi1gqNOcXac8pLxmzCvAS5R+ks6J7F4h5W2tmBblfNGVNOVtu/BAk+T3AZeB0ys+GvRgYIXHM8U0hwm0\r\nx-amz-request-id: 9W7CHSVSSP6HSCB4\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nlast-modified: Wed, 29 May 2024 02:40:00 GMT\r\netag: \"2cb0c91b0d82542c140d900d549dddc0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5qPrLUbI5j.JglMI78Hfu1JUQECZPGFM\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 7680\r\nserver: cloudflare\r\nage: 3165\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dageGlwL3bDPF5ivsZ63%2Bd5Gwq5V3awkK7NGcJXNBxfzaPpLATmHL74YyTg8P85krCCPUvyiScODJ3QiKDHSNVQLA%2Bc27G7XKEOpl3%2BHvFNxqlN90yjT%2B0o9P2MAs5TdXH4kmt4Lhf2zCGwc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f2f7d242ef156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"2cb0c91b0d82542c140d900d549dddc0","sha1":"ed1c900fca53fc1b94a536c76bf2c9760424ed9d","sha256":"169ed6742d2bc4098e00de38a610578bd6e98227e13a8b38ad47cd977056385e","sha512":"a660f2ae5c860cdbc7b5b7dc8e2408ddfec249c5de96ca269ebd01e674c24241650bb719fccab0f4139f94eba25e65b231797c0528fbc94202b516d6419e28d5","ssdeep":"192:NSGHHL/j2qkaS+zipeHxwauyPXfEsYF7yWgX1jjBghvnFDoz:MGHrrDkdeRwaNPhFW+lgZ1e","tlshash":"65f18e96df82af6cc6915575f8b78734814a0f0ad6ae4907f9dcaf0ab94a3004be6012","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T14:40:38.636722Z","times_seen":946,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/jquery.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"1538f-69cfcf30-5e362ef60817ed73;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29440\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-30T21:36:22.150884Z","times_seen":124364,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/bootstrap-select.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"1b35f-69cfcf30-38db57868c392d03;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24194\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":111455,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-04-30T14:40:38.609201Z","times_seen":429,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derivefx.com/","date":"2026-04-27T17:19:00.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://derivefx.com/\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://derivefx.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 27 Apr 2026 17:19:00 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T21:39:25.757764Z","times_seen":14442449,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 04:30:42 GMT","end":"Wed, 22 Jul 2026 05:30:36 GMT"},"fingerprint":{"sha1":"13:A8:C3:10:C1:19:3F:93:6B:0E:8F:1F:8A:5E:F0:D5:AA:B3:0E:B5","sha256":"9F:52:1F:FC:F1:4E:62:ED:CA:52:A1:90:90:18:0D:F9:2E:FD:64:67:3F:07:CC:25:3A:A1:C2:02:E0:AF:E4:FB"}}},"request":{"raw":"GET /releases/v5.7.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeUxq8JtMQu0Wrq%2F%2B5x%2FCk8OIL3iVXf8MAg8zFBrnvN9unUwbX%2FvN6WaGv1owEI%2B8Yo%2FH8y6O8AxgBT6apeL0LFG2r6ewfxl6l%2FwGpmBNs7HVSW7Z3Ed2nYFdAMO68WJFL6%2FgFug\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Fri, 22 Sep 2023 01:45:49 GMT\r\netag: W/\"7b1d7f457d056ace7b230b587b9f3753\"\r\ncontent-encoding: br\r\ncf-ray: 9f2f7d13ccc976ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-04-30T21:32:28.427568Z","times_seen":13188,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":129,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"15da-69cfcf30-3a678b95ff899568;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1703\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5594,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-30T21:35:56.835602Z","times_seen":17886,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 17:57:17 GMT","end":"Thu, 09 Jul 2026 17:57:16 GMT"},"fingerprint":{"sha1":"0A:76:FC:A0:B4:90:2E:93:25:BB:9A:D5:01:C3:A5:38:BF:76:78:92","sha256":"14:91:25:42:87:CA:3E:E2:A5:79:BF:0B:95:61:5D:98:A3:D4:89:33:61:77:84:02:C3:BD:2E:BC:FF:4E:77:D7"}}},"request":{"raw":"GET /api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://derivefx.com/\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ntotal: 5\r\nper-page: 100\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"7fa43647b88998adfdf38fadf141689c\"\r\nx-request-id: c1240a51-d274-463c-a7db-39d71d2760b2\r\nx-runtime: 0.004088\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\nage: 1\r\ncf-cache-status: HIT\r\ncf-ray: 9f2f7d231bac56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4046,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"df8f897181697b82e130e5cbb8b018fb","sha1":"5e6e2cd6b4ff80e09e41314c304e406d2af003c6","sha256":"7f5be50a11c79a3678d45b3489abd31a95351fccd63b919ed3d861dcc4f7d2d1","sha512":"bbcfa53df599c4acb1abc1fd272b712c90a421117b89f522f4c325fd664b772c12a12f8b46d52a87a4159db1147ec10e1f31ccb0f3f79439844c535773d29dfd","ssdeep":"","tlshash":"af8111920d34ddd2c2a16669698b36140d6ebec99cc9cc125fdecdce48547e7410ee09","first_seen":"2026-04-27T17:19:35.766128Z","last_seen":"2026-04-27T17:19:35.766128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CIEG; Domain=.google.com; Expires=Sat, 24-Oct-2026 17:18:49 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80955,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2056)","md5":"b7787972872afcdbd906c5e57e1329d5","sha1":"1a6113a0a59fbeaebdc5b83a6c0c645a85c25de1","sha256":"1c1f46e579e2918fc72feeb20809a336d3f4268787ba305d0a42f20659e9f7e9","sha512":"0edddb7abfa045b048e44393bc642a54048a2d02e757219a2764a62278bb07fc648024dac40c4d54a3c890068ddfe748286b872dba80cced017209162cc6f4be","ssdeep":"1536:XNzri7CtoSq2LILZLUGtYirKrhm3oQQ4CuPKucbRrWKiuwNWms:X9tILcirKrhQCKKibs","tlshash":"6f83c8c8b6a674a59353b5b5513f000eb23f589df8084dacb288d8f2adb5948413bf7d","first_seen":"2026-04-27T17:15:27.633807Z","last_seen":"2026-04-27T17:53:11.915019Z","times_seen":6,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":251,"dns":2,"connect":21,"send":0,"wait":38,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/44/large/xrp-symbol-white-128.png?1696501442","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/44/large/xrp-symbol-white-128.png?1696501442 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 12328\r\nx-amz-id-2: uSqYp0SeAQ4CdEuo4ebnDEnQVXHH/GA2ikWI0X0oKub9wG+lDfZEh7tKeo0KSdKcyM5gVsLSsz4=\r\nx-amz-request-id: F55DNKY1BQ3ZHKDJ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:58:49 GMT\r\netag: \"8c9a8c477f324c88cead49db9a5fc1a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dvTdjQhaHPc3d2gEiPjuvrzI.pMVPEqU\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1968\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoDhxhHajPkNWSzl80%2BfOvW7kvBVnXkWwYQUsEm%2FzXySZIGu0NuWTf07JRZRc0sKz7gTwhEv1BZmjvjA1%2FSvs9956KoG4sdF7qE1yRePlP1gxiCg2rgUledSOKXKMWU38oGtvRdS7ufiyHzG\"}]}\r\ncf-ray: 9f2f7d1baf2f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8c9a8c477f324c88cead49db9a5fc1a2","sha1":"8a8a7c615c7f00893e4c3374ad134581a053c8ce","sha256":"3672b3785d85e582ef497a6588dbe75cef4c60f982f678549f309fe784400a2b","sha512":"849e4018007f9b5406d4910a2da39689fcf847bce6f8586c7db389066af1efaf9ae8ae5bd374401b285d988a16fc2480be1e813a6ae3e2af78f485efa523fab4","ssdeep":"384:BFv36FCrffjNiI0gXcwWIzS3qJ+GmJQauo:jIqaGK3qJGbuo","tlshash":"56429d3b1465c94a4b535f7ec1ed4bb386f31224cdf224e69d781a02db0e61a2f390da","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T15:02:15.831637Z","times_seen":1078,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":81,"dns":1,"connect":21,"send":0,"wait":6,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/forex-investment-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/forex-investment-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"1994b-69cfcf30-2d65ab9dfb02b8c9;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 104779\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":104779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"6d151c71ab3804dd08464df134c5eb5c","sha1":"f61ed4d743c8ac0234e6f658bbe73fb8ac49016d","sha256":"1b96f6c6d53f390d0364b45bdab190e4f66e357e1648023acf2dfa6f0de3f3d9","sha512":"0c092a4e518ba544cf24b6fb50371b794c42c30c8534c09ac58e197cc5e9d57370d3834d717d8aa3ec1680000616d3ee9bf175941fcdf1fb17ffcf27042d2b59","ssdeep":"3072:ZvsEfdDR84g4acvSPqKdLJ3r9VfCyb9CwxX5:Z0uR8IacvSP3dd3rOOX5","tlshash":"e1a312754d4f85c99ee1473293d48db20fdd8d615b80cb69ba2e60aebd72826e407b30","first_seen":"2025-03-18T04:27:57.381676Z","last_seen":"2026-04-30T14:40:38.610533Z","times_seen":351,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/8456c9de/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/player/8456c9de/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 59120\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Apr 2026 22:25:37 GMT\r\nexpires: Mon, 26 Apr 2027 22:25:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 22 Apr 2026 04:28:11 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 67994\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":518755,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"66ef061729b27a4257a868ada7f49f37","sha1":"3d7b5e2bb844723e8e834a26e74169f53b86d32c","sha256":"f140b6831469664f09fb07ae991e983b46752deaa9d8a8b214852f235ea6e7d0","sha512":"0decb25ecfbf4819354251af5188e52fa9b5333c9828998606993817b52a6e43793f7c6ebfb87ffab61c628fa709c858898723f01e1c8d666dc7f7cf2df818fb","ssdeep":"6144:Q8d5Fe/qoMOg7USBfrIoI3M5Kdl5+Oi4f7:jYxMOg7USZIoIc5Kdl5FD","tlshash":"6fb4d972f0e1233cb2278d5997d9954d7339d983e2e22afff11166dacbc76811326206","first_seen":"2026-04-21T05:00:52.033852Z","last_seen":"2026-04-30T21:37:31.737691Z","times_seen":6846,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/bootstrap.min.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"2565e-69cfcf30-db6e9728265bb1f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20190\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":153182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-04-30T22:11:10.563343Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/slick-theme.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/slick/slick-theme.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"14f2-69cfcf30-59988189714fdc2d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1146\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5362,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5d5467913e6993e7ce475116c74587a9","sha1":"7a9aee7ad36f6eba9a213967b052cb807a02c7a2","sha256":"e69bdf0d68f559df15d9fbddb2b0346b78895aa6e06de6c87236b28d5e2be5ae","sha512":"025c4c8e04461f15b402c00fad86fcd56e71bcdf856471b9036a4a50bc5fc73fa8a57a45287fb5683df6932bf990b74b76c8f9044a6830c53b085bca0ea18a79","ssdeep":"96:+V15CEXdql+MeDpaX806FjAf8YwkKbZk5PueS/Fj93:SP3XdcTGp6804Af8YwkKbZk5Pu1l93","tlshash":"5ab113aca506e1c6163388803fa30755eb9b30431f110eacffa413545fbe0ac5ad9b9d","first_seen":"2023-05-11T19:38:54Z","last_seen":"2026-04-30T14:40:38.619982Z","times_seen":380,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/animate.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/animate.