{"report_id":"692d49c4-13f5-45a4-b8cc-86b6fb6e5524","version":6,"status":"done","tags":[],"date":"2026-02-14T03:15:08Z","url":{"schema":"https","addr":"goldentrustcredit.com/","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":0,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"goldentrustcredit.com/","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"title":"Golden Trust Credit - Dedicated to innovating, simplifying, and humanizing digital banking.","dom":{"size":22480,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19791)","md5":"bc74238c169d4d6b0701b690a005b961","sha1":"6ec943a6524b91acf3f03179888268e0e2731b87","sha256":"3485e8a4a7a4ba40e8d701cd16d7658c4cacf78ccaf102d491870bb172e809a2","sha512":"10eb743de9cf3d0411ce0181e652733d13d8feb8697f9af19184c335cccf5038128e9c35515495884711ce8348ce064d5b0b274b01930813ef2a66dcf6729769","ssdeep":"384:nkyEcQ4OnP+FE8dJqgQewSlaLVHobQdrjQBt7L21jVx2:nVwsQewSlMEAjf2","tlshash":"a6a2fbd6365482f4f603d7f4d032bd64727bb9aa9f8793a0a62d4490dfd249cc89acd0","dom_hash":"domhasha143cd80d7f19585ba6c4c9a89eafbf2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"goldentrustcredit.com/","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":0,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T03:15:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":5,"received_data":39407,"sent_data":2470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-08T22:30:41.935977Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-08T22:26:16.428236Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"goldentrustcredit.com","ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"domain_registered":"2025-10-11","domain_rank":0,"first_seen":"2026-02-13T05:14:20.883453Z","last_seen":"2026-02-13T05:14:20.883453Z","alert_count":70,"request_count":70,"received_data":2686447,"sent_data":83194,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:404.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Chatway","description":"Chatway is a live chat tool for websites, designed to facilitate customer engagement through real-time conversations.","website":"https://chatway.app","common_platform_enumeration":"","icon":"Chatway.svg","categories":["Live chat"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"widget.chatway.app","ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-21","domain_rank":772505,"first_seen":"2023-09-16T12:41:11Z","last_seen":"2026-02-13T16:35:09.337763Z","alert_count":0,"request_count":14,"received_data":1284697,"sent_data":6960,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"prod-api.chatway.app","ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-21","domain_rank":745850,"first_seen":"2023-12-16T03:20:22Z","last_seen":"2026-02-13T22:05:25.022998Z","alert_count":0,"request_count":2,"received_data":20171,"sent_data":1339,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":5,"received_data":3435,"sent_data":2479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.cloudflare.com","ip":{"addr":"104.16.123.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":26817,"first_seen":"2012-05-22T13:19:15Z","last_seen":"2026-02-09T08:57:42.654741Z","alert_count":0,"request_count":1,"received_data":1153,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-02-09T04:37:21.399004Z","alert_count":0,"request_count":6,"received_data":388724,"sent_data":3144,"comment":"","tags":null,"fingerprints":null},{"fqdn":"files-cdn.chatway.app","ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-21","domain_rank":1629904,"first_seen":"2024-04-25T02:10:45Z","last_seen":"2026-02-08T15:02:20.41376Z","alert_count":0,"request_count":1,"received_data":4969,