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"13053-69cfcf30-4a807df5e10f917;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4285\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":77907,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"91cc40989e5e96e8d6bddc0f19598441","sha1":"77b5378a2b4bfc120e52782dd869aeab7efe2fd4","sha256":"6b6b686ecaa56e02ec5aced95541a03f922f599b31f1b4cd429ceca824a6e669","sha512":"90750a22634147d99cc10d6ee1120bb6c889982eaee77f5b82445aa5f1ab6f05db90fc5f6a9933017bdd1a7ad3bb76e518d5c73c25f4925ae513bcc0661afe8c","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLcec:oNuKuWg9unuLuJu9KIZQMcLcec","tlshash":"80732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T10:43:58Z","last_seen":"2026-04-30T20:57:50.892354Z","times_seen":2740,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kBo8UDI-1M0wlSfdzyIEkpwTM29hr-8mTYCxCmuA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kBo8UDI-1M0wlSfdzyIEkpwTM29hr-8mTYCxCmuA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 16:19:46 GMT\r\nexpires: Fri, 23 Apr 2027 16:19:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 349143\r\nlast-modified: Mon, 08 Sep 2025 17:57:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39156, version 1.0","md5":"b590eac708ab31938a2b67ab7805bd8b","sha1":"55ba8f2b88b65a56f00108ee08200f32d5b26b84","sha256":"3d109f97a71d3d3d04d16e5c4b95be8f89146a55ebbed239b90f5a8c5d4f437a","sha512":"7b7458b8aeff6ca9978e97015961de788d561b706c59a7d9b5929ec660b14deb64083d970a8b09ab6a0fa608a0cc8ba4fa999ff7081c8f9803b06ecbc4f50c33","ssdeep":"768:HxFN+MkgnkudzCtNe1ck1NToNiADfLa2UFIUa7J6kkOlWiRbM8pQV:RX+MkgkUzcNswYCfL5UVaxkIdy","tlshash":"7e03012bc3f45d8f2f32c674e1801943e9ab4a14ce1af868ac77c97506f9730d19b584","first_seen":"2025-06-14T03:24:43.788943Z","last_seen":"2026-04-30T14:40:38.606047Z","times_seen":918,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/investment-consultancy-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/investment-consultancy-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"100fd-69cfcf30-2d684477a7eba9cc;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 65789\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65789,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"bce108b1f6b7e457c17fd834671653fd","sha1":"8ea5a9e514d2217ae81b6ac406f5cdbe4d0a5fcd","sha256":"80e141a0b2e918793daf5d8c6d43f95ae0d4bc3f479c0cfd816fda3bc1df1731","sha512":"547db66a7a8b6c16dc4b58d620d35d92b5b85d587886aec5c70efa6a24ea42725e9b0640cc9457915b1cd3d6276019721b0702e782a0a02baa5a0e5f4aa4a793","ssdeep":"1536:k/3s0Q2NUrGnNjKB93VoWk7SogjepsipU8QpHXaTPAA:WXNUrAjKBBwSoIxpHqTf","tlshash":"eb5302457cc037d85ded036191ab578b2fb35390e5a2e356baca724c572ba3ced03892","first_seen":"2025-03-18T04:27:57.402289Z","last_seen":"2026-04-30T14:40:38.618523Z","times_seen":351,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260421","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260421 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-p9Evq68cz5j90YkzBbbbsQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmII0JBiEOLh-L1l33k2gRsvOi4wKykl5RfGlxQl5hXnJJakFqcWlaUWxRsZGJkZmBgZ6RlYxBcYAAA6KhNW\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=33.SE=ASGFXrC3iKqCu67tRO__vcYowIQ8_43f0SQY9vESJ-Din9KMwc-hMjQy1XFxJMS1SPRc5asb9yCtY17P-Km0VtbLtmGUzz4tCbc4pE2VYA-VugHSXqc2Gc7FmSSt1SBjbXrS0dYbrGZKJfsw9D-Pcs8A05QZlv4HDjD_yVEeB-Z4CPWVCpVPU5DYacq0xl4LK53ThF-Bgjk1r2vSzMfATh8EvLGnws0PJ-EncqeaRSJ_jBT7vu9cTw; expires=Fri, 28-May-2027 09:37:09 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T21:39:25.757764Z","times_seen":14442449,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/slider-mainbg-002.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/slider-mainbg-002.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"2684a-69cfcf30-ba4b5282d283f71e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 157770\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":157770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x730, components 3","md5":"ef58360d086e5cde10e81f53016f0721","sha1":"f854b33628d8f08c140b3eaf1512149c786f3ae3","sha256":"791bf0838f41d820f29c54c4157fb877eed9391ee4c9fbe5c740bc0aaa9fa12c","sha512":"eed48f42449ea66dad81a9c18d8fe4da21553f075442540c98fab98306e2971cdb0435bc483bf9e69d1cc9343c84e20169397ab5130d664ee98eb28cc86dee48","ssdeep":"3072:rZnn76sllzr98fzNYVdtvu3jNBXpeQKNr9QW63RBJVTpNJ6RxsfctBJTpgFy/:lnn76sD98fziVmznIpQjH7bctBHOy/","tlshash":"30f3123928f4494bce964ff60d66d6976eb24f20e71651c820ff263137820e49a213fb","first_seen":"2025-03-18T04:27:57.413662Z","last_seen":"2026-04-30T14:40:38.630583Z","times_seen":291,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/44/large/xrp-symbol-white-128.png?1696501442","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/44/large/xrp-symbol-white-128.png?1696501442 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: uSqYp0SeAQ4CdEuo4ebnDEnQVXHH/GA2ikWI0X0oKub9wG+lDfZEh7tKeo0KSdKcyM5gVsLSsz4=\r\nx-amz-request-id: F55DNKY1BQ3ZHKDJ\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:58:49 GMT\r\netag: \"8c9a8c477f324c88cead49db9a5fc1a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dvTdjQhaHPc3d2gEiPjuvrzI.pMVPEqU\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 12328\r\nserver: cloudflare\r\nage: 1969\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6efJnWfcwatpod6JWUjyXzyHb%2F%2B37nncDuV%2Bg%2BUZUMUQxeGYO7JxjqFcVvhD3LcjtE%2F5y3%2F9CE%2F8Ssu2MR0LiM1G7BmsluEwcB5JdKIfLKl9uDPWDrgGgt%2FMawOz47m%2FlQOT4f9o9kT7PBiX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f2f7d242ef056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8c9a8c477f324c88cead49db9a5fc1a2","sha1":"8a8a7c615c7f00893e4c3374ad134581a053c8ce","sha256":"3672b3785d85e582ef497a6588dbe75cef4c60f982f678549f309fe784400a2b","sha512":"849e4018007f9b5406d4910a2da39689fcf847bce6f8586c7db389066af1efaf9ae8ae5bd374401b285d988a16fc2480be1e813a6ae3e2af78f485efa523fab4","ssdeep":"384:BFv36FCrffjNiI0gXcwWIzS3qJ+GmJQauo:jIqaGK3qJGbuo","tlshash":"56429d3b1465c94a4b535f7ec1ed4bb386f31224cdf224e69d781a02db0e61a2f390da","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T15:02:15.831637Z","times_seen":1078,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.LrxB0Px6Ql0.L.F4.O/am=AAAABA/d=0/br=1/rs=AGKMywFdhsYPawgPHWInzqlTWTvZ81QnSw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.LrxB0Px6Ql0.L.F4.O/am=AAAABA/d=0/br=1/rs=AGKMywFdhsYPawgPHWInzqlTWTvZ81QnSw HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 44197\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 12:51:09 GMT\r\nexpires: Sat, 24 Apr 2027 12:51:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 24 Apr 2026 05:09:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 275262\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":362685,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (57635)","md5":"f0b2543e21f21f908d6051d6df967070","sha1":"dcf43767fbb354a45865a009e8c5c6bb6e7f616c","sha256":"51e2e1a5b696c33f8e0d0c15e29b2bbfa3f189cf11fb1f94de3e27018aaa4541","sha512":"c1aadb87377b87405befcfd3f6a4086653e8c55290b60f583f4ab33d9a15e570e4ecfd91f1f61080afffa3a4ab0e17c48693a41ca34784f140e9cfd69b91ec11","ssdeep":"6144:2pEp341Z+zlrEBtLzum3gszR8ri24typauQz0yeSE4dk+46HnhF4xdXcXaGlaxA4:h41Z+zlrEBtLzum3gszR8ri24typauQu","tlshash":"f474b97355121228f0179671ebe1fe4ab526c117c25a3aafe442fe2cc6df5e12e2360d","first_seen":"2026-04-24T15:38:02.48135Z","last_seen":"2026-04-27T17:35:07.834859Z","times_seen":2532,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:52.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 188012\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 12:40:33 GMT\r\nexpires: Sat, 24 Apr 2027 12:40:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 24 Apr 2026 09:10:42 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 275899\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":645198,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2125)","md5":"90238957363b111798a74fa846d0c6a0","sha1":"5cd4cd0552f8950f50a73e2ffa1cb1a175e48193","sha256":"ba098864ed43187d1dce8066298ecee4fbd10ef0ef5f2b690afa00b7dd6065f5","sha512":"d2c03354004a6c53f3cfbb1367fe2abe6a22dffe10cbc4f17979c556a9f056218995dc64774e2bf792830bd4300c87e847aad36ce1ffb62f2c8a22e4c6c9690f","ssdeep":"12288:XSwa4nEGClHe2ot7RFZOzCAYA5GlDxkJKQh31eF:iwa40lHe9t7RFMzCAYA5j16","tlshash":"12d46de4b292b1b687866d66e47f4053b17f5d02f1044878f0f66ddc14f8e4ca2bab29","first_seen":"2026-04-24T15:38:02.573665Z","last_seen":"2026-04-27T17:35:07.714771Z","times_seen":2493,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:19:01.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://derivefx.com/\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://derivefx.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 27 Apr 2026 17:19:01 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T21:39:25.757764Z","times_seen":14442449,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/storage/app/public/photos/8s2cbTpt36Kbusrnd2uKGBz5PYwWLA9CkSnWoDmW.png","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /storage/app/public/photos/8s2cbTpt36Kbusrnd2uKGBz5PYwWLA9CkSnWoDmW.png HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2026 19:33:41 GMT\r\netag: \"26caa-69d01615-469e71c0f63849eb;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 158890\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":158890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1739 x 678, 8-bit/color RGBA, non-interlaced","md5":"d5cf496339128377fff26adad1e401e7","sha1":"2557c57ecfd73853d1406fb97c2e12553d88a32d","sha256":"a3cbc005deebad552b4b535a882c81e2f6b707f47b57a55df4290accfe9bd027","sha512":"3ff275cfad99cf6cd0cc22f9d502e7f56c7442646bd23f2aed7a6970ac8412d030f19135fe5253648a93af2c05d293f1d522451c6ccd5e2f70f520b73e43140c","ssdeep":"3072:buywUGu+8wEvHOLrS6T3DDcrYIdRGU+aPY7/E:CyxGB8wEvufSCDyxLO/E","tlshash":"57f3f009a9b3e52dfcdf01b0ed861bca130591a2d5690870f7be581cef45f9ca9a2713","first_seen":"2026-04-27T17:19:35.616694Z","last_seen":"2026-04-27T17:19:35.616694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/imager5555.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/imager5555.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"30e8-69cfcf30-8d19611228e9d61f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12520\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 164x164, components 3","md5":"a09f123688ddee8c4e9c7547561a758d","sha1":"640721b8ac50bb159d54fd37835b1dd88ba8485f","sha256":"2d6a74d0be29e0833594ca7f35a38ff9ca8b80bbee0da06d9e4fad985e806d4a","sha512":"0e10a9fbfa0c43b9891c320ab25da23c1337924b8a1c4ee40a0bc02d0ddb0f2429f1e6b3372f89bb30d1693e8608e2e698d3d521734f6fe0240f7aee89a6c2bc","ssdeep":"384:rrgXSGGdXjidmAVwVg//CJ4MB9NQ9Q0oT:rUXMdmdmuwVgLO4U","tlshash":"4042c041e65faf0d66da2ba24dcbd61b70ad3d1684db09c3ad3b711334528c44eb553c","first_seen":"2025-03-18T04:27:57.422693Z","last_seen":"2026-04-30T14:40:38.609872Z","times_seen":315,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 23 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 377773\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T22:07:11.739382Z","times_seen":6173,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/storage/app/public/photos/5e4BPwuODyz6dNgiC7s5DsFP1z9gibfrIohAVdHh.png","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /storage/app/public/photos/5e4BPwuODyz6dNgiC7s5DsFP1z9gibfrIohAVdHh.png HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2026 19:18:50 GMT\r\netag: \"13d10-69d0129a-2b08b5ea6eb405da;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 81168\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":81168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 438, 8-bit/color RGBA, non-interlaced","md5":"2030097397af9fb586b977a43ed14161","sha1":"f353b54b71091cc16c8262fd8aae161b53714faf","sha256":"d740bf9f1725ad64d22c61c1cef3370c7be254c4b4521189f45b1f02c3cdc003","sha512":"7bfe9bfd16ff8c6f7bd8d48f9da824784c5e0275683827e9eaaf48a7c4555c084a833e2354f4f87209a0b90b1db0d244c8bfae4c6e44a0249bfd931e75665644","ssdeep":"1536:Yrvl111xVLfQcFxRlhgAw0bI+CrSWfv132SJXHNAK6QDjZ0:KF1vLQcnhq0bI+C+Wfv12SpV0","tlshash":"de83f10bfc32f8c14a855a302cd5054a245b815b8902dc69b3ae3ebfdf94f85dd8bc64","first_seen":"2026-04-27T17:19:35.799844Z","last_seen":"2026-04-27T17:19:35.799844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/imager5555.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/imager5555.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"30e8-69cfcf30-8d19611228e9d61f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12520\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 164x164, components 3","md5":"a09f123688ddee8c4e9c7547561a758d","sha1":"640721b8ac50bb159d54fd37835b1dd88ba8485f","sha256":"2d6a74d0be29e0833594ca7f35a38ff9ca8b80bbee0da06d9e4fad985e806d4a","sha512":"0e10a9fbfa0c43b9891c320ab25da23c1337924b8a1c4ee40a0bc02d0ddb0f2429f1e6b3372f89bb30d1693e8608e2e698d3d521734f6fe0240f7aee89a6c2bc","ssdeep":"384:rrgXSGGdXjidmAVwVg//CJ4MB9NQ9Q0oT:rUXMdmdmuwVgLO4U","tlshash":"4042c041e65faf0d66da2ba24dcbd61b70ad3d1684db09c3ad3b711334528c44eb553c","first_seen":"2025-03-18T04:27:57.422693Z","last_seen":"2026-04-30T14:40:38.609872Z","times_seen":315,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/stock-investment-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/stock-investment-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"2dbb6-69cfcf30-4689f69cfcbcd58e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 187318\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":187318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"fc3e76cae0486fe2182e9580e7870ff0","sha1":"8b0885866f9dc0e6c22b63835c1be191ca0fc918","sha256":"26f8d247ea6b71c8e25a3dd239601cd0e4689f69cbec277e8e8d94987b7bf8d1","sha512":"8b7527cf0d06984371195bff3b27aae5c249bb7e83b72fd657a6a66aaa1a55932a6eb7eaf83b64895ded0ddff7748894360f3dfbf2fdd1245e03be804982744a","ssdeep":"3072:Q16tfXP9p8hwE9OwLVq8bOd6bDhD5ZLiB27bJWJ71aXaZktAO8tc:QufPLW9BtO6ZLyaEp1aUe","tlshash":"e20423408f34a8ce8aff9375bc26c202d258b9994e20feb7f02485e57cc59ee2547e44","first_seen":"2025-03-18T04:27:57.412829Z","last_seen":"2026-04-30T14:40:38.618058Z","times_seen":354,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:52.