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-08T22:29:54.459767Z","alert_count":0,"request_count":6,"received_data":69790,"sent_data":3217,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-02-09T07:15:42.209177Z","alert_count":0,"request_count":2,"received_data":83973,"sent_data":954,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":1,"received_data":104027,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-cgi","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-17T14:18:32.470193Z","last_seen":"2026-02-09T05:15:27.940011Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":916,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":8,"received_data":189018,"sent_data":4254,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.chatway.app","ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-21","domain_rank":788542,"first_seen":"2023-09-16T12:41:10Z","last_seen":"2026-02-08T06:54:38.951986Z","alert_count":0,"request_count":2,"received_data":94037,"sent_data":866,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-02-08T22:46:54.368985Z","alert_count":0,"request_count":1,"received_data":70233,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-06-08T19:38:41.266202Z","times_seen":11855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/tweenmax.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ebfc60317f7c7439949d5728c2e7905","sha1":"6bdc6e3e92cf447dc3922977d923b2901e36640d","sha256":"db1047e16f9ed072dbc343334fb2dde5f14c486676495bed4e592d75dc73522a","sha512":"dbf9d706a05c8b5215e73702744e075522cd0641e1a9a6566004866681eb6d3e55e5d8cf47829a2c6bb85f9a64d25555efe9b65c8c6614332177753583d142c7","ssdeep":"3072:wAcorGC89zpEosfUfR3Hb9jLYQz3Xk9kqJaR1MfgO4553Njx849GXIFsHtsznbFc:wmGC89zpEosfUfR3Hb2Qz3Xk9kR1Mfth","tlshash":"1fe3c54523d1213e8547f2629d7fcc46b33a8d68a385c85e790c94fc68189748bbeebd","size":144259,"data":"","first_seen":"2023-03-10T21:06:35Z","last_seen":"2026-06-08T16:32:30.165976Z","times_seen":934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#153","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-06-08T05:58:59.336825Z","times_seen":36916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7def5c80176b6c25973b1233160ea2d7","sha1":"9b8ed0e76f7c4e8751ac8b6012478d4edfb4cdc7","sha256":"33c1376dd026bfa89865cfac908758bffa349513e593d7231e4967c8d44d8d23","sha512":"bed64a1ff0f6f91daabecddc48a81c06a452f6651aadf14be3a12ee30594f551998b35e0db05b9b6e3bc60a41edc6f29c67dd189b64787a21b38ae221dd478c5","ssdeep":"3072:EhKxvogNR1cPmzRxp673A2zC8VYOf/xZ5YAjuIGTHLdZVVb7Nmoq0hn:+2iky3xSvb7v","tlshash":"4784d9cab266b8939262f8a190bf004bb93ddd57b4484c6cb149d8ee5db08094177f7f","size":381830,"data":"","first_seen":"2026-02-11T21:35:34.930944Z","last_seen":"2026-05-26T07:44:40.853401Z","times_seen":638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/markdown-it/13.0.1/markdown-it.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c312733bbc9b162af28c64c8991b3ba","sha1":"9e7644adf7f90a5afd8d60cf2887134ef08fb72e","sha256":"84dca58da83a8220ac8efff22a6c4af3f55e1f3bcc0ef739bbc033991be6d412","sha512":"4987c35183e0e71b29b06e8e3a95d4dfae86f1266c7473a1aa4fe271dad827613f58a6713f1cdeeddd870f70325e94fb536d8f679cbbe31469a99e80d9b27e91","ssdeep":"1536:+WA83I94l3mQiB9JGv18Px6/HpGmqD4JIz3BXUT+3VNb3xzsp4tEHDT8er3Q4A:+WAL6l/KP2H8zcOFLN36C2DQugb","tlshash":"5ba30b5562dfdcab229030d82c7f290da9fe4a42440cc428ffed91eb19a5993315bf76","size":103012,"data":"","first_seen":"2023-03-09T23:28:50Z","last_seen":"2026-06-08T00:29:29.335749Z","times_seen":1530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-06-08T18:39:48.878418Z","times_seen":79014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.chatway.app/widget.js?id=JKukFvsLC7