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1719\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1719,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$nQI5AmZRAAZaYjyTemLefNS3FwTL1S2nAEABEArZ1Llk5UwMn3yLhb-zFacf2dITfx3xI1tZcpOcGDQDDKeDviJTd1-HAIgFfhEOyc_WxpyCAMjiTkewMgfAngAAAq_OAAAAHPQBB-IAUnG-_fSyX7ytzUSRYOkABTnTFznEX3vRtgbyYXIZmQVrsU6ObIoyyEWhQCB2rcwHFj2wo3DywBh96V-Nf00xqbo3hNUkfd9hhmtED1rdcg-nEnQFBDU_zqkmGlwK1q7MO8hiyfqxpqHR9XRcJKBs_c6yjihCqSCqouW5Uc1xr8N6R_wMo6kGI_ATOQ_ShN6A4ozkI6BpCnBnrR9p-2YXHSZGbrn95ayQWqYPQSIYEZKzukvMMNQyEKXtNurDjeoFIwVR2jD4x1p7xyDB4jVbksKCWy4pB1ziFaBqSKbJbSuwuRI88IpJROmtxluKG0mLu3e7q73DYtoxC9JhHiS5gxPhhERHLVxt11a3BSzFjUO8VT5x8yBCH5MU5uNOV5CIJDSJtqeKtl0dUdpnA_dyCWBqCkQcSi4WA-ZHXNhCDhNIMPn8WiYdKfDgWHBMzNUEUBxyqjCNa7BikQOIEJlq0_ZII06LB_WwJTpp5SA8BkOXODlZb7qTMKll8IowZ93R9VcSYfSIaMgnXh_IE-LU_7eYw_YBi01M0txS9GqWxvGWTNEn4wZECAQjb3qNQ4S0qIqFXhoNYE26pWM22ijvr3eF-aWZOCVIONY2onFynR_EcnLf1wSLKJAlJSQDUNVW9160AhtDKXX8j3ejgIk6g6nU8JI-X5ksFg-RWB_hCm2WT8pYHkDbsV4NUq6fcN0YBF8R9ZFd3V6L0NqGaglqvQ2fKTTG4g-WGYOUhfjoT844Kd7oA7oa1kDPgkx8H5jE6lmacth2_vh3bvdKE53w59NHGP5NWtgTEUr4HtEFJY5CAEctZeIt-_lIlhtuzIoVJn7T49qCkkcmSH9abuWPy-aj0TXtJNKESHJcvUs0OUhXqqzeCH99-SNTjwKgDw5b8TFfF5Y8qZPnHCpq-lHv_DfEcTKOA9y10gRmUVzDZ1WfLfSjVe66a_B7DLr6jFMOLAokWi1kCArmcLiGqwNUTSJvt2tVqHw0S5ubGAvvncKPLSwRcfwbhSk8MKqJLJncfQcA808Rq1Qql4LaLcfWAWNsFb5tobNeLww6mWegZdVg-3uaNlE73PgxUecWCkR73xgwubF0dVd0kBYuCz3Wy7enXgUx2Uvi5fnFgy1hJ2c0JyNQtP-pAIG85orowWJ7VLpVALOmQu6qPLH-9JTDQmjZOVDD9OFtgTGHrIuNstGSGaCRnbgZXbhXIvSHS3nlTf8-0kyUexAftdUdofFJLevRsPDXq_AY0N9MGRN_GHb7v1J4rLxlJZbp7zqGC7A19unXJMqyhfXmLM9rZdq6iFBbxkac7SB07eqiO0aGIO4PrgBjbL_IZMHJ-XvSCNL8nbwpmplH5bMJPXMQIJisVG7xoIz2Gvby4g_izZF6ZjTznV-ZuAFCgNHPscmam9C7GDdXB3AJASm_Qq-0x5cspUSDfIAqsnO4x_GINp-wiyVn9gZWbGQoeomkpxDCaV6xnbuBO5f-s7BzgFSAQzWMeHJEk2mh09M5zycBXsbSk1hz5wqqtb2PeBcO2BivIuUXLif6q3lZl2rhu18\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Mon, 27 Apr 2026 17:18:52 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"020700f09cc22ec13a5c7d024a5b6d46","sha1":"0dd2d00cab45a48dafe6a2851be8bfb24014b78b","sha256":"e9a6667a4bc7e484d403b6527523f59a3279fa25ed1402d99d763606f9a5f6a8","sha512":"da9af347efa4a117d868092428cf3cfc75c44ddda7a4f05b4975975a57690fa330fee4d93653240a07129df78c3b92e50f2d45f4d0acc0de9d8d292d5fd20ae2","ssdeep":"","tlshash":"52b012100bad0082a84ef410c382dd4d034c444de4683f00d0d2814d174e443ada5814","first_seen":"2026-04-27T17:19:35.806106Z","last_seen":"2026-04-27T17:19:35.806106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":1,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/x7msE3tx8QI/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIGIoWTAP\u0026rs=AOn4CLAA_RA1qxahoWl1rv9kD08o5b81bQ","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"192.178.25.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:52.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:07 GMT","end":"Mon, 22 Jun 2026 08:35:06 GMT"},"fingerprint":{"sha1":"64:32:BA:C8:B0:7B:67:76:CB:14:03:AE:5A:F4:D0:AA:74:5F:B7:B6","sha256":"BA:87:93:A7:52:F7:A0:45:42:9A:34:28:D1:11:56:C7:5D:C4:5C:4B:F3:3E:3B:E7:8E:7F:C7:C9:18:B4:5D:66"}}},"request":{"raw":"GET /vi/x7msE3tx8QI/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARhlIGIoWTAP\u0026rs=AOn4CLAA_RA1qxahoWl1rv9kD08o5b81bQ HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2338\r\ndate: Mon, 27 Apr 2026 17:18:52 GMT\r\nexpires: Mon, 27 Apr 2026 19:18:52 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1468369451\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3","md5":"9d9f41865110f49c76fbc826d9b8c6ae","sha1":"f376861615fb983421b494c2950965741ccc4d43","sha256":"535665438747b5781efd7cbe1dbb5f44f08c0fbb1ea56ffe8336366ff3f35002","sha512":"fffd6edb34576980ce86a3cbc0e3c42863e833ee5682606beccfdac7a4fef732b92a52aae0c71d45b0241c819636649e6a8173c139bf66325136b3e7d6f2e3d8","ssdeep":"","tlshash":"3841e8df0f01ced2ce1d947033a44d110a661aced46c9a264307a9e6f53d7586890a3a","first_seen":"2025-09-22T10:53:34.004799Z","last_seen":"2026-04-27T17:20:38.864179Z","times_seen":7,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:53.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1711\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1711,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$7XI5chZRAAZaYjyTemLeHsnqCg4nYKanAEABEArZ1CEZnr-PY8idKdPkV2WuRb2q-LxBZi9MV6ECdT4yPYPMAqgHu_2ZymEiqhmvjUxq0T_6iB8kVp9L3lLIngAAATXOAAAAGvQBB-IAUlb1rOwvf-rvbbz3Q8CJUN4Lt4fy1QbAeWF_-fSe2RFdUVMNDR_CuKX_DeIUuNkPkHNDG2t_ONcs4YOxady8lSrypfj-S91t3kGxuVIwjWWyZP0FBC9DhPtd6BaQaxvPZeb5IfZLXN6HgnnOSD1WIBYnSyMvX2hcaO-_BkkW9wMt_NcXJ0khVmyztm9pGrl6BaUjoeJvqexGsXZ4wvN-4dWNgaQ-R_7R1t841AFwb563FhWQpyvMCb9ZRwpsvJBv9ilOinbD7FTGmHt22rfpnTvJ4KynCPnQryGK3iruiT-sl_zUB-tTBYyZ_HvmKA-ueOjmqpXKhSmE4RgWIXb_0HWNIfmTbBxR5xiJBEYZe9LKw8B522Vph6-oe_IUm3zDK8_Qo83soZQkjPs8Ije_yNF_mHSGPCrT8GYaINsD807RojHAXLrTDr667qZqjDkRyV6yz5XaYuN55Y-cUZETS4aY_J5tH_J2GuG9hItI80kpS8CYTuezIxSdtrUrKc8jFUB5RoYhMw4rzNQtUplqUIacqrPP77TK-vbWH0OxXIbAqTPCKOVAdRkgi_5EzCP0dWIhOz2hWAFxEqLIJ6EWmvrFvG0_51sltCjiqkoDulaEig7BV0-14mVgOfWmmASoFbDeaAoHnphzn40cy919KTjwePlEGxiSMaHBT--Ha6DbVtGttpAW1vKQXlL_fX0xvbCteIIshijP29UkyG2R0I6VwM7w0Hvpl1F6GsyifXiWXF6HpHM0k7HQiEOn2bgjoSOoIl3rru5d7P_4CR9fgng6QxmJuuVi0XNWwNJwgOqo9jm6ciaKxR-ZV3-I0uYUjQ7XmQcDk2ao2vO33YIxYDSjne6OJLuWEtIoorUeRLdwgRuvjon9TuOy6gtW4usDm4Ml8Btg8UGr0L0e2YS-Ciwk73ldy6bjlQNAq1v127e8JDSQyzsXW7hDaAo3JYgSdMRkgdpk32mXcijqy8LH3UmcRdytaw15oYm6CEzdjZsMJrjZYN6D_PNAXDZnyLyoi0o7wLeTb0DBwL2xMxYH48Kts8m-ChYVp9gycGqgN2GSojCYxVRwV4nbVyKrNJzZgr2LK-fqcRqH397ANbHitj4a8mRfKwOWsHno_izRUM5GHvdHLc1u-SKF8-MxuaDDqvJ6Lq0BNtl7zonmOGoOWMMBHxgCGnEFhRMummqIaU0wrRwplYsNFjZdz3cm7RVg0eSnWw5ws30Ffb0AZvcKqa6DpM5tnEZKV6e6dZl4XUURCnN-1-EAY7oYGwqiN-mWJiF7nliQRnEsVHOnWzWSb5pav7sGygMBjQvt5zaWFD3WE3_QsxVJQ8VLh7OOTlCbZxKKK7guujNxnGYGNSPF784lGQ37m4DaYLj0jLVXSNKflb5Sae-FHkkkg5hre4HsoZFgchsNTHkl8yh6koroPLh8oFkgRUfLRh4nqwPkhUX5cjDECsymLe0u-QpjoO-l9RYAyPxT8u36kTlajDP1u1wOJr7ssoNcoDzS7J7_T51pqSpRRz6n_y29YqwITucYfXCjh6c\"]"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Mon, 27 Apr 2026 17:18:53 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"473480d1504252b59b8d8aa878aaeeab","sha1":"b2c73ea06906335932769bf4f37a489aeb2fdccb","sha256":"34370e0b9ae63d8e1232a03969124b7dd7880a2ca042e5cd0a4415a747767cf5","sha512":"34e7db5a39cdc3db0664c37d4549f175e2818b6811f491a375813f80cd1764f920d5bde2e03038d4f2411fc7df7ac7d16e8f002e72f60af4b02d32ba5f55b848","ssdeep":"","tlshash":"5db012019302f0ee6a8891c066025f830630b5a95c3426c1fd69c552cbc0c608c4f5bd","first_seen":"2026-04-27T17:19:35.81376Z","last_seen":"2026-04-27T17:19:35.81376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/cannabis-legalised.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/cannabis-legalised.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"e3448-69cfcf30-b71a2a574c4a731a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 930888\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":930888,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 3421x2280, components 3","md5":"f55e2332080c6ca5b67439ab15811e30","sha1":"8a61a7af5f8d96d2bd6af1f43f13f672f608f510","sha256":"ed936bcb16b618378dc87b1b26af543bbc3664ac748d2a50996e4dc73aa63338","sha512":"a92172a0bd59b7681686640bbbe19b15a1ae503fb29b3a59ac8b0fb604d84a8ea759e5d42a7868d7ed12b3b38a0892380d57843fe673552845e39a9b8dd3f6b9","ssdeep":"24576:DJY81E/P6hLJIgGKclCawU7UUXngziBeDsUp6tGkHXq:DSfAJIgRaw+3gxp6HHa","tlshash":"2b1533747e46cde3d2e92a823059061c736efdb6bd1b5a08362640d166c3587fe9133e","first_seen":"2025-03-18T04:27:57.403157Z","last_seen":"2026-04-30T14:40:38.614545Z","times_seen":350,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/738/large/CG_EOS_Icon.png?1731705232","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/738/large/CG_EOS_Icon.png?1731705232 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 24537\r\nx-amz-id-2: LdaA15tCyQPvKqiQDElDrkDgoCM8OilwZaPVfIWNlsEuSo4r/73V3tTwBU6VoUd5ar1WrJCi3rirABbRc28ScoB/ZERKAJIO\r\nx-amz-request-id: 3Y1QWXV2CXJ4S57S\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 15 Nov 2024 21:13:55 GMT\r\netag: \"e57d503851189addb2768cf2c838a64d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1WzZRILTVssxSmYKEl54vLexpATuWM8L\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2967\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOyDw3yEPgoyiYVaWv2kZPWR2ubRiUmwRt22i%2FfqTRyII2ziO05ylKiUqTGm%2FNiOAnQqxrbcYQ%2B3WomaMQj%2B5RVsoH78ktXX6d%2F7vCWkyhgKrwgFmp4VGyrc8BI1WBFhZMbGoEsFwM4rPFfy\"}]}\r\ncf-ray: 9f2f7d1b9f1a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"e57d503851189addb2768cf2c838a64d","sha1":"9e549bcc32f84550061ad391348c883f900f208c","sha256":"16bd234f9403281e3bcf1eaa6d291b47c6b051926b942e7790e9ca114bcaf511","sha512":"a2b016e9c4b77bee3c47f4d47b3377aa178fa35e961eb4abcdcf7579bf9c20a0557a350858a7e99760d66f20c12f222352be0ae9482542785d56a2b512d0c587","ssdeep":"384:IrUUKAlDpY+iqWepCiwr4bAoMKJTGa+YQAi9bUxAivP5z9SHb2hhMlRepSTtIvQq:IRPfTWeLwbOr+Yqbr+z92bp5+oq","tlshash":"85b2e053bfa045652f998c7090bbc24637f78f81d55e0e8acabd192c7fa72c451d720a","first_seen":"2024-11-25T11:23:20.548553Z","last_seen":"2026-04-30T14:40:38.635635Z","times_seen":734,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":74,"dns":5,"connect":1,"send":0,"wait":7,"receive":1,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 12:37:39 GMT\r\nexpires: Tue, 27 Apr 2027 12:37:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 16871\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-04-30T21:33:30.570224Z","times_seen":43672,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/bootstrap.min.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"2565e-69cfcf30-db6e9728265bb1f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20190\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":153182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-04-30T22:11:10.563343Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/jquery.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"1538f-69cfcf30-5e362ef60817ed73;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29440\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-30T21:36:22.150884Z","times_seen":124364,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:19:01.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://derivefx.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1084\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1084,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en-US\",null,\"TE_20260421\",null,null,[4,0]]],1871,[[1777310331784,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"BED3022E-D97F-4E7E-809F-C54AAE417474\\\",[\\\"https://derivefx.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h3\\\",[],[],[],[null,26000000],[],[],[],[],[],null,[],[null,168000000],0,0,0]],[\\\"translate:page_load_to_initialized\\\",[null,168000000],[null,749000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1777310341786]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://derivefx.