QS","fqdn":"cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6f46b0aa8fde59c98bc5e6be3f04fbc","sha1":"4635b193ce7a6083d64e50954ceac13aa4b4f35a","sha256":"66386f69bc9e18d70c9fd9529d2199fe22d096dacd9cf4aae3cc67c9b9eefe29","sha512":"75b52d212d3ddd03dd90c84938142753cf153f2d7e42c5ebd67b662a73e9762991ee20df4fd08ed946ba1f29742e3fc0e2e601e525ee3ae2c9d6b7c46f1eb448","ssdeep":"1536:FcSCNrxaJPLdEWBGJCx3HnpOpHY94x3dX3V:qSCN1qLdE6epK4x3d1","tlshash":"4d7329b071a6193546eb48de6465b60036215c9db8858c78fc7ccdaabb85cc6433bff8","size":73500,"data":"","first_seen":"2026-02-12T19:35:00.470474Z","last_seen":"2026-02-15T18:07:23.014417Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/fancybox.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5903cd4e4bdc6c28ece32e469b887a8a","sha1":"825baf2b74a47eccb7b3f439fe58da710b84a2c4","sha256":"c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7","sha512":"9562ef7d089c8ebd39a3978cdac3266643a4a184ebb122598b9991b8c9dbbcd61e4aae736bc2e1a84ce6edd97d6f671fb366ebc802b9a8170cc82d510ffbd3b9","ssdeep":"1536:FUtGulsqqQzeFuouppK0WFVnsQrNz7M4HJ3t5oSKN1fQq58cTJ7PBTf:cGasqqQzeFuoubK0WrNz7M4pd8qq58cH","tlshash":"0663f89fb610702582bb0594a30f560ed1377116f10284fa78bcd4d55ae4fc922ebbfa","size":68446,"data":"","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.181628Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-3-linkify-DSxu0C2V.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1c840191d67e4382fe96ec2a00c2880e","sha1":"466d71e6207ece2939f6357d4b01ea30edb9e4a8","sha256":"adfc1ef77350a8ba76d1618a155ac6802e6d41804191fa9a932b88a81d0f6c7d","sha512":"ab39f6645b4919f2cf30911eab590f87c553318ff3cbf41dc0a9bc6ea92ceb0aa694948623ed896140ef23a4f0e768627b95708361b9ee32e852c7d8785c5667","ssdeep":"768:a27KR9FY7HCua/sF+sTnlO+zS06wjJTk7EIh8H9Oi6Sg9b4fTz1ETEGl2:PKR3CCua6Ts+zSAjJTmqHwiqc","tlshash":"2d532ad8f6c2e079475310238caf1304507c99a4fe85c42db9b8e4e734a995b71bfab8","size":65337,"data":"","first_seen":"2025-11-11T11:56:06.753135Z","last_seen":"2026-06-08T00:29:29.269706Z","times_seen":802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/jquery.countdown.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76a923d3d69255c45cd24bf9b100244f","sha1":"eb3c96f9901692f1a03500ea632963a16afdb985","sha256":"8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5","sha512":"b97bed03f0e8868df19d9e2437158b89f06a46827af8876f616c8f42786d145105964e8518d8bad9eece23cd9c7a4767f39861488c5410ab42ffc7e20cde44a4","ssdeep":"96:GBXpuplQHIwbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qf:rQHnUpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"b9b1a5ceb3b213d508e553a201ae1116a27bf15be4d6001cb5fceac87a75c9d606fd78","size":5360,"data":"","first_seen":"2023-03-07T01:28:01Z","last_seen":"2026-06-08T19:38:41.274812Z","times_seen":8873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/main.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c36261f13ab72adcc6d121b42ecf7527","sha1":"c3797740ed1bcf47c268153320a1d04cec5d014c","sha256":"087aa918d5cd7d8340a2facc168e57245932b0a5f668f6249a45727b7868da1c","sha512":"a61e110a84815d8b4cb3bd2158daad9f9e12a20c95244c7d099b8f714efa5aa4ce48b72d699e4a08e6fdb7712bab17c7521586f52e18d683585df2f4c530c729","ssdeep":"48:YcKnGmRenN89Di9ooisW9ooiEM//PPBlLMeBlLqPBebfH0Yujmwm8Q+03iMbq1x5:YGOZ7W3vTLMyLqk9+0DeLfa+TBdD/","tlshash":"56b1864e712030ab94ef331598df6a44bf3b1910d700e999e2b641797d6890fbcb3a6d","size":5498,"data":"","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.166484Z","times_seen":852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/form-validator.