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Mon, 27 Apr 2026 17:19:01 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-04-30T21:39:25.754294Z","times_seen":508895,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 18:29:34 GMT\r\nexpires: Wed, 21 Apr 2027 18:29:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 514155\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-04-30T21:39:56.703678Z","times_seen":2892,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":73,"dns":1,"connect":8,"send":0,"wait":13,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/menu.svg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/menu.svg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"3d6-69cfcf30-6c4d403e8d3621f0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 482\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"464397bb0033a309123c20bdc1306166","sha1":"1dd2aff9a642f3c01942fafa22fa27483762f223","sha256":"dc1db702ebdb8a1218082fd20e55ec5a0af59e92393f2a7ab7f9bacc790499a2","sha512":"4009186075ca4204205219bdd31c92c89ae212af6a4c90688687333e02bba751ac4a6eecb54d363c42e7821d13e25e5100df3add3e8f9d1b05f5512e9c477f90","ssdeep":"","tlshash":"a311214f4752dcbe243643a877f425c63bf08c57c1b149e09a273c37f42d5608e99168","first_seen":"2025-04-28T01:39:11.795951Z","last_seen":"2026-04-30T14:40:38.623306Z","times_seen":355,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/v3_0473660.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/v3_0473660.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"195d-69cfcf30-15652e0219bf9a44;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 6493\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":6493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 128x128, components 3","md5":"79516e0e08ecd4f26f179e82549f2f89","sha1":"f6038347935fb667021cb58791368b43fffcc8f3","sha256":"97a3df4c61f939660a54cfbfb1ac77cc7939b88ea38d2574c324ec85e422ade7","sha512":"d439d49ee43be35e9a52984b8c20f3ca9dd2c85689db9d0ceb9208682409db3b80abd489030deb42664f4561a5ca98c665b86ed1508848d868ff667435f97821","ssdeep":"96:XmZEsqS7Wn26kKX9aufHJe9+0BzgrZqk+a2aenqhddfmHTD/mZU:XKUS95DufH89IrZpfdKua","tlshash":"2bd16d636f329f81d9faf8f8420ad817422cc8d7a927bf4b5b390955bd738b14b42065","first_seen":"2025-03-18T04:27:57.420628Z","last_seen":"2026-04-30T14:40:38.634567Z","times_seen":309,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/cannabis-legalised.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/cannabis-legalised.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"e3448-69cfcf30-b71a2a574c4a731a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 930888\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":930888,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 3421x2280, components 3","md5":"f55e2332080c6ca5b67439ab15811e30","sha1":"8a61a7af5f8d96d2bd6af1f43f13f672f608f510","sha256":"ed936bcb16b618378dc87b1b26af543bbc3664ac748d2a50996e4dc73aa63338","sha512":"a92172a0bd59b7681686640bbbe19b15a1ae503fb29b3a59ac8b0fb604d84a8ea759e5d42a7868d7ed12b3b38a0892380d57843fe673552845e39a9b8dd3f6b9","ssdeep":"24576:DJY81E/P6hLJIgGKclCawU7UUXngziBeDsUp6tGkHXq:DSfAJIgRaw+3gxp6HHa","tlshash":"2b1533747e46cde3d2e92a823059061c736efdb6bd1b5a08362640d166c3587fe9133e","first_seen":"2025-03-18T04:27:57.403157Z","last_seen":"2026-04-30T14:40:38.614545Z","times_seen":350,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 18:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 18:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 426286\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-30T21:37:31.514353Z","times_seen":776197,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/slick.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/slick/slick.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"726-69cfcf30-cc4d5afa4c84b7a3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 480\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"68a281f599d6a4fa5e8cab54bc5f59fe","sha1":"515cb38cbd76ebee91d05f7544758f4eceaac07e","sha256":"1b786863757c336ef237105e2560e02e2e54b90781ecafb63732662caffe4cbb","sha512":"e001ba8f09719604413c08ad5aa641cc9a5fe286c2d049fa0e86e12972f3d0a72e2cbbb9322734766aaad2fd892ba98c8cc5c91a290da36dd9f36995fe861857","ssdeep":"","tlshash":"2e3119dc0152c5d68b3384444fd38649eeefa0930c241698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-13T11:05:16Z","last_seen":"2026-04-30T14:40:38.629454Z","times_seen":613,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/about.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/about.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"aac0-69cfcf30-d610f87f9018c389;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 43712\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":43712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 570x590, components 3","md5":"6662d34c4f26f1f26586d8b0718889cc","sha1":"1ca95815bd8c654a8365e6139c7bfc3c7e0af298","sha256":"48fb855c939d83924f83ac5349c8ef9d349ed88299720755a5c4870c5e6374bd","sha512":"d9996ba23333a2b4452837d7875cb6df0203d263d1d44c16afca1ea126d398cdd1b3d3c37ccc25e402bb3022359d0669ecd0adde0fcf379d4ed0d61acb260f3b","ssdeep":"768:TmNXFtG2SzAhaf7oHK1sNolxl6K7CMV55gRWDwyCe+dPLiHnGYRhCeN1:TU1tG2SzAWkKXHl6K7LV0jH0n3RB","tlshash":"2e13f10085136a734b169cf6a32bc469d44affd693b092ce9b30c0692484fc1db976f7","first_seen":"2024-08-19T16:43:15.382088Z","last_seen":"2026-04-30T14:40:38.63114Z","times_seen":339,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/real-estate-investment-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/real-estate-investment-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"19432-69cfcf30-540863d15cfd8ce0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 103474\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":103474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"513853b7ee43c65811c9944d1b7f955e","sha1":"2b0031baa444165d350c3350ba133b5acb870a8a","sha256":"069e73aa63a77e4b8abec49c7c4e5fa241c8de1a364932dfb0106458ea29c88d","sha512":"974e70195aee421039f2ace2049356b5a1f7f17af9c5eecc0d66440e06f8579e305ae91775b5a9ee7b40a5ff475a4e86828df305fde5ee1f4000f29308f633c4","ssdeep":"1536:QFIkprDLn7pNoLfhuJgHeC+NkV69orEmTxrQt98jGnxZuV2wWHpc9+leU06GMA0M:QukprbpkuJgHet9rtqjQUre26PQZd","tlshash":"d3a312704694f447c86e6ffd1844db2cd163372c7022a078b9af96d26a486e61c1f57f","first_seen":"2025-03-18T04:27:57.409907Z","last_seen":"2026-04-30T14:40:38.631639Z","times_seen":351,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 17:57:17 GMT","end":"Thu, 09 Jul 2026 17:57:16 GMT"},"fingerprint":{"sha1":"0A:76:FC:A0:B4:90:2E:93:25:BB:9A:D5:01:C3:A5:38:BF:76:78:92","sha256":"14:91:25:42:87:CA:3E:E2:A5:79:BF:0B:95:61:5D:98:A3:D4:89:33:61:77:84:02:C3:BD:2E:BC:FF:4E:77:D7"}}},"request":{"raw":"GET /api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://derivefx.com/\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ntotal: 5\r\nper-page: 100\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"7fa43647b88998adfdf38fadf141689c\"\r\nx-request-id: c1240a51-d274-463c-a7db-39d71d2760b2\r\nx-runtime: 0.004088\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9f2f7d180d1456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4046,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"df8f897181697b82e130e5cbb8b018fb","sha1":"5e6e2cd6b4ff80e09e41314c304e406d2af003c6","sha256":"7f5be50a11c79a3678d45b3489abd31a95351fccd63b919ed3d861dcc4f7d2d1","sha512":"bbcfa53df599c4acb1abc1fd272b712c90a421117b89f522f4c325fd664b772c12a12f8b46d52a87a4159db1147ec10e1f31ccb0f3f79439844c535773d29dfd","ssdeep":"","tlshash":"af8111920d34ddd2c2a16669698b36140d6ebec99cc9cc125fdecdce48547e7410ee09","first_seen":"2026-04-27T17:19:35.766128Z","last_seen":"2026-04-27T17:19:35.766128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":34,"dns":2,"connect":1,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:50.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 18:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 18:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 426284\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-30T21:37:31.514353Z","times_seen":776197,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?MrSipQ","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:52.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /generate_204?MrSipQ HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 27 Apr 2026 17:18:52 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T21:39:25.757764Z","times_seen":14442449,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T17:18:48.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.30\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; expires=Mon, 27-Apr-2026 19:18:48 GMT; Max-Age=7200; path=/; samesite=lax; secure\nroyal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D; expires=Mon, 27-Apr-2026 19:18:48 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 10510\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":34925,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (626), with CRLF line terminators","md5":"81253ab5245e743a782483c2a901597e","sha1":"e58931147e45ab8148f1f7bdd0493e0c01d806c4","sha256":"b6c8ce274103b6b138e96d6a98cc5861f1d79805a19e17daa0592ad95acf390d","sha512":"108b3fad3011517db67f9a1639bea09df70828fbb2babc86d2a6476aa9c5a46895621f4395e5a1ed93ce66dd298453580e0a92618974fd7805b433fe50baba04","ssdeep":"384:K0Q2lBXFELE/vOf9fCrRxqLDRdqL6BRmqLbsL6ddzLSLC3LmLO5dLTLg0LSL7ALf:AcFELEHOXFx7uvBIV8JO05jC7esv","tlshash":"d8f282247089657b016381a792312399fadfcab7c72b8991b6fd23770fe2c04d91743a","first_seen":"2026-04-27T17:19:35.728799Z","last_seen":"2026-04-27T17:19:35.728799Z","times_seen":1,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":126,"dns":77,"connect":19,"send":0,"wait":118,"receive":2,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/images/row-bgimage-2.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /images/row-bgimage-2.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nx-powered-by: PHP/8.2.30\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 514\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":919,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"b2e5ebd09a7144c8f70ff355ebf4ddd3","sha1":"781c54e618dd5d640b9386892a58731065b0623d","sha256":"3b6ccf3a2e0ad0b7c4e1860d8d7d1e051afb2628a253213cbb18d7253b88c465","sha512":"224a0bba4ece3849e2741ef6ed12fcf8c48a8acf620906eca4da75e85e58c7cbe6a3bf231e632209ae9bfd5d7636f62eca740f9bc65ff2b2a4fc5ac99cf7c744","ssdeep":"","tlshash":"5911237f44051e7e120081627155363cd0dfef2eee427490e06711aa6ed4acac63e49c","first_seen":"2026-04-27T17:19:35.822485Z","last_seen":"2026-04-27T17:19:35.822485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/44081942/cc-powered-by-light-mode.png?width=185","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 16:47:22 GMT","end":"Wed, 22 Jul 2026 17:47:13 GMT"},"fingerprint":{"sha1":"2E:DD:BD:BE:41:8E:5D:61:D5:7D:F5:38:C2:AE:75:A4:D0:05:93:C6","sha256":"91:97:69:F7:C0:9F:1F:CB:DF:8D:1A:88:BB:E7:BA:82:64:A0:2C:46:5D:B8:07:51:0A:92:BE:1F:F4:B0:DD:F2"}}},"request":{"raw":"GET /media/44081942/cc-powered-by-light-mode.png?width=185 HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 7191\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 27 Apr 2027 17:18:50 GMT\r\nlast-modified: Thu, 19 Jun 2025 17:21:30 GMT\r\naccept-ranges: bytes\r\netag: \"1ab3ab983ee1db1:0\"\r\nvary: Accept-Encoding\r\nimageprocessedby: ImageProcessor/2.5.2.0 - ImageProcessor.Web/4.8.2.0\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nage: 1044384\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9f2f7d1dae45568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 33, 8-bit/color RGBA, non-interlaced","md5":"93060be98c362aa037ebce82d04b28b4","sha1":"b8139f5ef08991d9486df2d43d29ec58aa411d51","sha256":"35736416592a885016d621e54e517b3406031a4da520bba8e553db054a596071","sha512":"1820fdd4a926f450baf4d0ba36337f83dbf2354d506bf829a8aafcca706068467b8746b4504d8959e4231a6cdf6bb46dbb9e4345923c0a3a7bb1cd303d165cf5","ssdeep":"192:q4oRi9cyvSC+6uqYXk7zs+EWKv1cISjiDdxuuwpiE:T0i6ynHG+EWKvFwqPzwwE","tlshash":"99e19ef30c480fe6950492c61cc2a97c1db8479e51f74bbdbabce85f9424421de6e292","first_seen":"2024-05-16T05:45:05Z","last_seen":"2026-04-30T14:40:38.637778Z","times_seen":430,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":47,"dns":4,"connect":1,"send":0,"wait":11,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/moment.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/moment.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"24d9d-69cfcf30-d58901b1f32a16d8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 31497\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150941,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-04-30T14:40:38.639372Z","times_seen":1176,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/bootstrap.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"d9df-69cfcf30-e965ed0037e19db0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13703\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55775,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (55494)","md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T20:37:22.704013Z","times_seen":3869,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/slick.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/slick/slick.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"15475-69cfcf30-fc26bb827d8973e1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13698\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":87157,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-04-30T14:40:38.620398Z","times_seen":511,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/large/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/279/large/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: AfuKWJd+EqcwweT0VgEm6+/c0BTGHR9A2laflJDnhk0QvXATj/+WqhfB5XSuG2MDc8uRZHMi04g=\r\nx-amz-request-id: 5ZK48BRCW41ZWPT6\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"af87366546180c799987073ac53f0733\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6vmhZ_PH5UG1O..xRx9fhSAwELb.H8zx\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 9561\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oB0Oht93zDRlyuIWsbFlFzwCjQ0UDhHFLmuxB%2FTYQy2TBgIRsTXDaoZEXuKEcs8KO%2BxhUsdqgu%2BKYDQqgevzwCJ%2BJPHgLdYlhHIX4y%2FQI0LGL3BqvK2ktTdIF2%2B1y%2BmVMO%2BsrU5rNtveZWUP\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-bgj: h2pri,imgq:85\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=13114\r\nage: 6139\r\ncf-ray: 9f2f7d23feeb56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"39d54251b232d1e9e8a9665e7c2c5117","sha1":"025f4d72498175bf3219ba5fe2a6341b791d8b24","sha256":"5212de593ffa17b5acc04260fe702e32b3bb815f2eda4d7ca15b085967bd39f3","sha512":"c2f616084a077398dbed12026099332369ae72f8743c1a3acf1603af3a8ce032ac090cf0bc89d11270e8e2e6bd7d79383d556db591d19459bb873aab16daa0db","ssdeep":"96:dFdUh3pppql79CzKT7MLbrbKIgB1lpIRrFjWzR6/KPax4SfPUFvzJ/OWCVe8pabE:ZSfpEAzXzvElkFjy4rNcFvzYJVjaLypt","tlshash":"e112bf6f3030faa4599c8beb653659c09457b5b3868c38230aeee8ddecc54e088813c5","first_seen":"2025-04-01T12:02:22.555194Z","last_seen":"2026-04-30T15:02:15.748606Z","times_seen":403,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:53.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Mon, 27 Apr 2026 17:18:53 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T21:39:25.757764Z","times_seen":14442449,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 08:22:36 GMT\r\nexpires: Fri, 23 Apr 2027 08:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 377773\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-04-30T22:07:11.739382Z","times_seen":6173,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/fonts/slick.woff","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/slick/fonts/slick.woff HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/temp/custom/slick/slick-theme.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/font-woff\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"564-69cfcf30-41b6f072e230a5b1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1380\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-04-30T21:35:10.371152Z","times_seen":20538,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/footer-bg.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/footer-bg.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"4fad-69cfcf30-d615b279eff38186;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 20397\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20397,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x629, components 3","md5":"173006becf1f9024a75cbf6549d11bcd","sha1":"231f4956f43af8bd4763c626c83b94093d03d791","sha256":"a806702cc490d657e574c9a2eb2ff002abe0e8820c3a170d4883857fd5de23cb","sha512":"0016ba9f03659fe4aad0da2e1db61f0e5d809e254b3fe9beaa5680069802eb8de19effccd00fc7d0fa199b69b8dd11a16e4173a44481a09a843fdf6346686e7d","ssdeep":"384:ja64Ahf6E4e/50OI8e9saLroK5lmtpdKGRlG:jadAhf6E405hpeHLrN5grbO","tlshash":"2e924c67ff06d746c9989330c4fb17687fb600bde690564aa6b8083a1cde3467d8c1e1","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-04-30T14:40:38.637256Z","times_seen":390,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/x7msE3tx8QI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYihZMA8=\u0026rs=AOn4CLBe2bWn1to_h8BqX8LbE70rVtsPxA","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"192.178.25.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:50.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:07 GMT","end":"Mon, 22 Jun 2026 08:35:06 GMT"},"fingerprint":{"sha1":"64:32:BA:C8:B0:7B:67:76:CB:14:03:AE:5A:F4:D0:AA:74:5F:B7:B6","sha256":"BA:87:93:A7:52:F7:A0:45:42:9A:34:28:D1:11:56:C7:5D:C4:5C:4B:F3:3E:3B:E7:8E:7F:C7:C9:18:B4:5D:66"}}},"request":{"raw":"GET /vi/x7msE3tx8QI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYihZMA8=\u0026rs=AOn4CLBe2bWn1to_h8BqX8LbE70rVtsPxA HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 17:11:32 GMT\r\nexpires: Mon, 27 Apr 2026 19:11:32 GMT\r\ncache-control: public, max-age=7200\r\nage: 439\r\netag: \"1468369451\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"67ad8b17c1d09a512ab2464dead51475","sha1":"9f1b0691f604daf09a5bec883f3cc50f48255703","sha256":"5c9e1bd8ce2983b1e05022a49c97f7b2c7aeb15886748f09531e245c365d0202","sha512":"4adfd4db25088f632c2a6a9944b6a444f75da78a0145625cc2001a705b85bfef6e5626166d23a4adb46cc247fa6ca73cba4a64234b5750307bf08cf0159a920b","ssdeep":"1536:FL4c1otLDxTqKeEEbORzuKGlEcnxOicFGUKe+HJsZ1LoifX5uQ:yc1oh1TqKeEEapuKGNf8GSmJsTLdfpj","tlshash":"cc63f1118f97e04bc92fc37194fb2996f87637169ce960ec310314295882b3bf95e729","first_seen":"2025-07-13T07:15:07.237691Z","last_seen":"2026-04-30T14:40:38.62203Z","times_seen":356,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":22,"receive":37,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 04:30:42 GMT","end":"Wed, 22 Jul 2026 05:30:36 GMT"},"fingerprint":{"sha1":"13:A8:C3:10:C1:19:3F:93:6B:0E:8F:1F:8A:5E:F0:D5:AA:B3:0E:B5","sha256":"9F:52:1F:FC:F1:4E:62:ED:CA:52:A1:90:90:18:0D:F9:2E:FD:64:67:3F:07:CC:25:3A:A1:C2:02:E0:AF:E4:FB"}}},"request":{"raw":"GET /releases/v5.7.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48%2Bg%2BOvHyA1uuWByB2H0e6Y1JhpiDk13MCGkezMwXFZ%2BkRPiBQR804XPV6%2F%2B34BVnA5tLz7wjnRSB07Tr%2FGpLULbuASCtbPbnYyAxtOshOPRSX9LKIeV5OTTB49HGHrgEnHlWFWR\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nage: 725521\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 22 Sep 2023 01:45:49 GMT\r\nvary: Origin, Accept-Encoding\r\netag: W/\"7b1d7f457d056ace7b230b587b9f3753\"\r\ncontent-encoding: br\r\ncf-ray: 9f2f7d219cef76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-04-30T21:32:28.427568Z","times_seen":13188,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 04:30:42 GMT","end":"Wed, 22 Jul 2026 05:30:36 GMT"},"fingerprint":{"sha1":"13:A8:C3:10:C1:19:3F:93:6B:0E:8F:1F:8A:5E:F0:D5:AA:B3:0E:B5","sha256":"9F:52:1F:FC:F1:4E:62:ED:CA:52:A1:90:90:18:0D:F9:2E:FD:64:67:3F:07:CC:25:3A:A1:C2:02:E0:AF:E4:FB"}}},"request":{"raw":"GET /releases/v5.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://derivefx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74320\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"3638e62ea50e6f5859b6a15276c25c87\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:51 GMT\r\nvary: Origin\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifaB44zVif3Midfnuaayl%2FF0rkTBzF9h3O%2FSlv8CwNGsclCj%2FRpPd8UqDhAOpUMYMJQYX2U%2FC54MQG6YP8qa4aY9e2888%2Bluwg5opBMIIJqyVMpHGvUX0HpGuyyPSTtqeD%2BMIC0z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: 9f2f7d17a94376ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74320, version 329.30998","md5":"3638e62ea50e6f5859b6a15276c25c87","sha1":"f5aa1a463e223a294a42b314e1c63a614d594ec0","sha256":"9e6bd5b2d75bba485d2337d020750744983a3521ec697adfe21b29ee4f14f6a9","sha512":"0c7c4817722acaefe37770ab2f30b658065670044a4d73bea7a441780b3d40bc309d8c9593473b69c3521e4f8c40d1e0b8fdeef1619be26365db0ebdca5f5575","ssdeep":"1536:T9XBTV3zaFDGMq0gGmrbhafkPovybyJ0HgYEWdOXmkKHJaIvSI:118iMqmmxarybNHg59KHBF","tlshash":"bc7312c35adf8912c5633b6c3d8b41362f2469549a652e4275ef0deeb6f17b82f88011","first_seen":"2023-04-10T15:09:54Z","last_seen":"2026-04-30T20:39:33.955155Z","times_seen":7011,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/livestamp.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/livestamp.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"586-69cfcf30-78acbc2882f87581;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 590\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (520)","md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-04-30T14:40:38.626328Z","times_seen":393,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CPMC; Domain=.google.com; Expires=Sat, 24-Oct-2026 17:18:51 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80955,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2056)","md5":"b7787972872afcdbd906c5e57e1329d5","sha1":"1a6113a0a59fbeaebdc5b83a6c0c645a85c25de1","sha256":"1c1f46e579e2918fc72feeb20809a336d3f4268787ba305d0a42f20659e9f7e9","sha512":"0edddb7abfa045b048e44393bc642a54048a2d02e757219a2764a62278bb07fc648024dac40c4d54a3c890068ddfe748286b872dba80cced017209162cc6f4be","ssdeep":"1536:XNzri7CtoSq2LILZLUGtYirKrhm3oQQ4CuPKucbRrWKiuwNWms:X9tILcirKrhQCKKibs","tlshash":"6f83c8c8b6a674a59353b5b5513f000eb23f589df8084dacb288d8f2adb5948413bf7d","first_seen":"2026-04-27T17:15:27.633807Z","last_seen":"2026-04-27T17:53:11.915019Z","times_seen":6,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/real-estate-investment-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/real-estate-investment-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"19432-69cfcf30-540863d15cfd8ce0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 103474\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"513853b7ee43c65811c9944d1b7f955e","sha1":"2b0031baa444165d350c3350ba133b5acb870a8a","sha256":"069e73aa63a77e4b8abec49c7c4e5fa241c8de1a364932dfb0106458ea29c88d","sha512":"974e70195aee421039f2ace2049356b5a1f7f17af9c5eecc0d66440e06f8579e305ae91775b5a9ee7b40a5ff475a4e86828df305fde5ee1f4000f29308f633c4","ssdeep":"1536:QFIkprDLn7pNoLfhuJgHeC+NkV69orEmTxrQt98jGnxZuV2wWHpc9+leU06GMA0M:QukprbpkuJgHet9rtqjQUre26PQZd","tlshash":"d3a312704694f447c86e6ffd1844db2cd163372c7022a078b9af96d26a486e61c1f57f","first_seen":"2025-03-18T04:27:57.409907Z","last_seen":"2026-04-30T14:40:38.631639Z","times_seen":351,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/investment-consultancy-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/investment-consultancy-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"100fd-69cfcf30-2d684477a7eba9cc;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 65789\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":65789,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"bce108b1f6b7e457c17fd834671653fd","sha1":"8ea5a9e514d2217ae81b6ac406f5cdbe4d0a5fcd","sha256":"80e141a0b2e918793daf5d8c6d43f95ae0d4bc3f479c0cfd816fda3bc1df1731","sha512":"547db66a7a8b6c16dc4b58d620d35d92b5b85d587886aec5c70efa6a24ea42725e9b0640cc9457915b1cd3d6276019721b0702e782a0a02baa5a0e5f4aa4a793","ssdeep":"1536:k/3s0Q2NUrGnNjKB93VoWk7SogjepsipU8QpHXaTPAA:WXNUrAjKBBwSoIxpHqTf","tlshash":"eb5302457cc037d85ded036191ab578b2fb35390e5a2e356baca724c572ba3ced03892","first_seen":"2025-03-18T04:27:57.402289Z","last_seen":"2026-04-30T14:40:38.618523Z","times_seen":351,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /embed/x7msE3tx8QI HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script', base-uri 'self';object-src 'none';script-src 'nonce-cpuu9cyMacdHY5rqOFPwKw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=CPEC; Domain=.youtube.com; Expires=Sat, 24-Oct-2026 17:18:49 GMT; Path=/; Secure; HttpOnly; SameSite=lax\n__Secure-YNID=18.YT=DwkUZ1CL5JinaLbb8tLsq1kfJ2a5tGnwC9TGPBE9bYMPLamgqKP-3cncsuc6Vf_itYXHWUQj0JOvRSbu0BQWYjS1c3xLbERd2_35SNJIg3928GoiUWpEz-envNLO4B0AfG-rnA0y6QXWxu8aFNu7MUei9PKJP8lsqVSw1lORXB3mXmN6oOdVLCKyFOzSKKVq1M80NfU3l4TZI7kVYoXjJbyrFY-VtoDYiojvnIp8wSQ6SfUv1hnd9dz-dYmoBKoQ2we-BlKwEkwlVrgtuAI-ETAsBE6lHAT-YegGPhAuMmbpBDzM398o0-IBOackTYzb629IhTYaMBJ7oWLiQ3I0Sw; expires=Sat, 24-Oct-2026 17:18:49 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=5wmoMqa_IZg; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Tue, 01-Aug-2023 17:18:49 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=zWebzDKdKfA; Domain=.youtube.com; Expires=Sat, 24-Oct-2026 17:18:49 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUA%3D%3D; Domain=.youtube.com; Expires=Sat, 24-Oct-2026 17:18:49 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CPT1vMC4gZ3WpAEQgpzx9sSOlAMYgpzx9sSOlAM%3D; Domain=youtube.com; Expires=Sat, 24-Oct-2026 17:18:49 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140435,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"650752e58fcacb95131b317e50c96fa9","sha1":"94dc3674e109f0a3b1a2b5cda0e9087b8f125dc9","sha256":"f78d8c0eebe9e02d713ea51957809b2892787773e8f9a920979e98089d73d198","sha512":"f867f38bcfe664d66236dd3f939da99001bd85a4f6f491402a99c699dbe9e9edb2baf23dfda2482f0e1eefb69b724468cf5f36f3cc565c5acb116ec9b321fe46","ssdeep":"1536:hyeTdaVOBoyxvtwVuh9LOXd4jU2wgCXzhacmyht9uVJzO5jeyP/wdC:/tyy7QXv2wgqEyhjuVJzTI","tlshash":"7fd32a240858b876c5939447edbaff3e5ce8023a47c8956ebcbad75c05dc6620eaf413","first_seen":"2026-04-27T17:19:35.841988Z","last_seen":"2026-04-27T17:19:35.841988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260421","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260421 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-FV_B7b01Lq1PgtuEysFdhQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmII1JBiEOLh-LVl33k2gQ9fFq9kVlJKyi-MLylKzCvOSSxJLU4tKkstijcyMDIzMDEy0jOwiC8wAAA-PBNu\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=33.SE=C9E8MXXOt07-F4jlevEyl0IizIDkvzCOHgohcA8Xh_iDk3ETPfF9i1uZbJfbukt9XIi6VRqMiS9LF47pyC8IzUnZrnsE7FH76YHMY9SnMv4WU8y3Nub579bikqXy61vLeWpEvme81HpoQJrURwthpCQYEAVmiLjcOqmaLgwE5yzLINzzBpahjvd7rPPILN9VKRKJwtiMkW0W7RhxfkyrhK-3fag4BPgiWCNtB37NPpRqPaRlyj4ySw; expires=Fri, 28-May-2027 09:37:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T21:39:25.757764Z","times_seen":14442449,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /embed/x7msE3tx8QI HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-x87Snte4DX2cNpj2FGKlsQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=CP8B; Domain=.youtube.com; Expires=Sat, 24-Oct-2026 17:18:51 GMT; Path=/; Secure; HttpOnly; SameSite=lax\n__Secure-YNID=18.YT=SObZVLIH8M2SfNFXAC6EisTyB4BqUbG-rCaCv1_ZchV33f2mogO97u_qJ7BfOhzx3k0jKwQHa1KcuYV0itBraO_IR-DCzJD7qWckmhz3VxjXwk-WkqAXR3FuN9GEeAymQCiTWP2oliWuP5TWP9ddTxVwzkfIGSmURlel_ue_mEsQiBfnc5yiEbk8iXBQYYhxyui9ZPwNGRsz5VzEyG5jiU0wej9M0CQlZ9JEfIji9li7QNoiRqdp3YFz0sg5eXr75Wu2MHARca5Sf7zqcVUMWT9okKcyBA-zXoXqzMnTtAdNUOzg3aAul-92KDIhBe6F9hv-Ieg_ME_CFuBe8GFsDw; expires=Sat, 24-Oct-2026 17:18:51 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=JegFym_uhFY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Tue, 01-Aug-2023 17:18:51 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=CCz7GPFs-yY; Domain=.youtube.com; Expires=Sat, 24-Oct-2026 17:18:51 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgag%3D%3D; Domain=.youtube.com; Expires=Sat, 24-Oct-2026 17:18:51 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CMPgxYbW9ae6qgEQ8ZTV98SOlAMY8ZTV98SOlAM%3D; Domain=youtube.com; Expires=Sat, 24-Oct-2026 17:18:51 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":140482,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"dc81424040b08320c8285b1160615d60","sha1":"cddd2e84030fba2c0cc5c531a1db3e0077eb48c0","sha256":"3c9ce7f2d9588516af294d40bff94065c7363bb7b221e91ddf1ee76808501419","sha512":"50272d0464cafb84989fa94d0f53dd89f56980243914e0a9405e9cbbeeea00e2f56cc3b3e7fe7952c6f37d26ddb62fbd11eceb58fc21f149fd878ffeaf566f6c","ssdeep":"3072:iXyyeuOaMq4rNYTCtoKLtEWgi3v2wgsjmxVo:jyeuOaMq4rNYTCtoKLtEWgi7mxu","tlshash":"16d32a254818a876c5939447eebaff3e6cf8023947c8956dbcbad35c01ec6614eaf413","first_seen":"2026-04-27T17:19:35.845879Z","last_seen":"2026-04-27T17:19:35.845879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/images/dragIconRoundBig.svg","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:52.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 16:47:22 GMT","end":"Wed, 22 Jul 2026 17:47:13 GMT"},"fingerprint":{"sha1":"2E:DD:BD:BE:41:8E:5D:61:D5:7D:F5:38:C2:AE:75:A4:D0:05:93:C6","sha256":"91:97:69:F7:C0:9F:1F:CB:DF:8D:1A:88:BB:E7:BA:82:64:A0:2C:46:5D:B8:07:51:0A:92:BE:1F:F4:B0:DD:F2"}}},"request":{"raw":"GET /images/dragIconRoundBig.svg HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Sep 2023 19:57:55 GMT\r\ncf-cache-status: HIT\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nage: 5277\r\netag: W/\"ec1a67186adfd91:0\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f2f7d2a1e64568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":679,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cef1b538160d2dc3cfd9645e012c54c0","sha1":"13bc0db6164715d9d82288fb9c5559a6dba83bb4","sha256":"4e4cb0abdc81f9302aec899a117786526e33d575d5c4f374c17f147fccab86a7","sha512":"6a67654cd7fc3ba097f3e255b7855a9ab1cc92842ca417b64d609ad101d6eeae3bda62642525ad56d7f35070f1b7b9c61395da0ec7a89d88df1eb8cfb428f7b2","ssdeep":"","tlshash":"47017b68764df53a87058355f77abcd1203b71e140d2530ca4426873e6172d675151b8","first_seen":"2023-05-10T00:33:03Z","last_seen":"2026-04-30T14:40:38.625671Z","times_seen":416,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/flaticon/flaticon.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/flaticon/flaticon.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"c25-69cfcf30-2996b91b7f6cf4ed;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 599\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea599ea4d42d8857576411a32ca71ad1","sha1":"9a3f3981a4d5d504c8dd78eae45e57d047ba3ed5","sha256":"5392f32016b9330f52883b8c33216665f1d5704d7824690ffc905842391568c1","sha512":"5df631c177a112132ae79305062ccc47b0f80c1d9723d16962bab79a1c3578173a8204c1361068e95eeb3a9ffc9f30356f15858fc2957280a58504ba5c9cd90b","ssdeep":"","tlshash":"1b51f554867e4040e7559b881f9f7780a768b02fcdc49c09b2059f6cfee19ad83c1aec","first_seen":"2025-04-28T01:39:11.855739Z","last_seen":"2026-04-30T14:40:38.603811Z","times_seen":355,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/animate.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/animate.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"13053-69cfcf30-4a807df5e10f917;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4285\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77907,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"91cc40989e5e96e8d6bddc0f19598441","sha1":"77b5378a2b4bfc120e52782dd869aeab7efe2fd4","sha256":"6b6b686ecaa56e02ec5aced95541a03f922f599b31f1b4cd429ceca824a6e669","sha512":"90750a22634147d99cc10d6ee1120bb6c889982eaee77f5b82445aa5f1ab6f05db90fc5f6a9933017bdd1a7ad3bb76e518d5c73c25f4925ae513bcc0661afe8c","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLcec:oNuKuWg9unuLuJu9KIZQMcLcec","tlshash":"80732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T10:43:58Z","last_seen":"2026-04-30T20:57:50.892354Z","times_seen":2740,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/main.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"9a16-69cfcf30-2215720dbf99d563;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7051\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39446,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3e8b5a8c85460cffe614029b6bfd67e5","sha1":"1e67df76af6402c86c76818555c3871aca4c16b5","sha256":"f208eefcb0c1eb9704eadeb8e5abe4eb720bb31569fe6713e1cd3743171227a7","sha512":"79499baa50afa59a08597b6a31a1c7e7f805b6db2b9b8ac6101d86f9ca67acb4118a7d3bfe90c95b16af02b8ac5589bdbb64a11f94f5158de93dd9a2041b3f03","ssdeep":"192:C/JTy7m+XgmQ4DFcDwDFcDWDFdDlXds3I9hoa2TAsD6lyHSXmtGsd0+NUCcHNGXt:BaaYjDBjhUCNQ1jzecPGX2fHd5Xedb","tlshash":"54034f9cda1621037237dab867e20756fb6400a3cb02016cbbddb2558ff45a88676edd","first_seen":"2025-04-22T02:01:38.824126Z","last_seen":"2026-04-30T10:36:18.952554Z","times_seen":115,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/slick.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/slick/slick.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"15475-69cfcf30-fc26bb827d8973e1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13698\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":87157,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-04-30T14:40:38.620398Z","times_seen":511,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 10:31:46 GMT\r\nexpires: Fri, 23 Apr 2027 10:31:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 370024\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-04-30T21:33:30.609632Z","times_seen":62149,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 14:58:03 GMT","end":"Sun, 26 Jul 2026 14:58:02 GMT"},"fingerprint":{"sha1":"28:01:15:B1:F6:14:ED:7E:5A:C4:36:40:D4:51:0A:F7:BD:16:E9:31","sha256":"4D:F0:56:5E:65:97:FB:02:03:94:69:9B:31:B0:A5:F4:1D:35:D8:8D:41:A5:6A:9B:C8:E7:5D:A3:87:81:E0:95"}}},"request":{"raw":"GET /coingecko-coin-price-marquee-widget.js HTTP/1.1\r\nHost: widgets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: x78/JLvR0bZ8v385JLO+OmwFDvOLrbVxif7AM9NbenNsuLllxm0Di+XJXChU5Chj5hfjJVIy3sw=\r\nx-amz-request-id: TNSJJZSVD7XM5KVB\r\nx-amz-replication-status: FAILED\r\nlast-modified: Mon, 07 Apr 2025 09:46:41 GMT\r\nvary: accept-encoding\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8IU8gJZQXRiGC6A_MmJu74Yaw9wjwSfp\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 468294\r\nexpires: Tue, 28 Apr 2026 17:18:51 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"73cffa172df581e1417b3380bf189952\"\r\ncontent-encoding: br\r\ncf-ray: 9f2f7d21bec5a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230964,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36129)","md5":"73cffa172df581e1417b3380bf189952","sha1":"c14dc8dfcedda14dfb6202ae9e0141422ea39bd4","sha256":"789cebe4be3c4e1098f04b45f09e113fbb80d7dea01b9c8a5b1b9a0a1af14b44","sha512":"294775493517fff0e586d24ae8bd482c679ff15b8a40519285040ca4eef3f508b967d5b84b2c41021e731da5c08c83093bf171b0abd7d9b7de88a32ad9f5e97e","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodP5rUzpI4Oz:XYBctCo254Oz","tlshash":"e234198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","first_seen":"2025-04-07T11:07:41.7631Z","last_seen":"2026-04-30T14:40:38.639832Z","times_seen":672,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/large/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/1/large/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-amz-id-2: nx0KvfiqGvDw4MnJemf5dwEAuPu0VQzNco/YptjhKVwnaQct2dk5hj78zsbVfR2mBa8+7ZTq6So=\r\nx-amz-request-id: F556GJ1MTFPEXH9P\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"565e8c524f6da22928811f836d0b92a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K_Yd_oAsiQpaEoTt9rotaTCh6C_AUMdt\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 12242\r\nserver: cloudflare\r\nage: 648\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg5%2BfMX13ixN0GA8WKuRjEjlvcuTXH%2BcoyTVMlp8JqaXkHkvbvLpNO3q4QUTB%2FSLM%2FnH4fO5SD%2Fgmh6JTRoF1Tb%2FsaEyGStQ68gXVYnF%2BhmI2iRhSUijcs%2BZYuDALPbJmtcNbMZepXcvxiN%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f2f7d23feec56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"565e8c524f6da22928811f836d0b92a2","sha1":"c52a8b6052273f04ffe097517461948beb849d3b","sha256":"1eb4e75d64a76a5d1fba301715ae227c683b34e8f75291670cdf7ae2a59de86f","sha512":"eaec675e23843f9fbe93edf354d54bd9b35001daa17b2345f6193e004035f1d16e0f5fdd933826a0dfb2e58e803174adf0cffdedba3ed561b1f1f528b15f4263","ssdeep":"192:CcG4VfIT9czHUiIxaA0BOlAD6sXLsU9Hogsr/ncqUd/gaPQ8SB+Dfd4rfMst/C0b:1G4VfIOExaA0Bz6aLmncqqoFBdLMoC0","tlshash":"1a42c005aae317c9cfa9803311a524136489c3800e65e8e6b1d4dc7cee9eb096fb37e5","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T15:02:15.776496Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:51.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/player/8456c9de/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 446632\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 07:44:54 GMT\r\nexpires: Thu, 22 Apr 2027 07:44:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 22 Apr 2026 04:28:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 466437\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1493639,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"56dbe9bf62eea12176a187ec85baf891","sha1":"1094b8799f5bd304d67e78a82cf18485457d89a4","sha256":"69fb674001054d564ddb078305eac3b62bc0814823a9c82b66830cfa6236cb7c","sha512":"dc61b521f5094883badaa5402b6e217f2e266eb7d70d691351d85a2a076e5897c1c819f11226da2c98cb7cb5d7d7b29929c88654464c0e0734a63d81287988cc","ssdeep":"24576:TO3oC39/qL7WdmOeaCx1mhi4z1sZh8FphawIPWEmZDUtILFwEjLHtNVhH3M:TO3oC39/qnWdmOeaCx1mhi4z1sZ4anPD","tlshash":"b5256cd87192b09603a3f0e418ef4902f17a2a84718cd4adf67ddae62cb1546457bff8","first_seen":"2026-04-22T13:58:53.287276Z","last_seen":"2026-04-29T23:35:33.49039Z","times_seen":4571,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-27","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/storage/app/public/photos/5e4BPwuODyz6dNgiC7s5DsFP1z9gibfrIohAVdHh.png","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /storage/app/public/photos/5e4BPwuODyz6dNgiC7s5DsFP1z9gibfrIohAVdHh.png HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Apr 2026 19:18:50 GMT\r\netag: \"13d10-69d0129a-2b08b5ea6eb405da;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 81168\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":81168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 438, 8-bit/color RGBA, non-interlaced","md5":"2030097397af9fb586b977a43ed14161","sha1":"f353b54b71091cc16c8262fd8aae161b53714faf","sha256":"d740bf9f1725ad64d22c61c1cef3370c7be254c4b4521189f45b1f02c3cdc003","sha512":"7bfe9bfd16ff8c6f7bd8d48f9da824784c5e0275683827e9eaaf48a7c4555c084a833e2354f4f87209a0b90b1db0d244c8bfae4c6e44a0249bfd931e75665644","ssdeep":"1536:Yrvl111xVLfQcFxRlhgAw0bI+CrSWfv132SJXHNAK6QDjZ0:KF1vLQcnhq0bI+C+Wfv12SpV0","tlshash":"de83f10bfc32f8c14a855a302cd5054a245b815b8902dc69b3ae3ebfdf94f85dd8bc64","first_seen":"2026-04-27T17:19:35.799844Z","last_seen":"2026-04-27T17:19:35.799844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/2/large/litecoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:18:16 GMT","end":"Sun, 12 Jul 2026 20:18:12 GMT"},"fingerprint":{"sha1":"2B:6B:38:E9:15:A0:91:52:41:73:0C:F3:CD:7E:0C:C9:1A:C5:6C:B6","sha256":"B0:0B:8B:8C:0F:D8:29:D5:DD:A3:CB:89:41:0A:4D:23:03:95:43:6A:AA:A6:4A:23:07:65:12:38:0A:C3:6B:D9"}}},"request":{"raw":"GET /coins/images/2/large/litecoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 17:18:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 7680\r\nx-amz-id-2: QitQ/rG7CZyd1QJbzi1gqNOcXac8pLxmzCvAS5R+ks6J7F4h5W2tmBblfNGVNOVtu/BAk+T3AZeB0ys+GvRgYIXHM8U0hwm0\r\nx-amz-request-id: 9W7CHSVSSP6HSCB4\r\nlast-modified: Wed, 29 May 2024 02:40:00 GMT\r\netag: \"2cb0c91b0d82542c140d900d549dddc0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5qPrLUbI5j.JglMI78Hfu1JUQECZPGFM\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3164\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9j5s06WEXTXWbRlj%2FYqdUl%2B36rmU032dzSPK2WCP9zCFDZbtgaO0ObVzWEJz6L8jyFH7Ld%2FR4WqjI0IU2ZAC%2FLhyY%2FE4hdVNdvpiOOvunRny8P%2BR5DT9PtLmAe7Eazi2gxC%2BQbt5ASvCxIN\"}]}\r\ncf-ray: 9f2f7d1baf315699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"2cb0c91b0d82542c140d900d549dddc0","sha1":"ed1c900fca53fc1b94a536c76bf2c9760424ed9d","sha256":"169ed6742d2bc4098e00de38a610578bd6e98227e13a8b38ad47cd977056385e","sha512":"a660f2ae5c860cdbc7b5b7dc8e2408ddfec249c5de96ca269ebd01e674c24241650bb719fccab0f4139f94eba25e65b231797c0528fbc94202b516d6419e28d5","ssdeep":"192:NSGHHL/j2qkaS+zipeHxwauyPXfEsYF7yWgX1jjBghvnFDoz:MGHrrDkdeRwaNPhFW+lgZ1e","tlshash":"65f18e96df82af6cc6915575f8b78734814a0f0ad6ae4907f9dcaf0ab94a3004be6012","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-04-30T14:40:38.636722Z","times_seen":946,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":79,"dns":1,"connect":21,"send":0,"wait":6,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/main.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"9a16-69cfcf30-2215720dbf99d563;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7051\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39446,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3e8b5a8c85460cffe614029b6bfd67e5","sha1":"1e67df76af6402c86c76818555c3871aca4c16b5","sha256":"f208eefcb0c1eb9704eadeb8e5abe4eb720bb31569fe6713e1cd3743171227a7","sha512":"79499baa50afa59a08597b6a31a1c7e7f805b6db2b9b8ac6101d86f9ca67acb4118a7d3bfe90c95b16af02b8ac5589bdbb64a11f94f5158de93dd9a2041b3f03","ssdeep":"192:C/JTy7m+XgmQ4DFcDwDFcDWDFdDlXds3I9hoa2TAsD6lyHSXmtGsd0+NUCcHNGXt:BaaYjDBjhUCNQ1jzecPGX2fHd5Xedb","tlshash":"54034f9cda1621037237dab867e20756fb6400a3cb02016cbbddb2558ff45a88676edd","first_seen":"2025-04-22T02:01:38.824126Z","last_seen":"2026-04-30T10:36:18.952554Z","times_seen":115,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 18:29:34 GMT\r\nexpires: Wed, 21 Apr 2027 18:29:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 514157\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-04-30T21:39:56.703678Z","times_seen":2892,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 16:52:06 GMT\r\nexpires: Sun, 25 Apr 2027 16:52:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 174405\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-04-30T20:33:36.999996Z","times_seen":12002,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/popper.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/popper.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"51ed-69cfcf30-5672d741981a62b8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7130\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20973,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (20800)","md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T20:37:22.687725Z","times_seen":7240,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/images/stock-investment-sm.jpg","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:48.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/images/stock-investment-sm.jpg HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im4zN3NEMmUzQkJXYTNZdjIvZFc5dmc9PSIsInZhbHVlIjoicmhncG1uN0srVmNPWkpkR3RYMG1nazllRWdwcjhsVnZxZEpXa005RERpMDR1RlJUTkhNWGJKOE4vMWNGQXFzT3dGYS9mNXRHeFNWTFoxanZNV3phbUs0K3EvdUcrYWYwMEYvWWxTN2ZJd1UrVjFiYUhaTXZxTVhoRFRITXIrRjIiLCJtYWMiOiIxY2JlOWMzZDljNmI5ZWE4MTg1Yjg4MjlmNzU0OGJiZDZkMTZkMjhkYzg1OWQxYzIwY2NlMjdmOTI1MzM4YzNlIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IjV6N1B3bTNMUmRIUCtmVjloQzkvVXc9PSIsInZhbHVlIjoibG5UN2NWcGYvcnNXRk4vc2FYWGhvd2NzVWRUQnNidDg0OGFnL2x0TnVscEFLcURVUXlUNEtiaGJURVpldzgyNGdNTWEySFdaNmtWTzcwb1hMMU1URVhBNE5vNmVQa0Vyai9Mc3lhTThpaHQ5N3RINi96OTJUTFEzQUtiWHY2VUMiLCJtYWMiOiIwMWJkNDhiYTdmM2RmN2ZiZmM4NDZhNTgwODkzN2FiN2ExNWM2YmU4NzNiNDQ0ZTkyNzZiZWZiYzczYWI0M2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"2dbb6-69cfcf30-4689f69cfcbcd58e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 187318\r\ndate: Mon, 27 Apr 2026 17:18:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":187318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"fc3e76cae0486fe2182e9580e7870ff0","sha1":"8b0885866f9dc0e6c22b63835c1be191ca0fc918","sha256":"26f8d247ea6b71c8e25a3dd239601cd0e4689f69cbec277e8e8d94987b7bf8d1","sha512":"8b7527cf0d06984371195bff3b27aae5c249bb7e83b72fd657a6a66aaa1a55932a6eb7eaf83b64895ded0ddff7748894360f3dfbf2fdd1245e03be804982744a","ssdeep":"3072:Q16tfXP9p8hwE9OwLVq8bOd6bDhD5ZLiB27bJWJ71aXaZktAO8tc:QufPLW9BtO6ZLyaEp1aUe","tlshash":"e20423408f34a8ce8aff9375bc26c202d258b9994e20feb7f02485e57cc59ee2547e44","first_seen":"2025-03-18T04:27:57.412829Z","last_seen":"2026-04-30T14:40:38.618058Z","times_seen":354,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:49.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 27 Apr 2026 17:18:49 GMT\r\ndate: Mon, 27 Apr 2026 17:18:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23175,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da021909beab0ff8237ca3132d715150","sha1":"cb4dfe7ecbaffe34c9c0f7264a20376fea1c3c02","sha256":"c598de7a97f99eca9a992b31e0ae65ebb1c1744981af3d577c965041fcff3594","sha512":"2ce8f240884297d891fb4e24220c80e23067b7d9185aa514deeaa9b04269f061f1a0cf806096ab311b78ad83467682e96ddcf9d394fb0e9746c4bb7ce702ace7","ssdeep":"384:cO3B3u3UOCZVOrkOOc/3O9K4O+VZO3wyOYbbOJW8v9AeUtGv4RK0:ddeU9Al","tlshash":"89a2bc66142fa580aa472ce337df3d31df4fb194b450887a6ffd2898ac56c22636630c","first_seen":"2025-09-17T09:11:46.441038Z","last_seen":"2026-04-30T14:40:38.632222Z","times_seen":406,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":171,"dns":1,"connect":8,"send":0,"wait":32,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/","date":"2026-04-27T17:18:50.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 05:28:50 GMT\r\nexpires: Tue, 27 Apr 2027 05:28:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 42600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-04-30T21:27:44.984441Z","times_seen":58020,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/slick/slick-theme.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/slick/slick-theme.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"14f2-69cfcf30-59988189714fdc2d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1146\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5362,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5d5467913e6993e7ce475116c74587a9","sha1":"7a9aee7ad36f6eba9a213967b052cb807a02c7a2","sha256":"e69bdf0d68f559df15d9fbddb2b0346b78895aa6e06de6c87236b28d5e2be5ae","sha512":"025c4c8e04461f15b402c00fad86fcd56e71bcdf856471b9036a4a50bc5fc73fa8a57a45287fb5683df6932bf990b74b76c8f9044a6830c53b085bca0ea18a79","ssdeep":"96:+V15CEXdql+MeDpaX806FjAf8YwkKbZk5PueS/Fj93:SP3XdcTGp6804Af8YwkKbZk5Pu1l93","tlshash":"5ab113aca506e1c6163388803fa30755eb9b30431f110eacffa413545fbe0ac5ad9b9d","first_seen":"2023-05-11T19:38:54Z","last_seen":"2026-04-30T14:40:38.619982Z","times_seen":380,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/js/bootstrap.min.js","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"d9df-69cfcf30-e965ed0037e19db0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13703\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":55775,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (55494)","md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-04-30T20:37:22.704013Z","times_seen":3869,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.LrxB0Px6Ql0.L.F4.O/am=AAAABA/d=0/br=1/rs=AGKMywFdhsYPawgPHWInzqlTWTvZ81QnSw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:49.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.LrxB0Px6Ql0.L.F4.O/am=AAAABA/d=0/br=1/rs=AGKMywFdhsYPawgPHWInzqlTWTvZ81QnSw HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 44197\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 12:51:09 GMT\r\nexpires: Sat, 24 Apr 2027 12:51:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 24 Apr 2026 05:09:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 275260\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":362685,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (57635)","md5":"f0b2543e21f21f908d6051d6df967070","sha1":"dcf43767fbb354a45865a009e8c5c6bb6e7f616c","sha256":"51e2e1a5b696c33f8e0d0c15e29b2bbfa3f189cf11fb1f94de3e27018aaa4541","sha512":"c1aadb87377b87405befcfd3f6a4086653e8c55290b60f583f4ab33d9a15e570e4ecfd91f1f61080afffa3a4ab0e17c48693a41ca34784f140e9cfd69b91ec11","ssdeep":"6144:2pEp341Z+zlrEBtLzum3gszR8ri24typauQz0yeSE4dk+46HnhF4xdXcXaGlaxA4:h41Z+zlrEBtLzum3gszR8ri24typauQu","tlshash":"f474b97355121228f0179671ebe1fe4ab526c117c25a3aafe442fe2cc6df5e12e2360d","first_seen":"2026-04-24T15:38:02.48135Z","last_seen":"2026-04-27T17:35:07.834859Z","times_seen":2532,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:50.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.YTnlnYDGGYo.2021.O/am=AAAABA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywFioGMkWI4n1SDJxd_meb9UuKkB4A/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 188012\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 12:40:33 GMT\r\nexpires: Sat, 24 Apr 2027 12:40:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 24 Apr 2026 09:10:42 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 275897\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":645198,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2125)","md5":"90238957363b111798a74fa846d0c6a0","sha1":"5cd4cd0552f8950f50a73e2ffa1cb1a175e48193","sha256":"ba098864ed43187d1dce8066298ecee4fbd10ef0ef5f2b690afa00b7dd6065f5","sha512":"d2c03354004a6c53f3cfbb1367fe2abe6a22dffe10cbc4f17979c556a9f056218995dc64774e2bf792830bd4300c87e847aad36ce1ffb62f2c8a22e4c6c9690f","ssdeep":"12288:XSwa4nEGClHe2ot7RFZOzCAYA5GlDxkJKQh31eF:iwa40lHe9t7RFMzCAYA5j16","tlshash":"12d46de4b292b1b687866d66e47f4053b17f5d02f1044878f0f66ddc14f8e4ca2bab29","first_seen":"2026-04-24T15:38:02.573665Z","last_seen":"2026-04-27T17:35:07.714771Z","times_seen":2493,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"derivefx.com/temp/custom/css/intlTelInput.css","fqdn":"derivefx.com","domain":"derivefx.com","tld":"com"},"ip":{"addr":"82.25.96.202","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"derivefx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 11:10:42 GMT","end":"Thu, 02 Jul 2026 11:10:41 GMT"},"fingerprint":{"sha1":"4B:85:18:29:A1:BF:CC:8D:72:63:AD:88:A3:18:10:DF:98:A6:C4:85","sha256":"8C:9F:68:73:37:F2:62:4B:50:77:C9:C6:3F:3E:D9:3C:D2:A7:DD:45:EE:98:CE:F4:C0:D8:07:62:E2:0E:53:AB"}}},"request":{"raw":"GET /temp/custom/css/intlTelInput.css HTTP/1.1\r\nHost: derivefx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImE5N1Nrc0JJaWVicUdWWXF3ZmVXT1E9PSIsInZhbHVlIjoiNGZIaTBBaHpNeElBbmZwb0tqeFFURlBudE5ydUFZZENVemhyZHg0WHIyOWk0ZiswZmhGQlJXZ3hhbFZ5Nk9NbXVmc0FrV3BHcXFrV2pzY3EwME1tMmtxZTFBeCtJNmd1amF2cmFxdUEwRzFGbGhLc2kzZXJSY015dW5JVk9jdWMiLCJtYWMiOiIxNDhlOGVkMjRhOGVkMzMyOTAzMTk3NzM2ZmQzZTRlZTZhYWJkOTczODJjOTgyNDcyNmM1YmEwNWQ1NjUzMjhhIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6Im9QM0s2ejlSRXhNTWxESkoyS2l3Ymc9PSIsInZhbHVlIjoienY4bENiUFJHdW5NMW9na2IxeThQSFVUWXlISmlNQi9TLzNENmc0MExLSlBneWozVTdyZkFZaEM0dVMzaVdmUXYrN2tsYW56TmdYSXV3dHRKTmR4UGpQL0FjQXp5T043cUYrWW1Jd0pXKzdwcTE3cU9lRElKRGllWVpmcWVUVEoiLCJtYWMiOiI4NWI2NjdhNGZhMzE0MWY2ZDdiZmM3Yzg4YjhjNzIxODFmNjcxMDNkOWVlYjgxMzVkNjUxMjUwZDlkOTYyNDI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 04 May 2026 17:18:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Apr 2026 14:31:12 GMT\r\netag: \"70c8-69cfcf30-a3e323c277331a82;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2915\r\ndate: Mon, 27 Apr 2026 17:18:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"36ad59bd54fb93f8e30e3273470b91f1","sha1":"687880cd4146a6841f427ccf8f7dc38084996db7","sha256":"67215ee6059ca860b0c9947f70b739ab8cf2c53ba74d7ab1aa950cbf84fa7c2b","sha512":"d9a968bca0889c579b40efbaf1fc6d6f9fddcd48f80116f33693da9de3bee54ec1a56fa59b4e50a6980371be72e6de645d85cd0f162392c5e4a13daf4be19ed3","ssdeep":"384:9QVEnIft6NOMiac6LHvybiRF6y+CV5mxX5Yl:9jIft6T","tlshash":"d3d24c25cb603409b13bf372e6a04782eb37102be90246acb3da7d55dfa50e455e2fe1","first_seen":"2025-03-18T04:27:46.827076Z","last_seen":"2026-04-30T14:40:38.614092Z","times_seen":357,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"derivefx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://derivefx.com/#","date":"2026-04-27T17:18:51.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://derivefx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 10:31:46 GMT\r\nexpires: Fri, 23 Apr 2027 10:31:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 370025\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-04-30T21:33:30.609632Z","times_seen":62149,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-04-27T17:18:54.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1777310334440\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: 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%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260424.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 904829326\r\nX-YouTube-Page-Label: youtube.embeds.web_20260424_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1777310330485\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C700%2C394\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 12263\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12263,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260424.01.00\",\"configInfo\":{\"appInstallData\":\"CPm0vs8GEIyP0RwQibDOHBDcz4ATELWl0RwQy6PRHBC9mbAFEIHNzhwQvoqwBRCUg9AcEL22rgUQuOTOHBCHrM4cEK7WzxwQ2vfOHBD2q7AFEMGP0BwQzN-uBRCU_rAFEMPegBMQndCwBRD79tAcEL2E0RwQlLbQHBD824ATEJ_PgBMQsP7QHBDxtNAcEMbGzxwQ46nRHBC44IATEMz50BwQvKTQHBCZjbEFEIv3zxwQrPXQHBDCidEcENeF0BwQ_LLOHBDevM4cEMj3zxwQ8d6AExCMh9EcKlRDQU1TT2hVeC1acS1ETGlVRXBRQ25BNzVGWFpQV040RGpyYndDektnckFRRHpmOEZ5N2NHLXlhMjVBYWZpUTNxLVFhV2xBYk5RcHFsQnM5dEhRYz0wAA%3D%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://derivefx.com/\"}},\"events\":[{\"eventTimeMs\":1777310330186,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330190,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330195,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330196,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330196,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330197,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330533,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330535,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329829,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329636,\"latencyActionBaselined\":{\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329738,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329829,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329838,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329950,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330026,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329926,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330121,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329925,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329996,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329926,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330053,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310329925,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330023,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330543,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h3\",\"transportProtocol\":\"quic\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330170,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330546,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330550,\"latencyActionInfo\":{\"serverTimeMs\":56,\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1777310330660,\"screenCreated\":{\"csn\":\"YBFP0bj63W6pGTJI\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"eZrvabrtLeGv78EPooG4mQs\"}}}},\"context\":{\"lastActivityMs\":\"46\"}},{\"eventTimeMs\":1777310330660,\"latencyActionInfo\":{\"clientScreenNonce\":\"YBFP0bj63W6pGTJI\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"47\"}},{\"eventTimeMs\":1777310330661,\"screenCreated\":{\"csn\":\"rDY4OkGHl0aHNfE7\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"YBFP0bj63W6pGTJI\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"47\"}},{\"eventTimeMs\":1777310330661,\"visualElementHidden\":{\"csn\":\"YBFP0bj63W6pGTJI\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"47\"}},{\"eventTimeMs\":1777310330661,\"latencyActionInfo\":{\"clientScreenNonce\":\"rDY4OkGHl0aHNfE7\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"47\"}},{\"eventTimeMs\":1777310330662,\"visualElementAttached\":{\"csn\":\"rDY4OkGHl0aHNfE7\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIvYXy9sSOlAMV5M1PCB3eyAmEygEEK4hqWQ==\"}]},\"context\":{\"lastActivityMs\":\"48\"}},{\"eventTimeMs\":1777310330665,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"52\"}},{\"eventTimeMs\":1777310330667,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"53\"}},{\"eventTimeMs\":1777310330710,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"04MKiSNG94A7eHJl\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"96\"}},{\"eventTimeMs\":1777310330713,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"99\"}},{\"eventTimeMs\":1777310330862,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"248\"}},{\"eventTimeMs\":1777310330863,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"249\"}},{\"eventTimeMs\":1777310330865,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"250\"}},{\"eventTimeMs\":1777310330871,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"258\"}},{\"eventTimeMs\":1777310330896,\"visualElementAttached\":{\"csn\":\"rDY4OkGHl0aHNfE7\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"282\"}},{\"eventTimeMs\":1777310330896,\"visualElementShown\":{\"csn\":\"rDY4OkGHl0aHNfE7\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"282\"}},{\"eventTimeMs\":1777310330970,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"356\"}},{\"eventTimeMs\":1777310330990,\"visualElementAttached\":{\"csn\":\"rDY4OkGHl0aHNfE7\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"375\"}},{\"eventTimeMs\":1777310330990,\"visualElementShown\":{\"csn\":\"rDY4OkGHl0aHNfE7\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"376\"}},{\"eventTimeMs\":1777310330990,\"visualElementAttached\":{\"csn\":\"rDY4OkGHl0aHNfE7\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"376\"}},{\"eventTimeMs\":1777310330990,\"visualElementShown\":{\"csn\":\"rDY4OkGHl0aHNfE7\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"376\"}},{\"eventTimeMs\":1777310330991,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"WAcZXcrTJIOavX57\",\"clientScreenNonce\":\"YBFP0bj63W6pGTJI\"},\"context\":{\"lastActivityMs\":\"376\"}},{\"eventTimeMs\":1777310330991,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"WAcZXcrTJIOavX57\",\"clientScreenNonce\":\"rDY4OkGHl0aHNfE7\"},\"context\":{\"lastActivityMs\":\"376\"}},{\"eventTimeMs\":1777310330991,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"377\"}},{\"eventTimeMs\":1777310330991,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"377\"}},{\"eventTimeMs\":1777310331048,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"433\"}},{\"eventTimeMs\":1777310332028,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"1414\"}},{\"eventTimeMs\":1777310332031,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFw==\"},\"context\":{\"lastActivityMs\":\"1417\"}},{\"eventTimeMs\":1777310332036,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"1421\"}},{\"eventTimeMs\":1777310332437,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"1822\"}},{\"eventTimeMs\":1777310332438,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"1824\"}},{\"eventTimeMs\":1777310332439,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"lwtfYHtU43EGWxdj\"},\"context\":{\"lastActivityMs\":\"1825\"}},{\"eventTimeMs\":1777310333036,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAHCaQA==\"},\"context\":{\"lastActivityMs\":\"2422\"}},{\"eventTimeMs\":1777310333037,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"2422\"}},{\"eventTimeMs\":1777310333038,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAAD9AIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAAKyVQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAPA/\"},\"context\":{\"lastActivityMs\":\"2423\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"eZrvabrtLeGv78EPooG4mQs\",\"clientCounter\":\"11201\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Mon, 27 Apr 2026 17:18:54 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-30T21:37:31.754548Z","times_seen":242721,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}