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4daf2755cb5c35eb40079a0457af6af","sha1":"98813bbfbc7a3b53b68457778cbf073281af1ecb","sha256":"5932ef8c9c2d361a85d8834d47f508dbd305fda081fb646c18f7fbe76839080a","sha512":"428ab339eaee7b3da2ee135ae6e9a99dd7626693027f1eb33a4239486475dcda6bd40f2dfa40fed5d46728813354f874feb0572f6806ea51c523ef6640825051","ssdeep":"96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c9c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","size":6063,"data":"","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.173097Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/jquery.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-08T17:27:55.924477Z","times_seen":19632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/aos.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-06-08T20:01:50.800786Z","times_seen":9629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78085,"data":"","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-06-08T16:32:30.161958Z","times_seen":2210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/index-CGUo5UWE.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d7a0c4838c89ae9f676a0c79453dcde","sha1":"12d7001a9c4d823cefee6fe1231046267492d1ce","sha256":"fd51a0ee48016945373866d26f88fbaa091de3d78972a0398f0a50c56c03826a","sha512":"a1d5a251d16ef1e644eb781e4ea32a1a4c0acffdb77b9cda5aaf32d4e38fbd8e61ef948c55a7d0770e71ccbe3667248225e76fb65fa368f0c7ba2f59f2ca59ca","ssdeep":"6144:bj2wgMXXRxuXfait0GRdMNV7VfIBa1vMFKk2hMtAcCyCSWdgK5xUIIcMthMlv:baMCXfdRdMZ51ZRLRiFhMlv","tlshash":"12c46be532d1b73b52333760981b700ab72c5da9dc48c4dcf6eac8de2a64c54617eb68","size":553963,"data":"","first_seen":"2026-02-12T19:35:00.355858Z","last_seen":"2026-02-19T03:48:10.147556Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/contact-form-script.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"250bc40cc9bf0311ff49a31cb3fdd96f","sha1":"75b049495fd4ad8f8dba66abef363b74fa50b326","sha256":"01f88dcee3ea695865770808ba43f18d9b0a0db51696c39d69ea2a607c108e78","sha512":"7ba4df3992f99eb5cf3fc7ac3e4977218b0fe6d57912885197931701943e4a0d33d36971b70b656090d84bce351fccee973727bff9d85294c9dcc7d1c5350487","ssdeep":"","tlshash":"1811d012341429d9033b2bf9700e3602b3711a34c9bde91520b0b9cdbf78d9836a3316","size":895,"data":"","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.186648Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/odometer.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-06-08T16:32:30.171545Z","times_seen":2237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-chunks-B2UqFvij.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9a4d674de68df36c036c2f6f3d40fe47","sha1":"f8426334d1a4b99f57f086624bd8277853b28213","sha256":"6e3e5ec6aca09e6c13ee05980f115cc372a026b9d0204ffbb98e6eae203e2034","sha512":"961b8144d8fee971583794da35600149bbe47a7cbec49ace9e9fe822b2ab7edf99a6ba0174d70d805d31200597a79e440e75253f3b1d50d0d44a8cda38de3350","ssdeep":"768:380GJQN2EemJhEovnDbqTbWLBrsfcwn13wunX3nO0j1tqD9M5pEKtKFBrwik9PK2:dWp/n2DXkhso00Wj6sCFQCbARc5","tlshash":"537317e83182b57253fa09e6007b0406f3292d56384ed8d8f1adad9f3d7640591bbfad","size":76341,"data":"","first_seen":"2025-12-16T07:38:47.970776Z","last_seen":"2026-02-19T03:48:10.135141Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/library-chunks-1-CgheCQw1.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"20efd6105a09954b25eacf0602ceab46","sha1":"ed4fa8829a2d86998581c8c71fa43dfc7f3c9898","sha256":"b772c17335b072063785e6848afcb5162c6ce71134335236c9d1e9a4bf66143f","sha512":"b53cd0a7c9139ef47e4c79a4616070299f7efa62e60f449dc77d93421802a0d7335085271fb7404c397d9403f4600501bc5ea7ca6159973aa4f279c2e1af632c","ssdeep":"768:A1d3dEqzRMvkZXze2WNGoVaiLE4+oO/NeL2pi4cvpgOUz5ldjErp1wIIsI0uMomL:IjY9JFq2iQ7Vk7aF","tlshash":"bb0318d976d1b07203ea55f8406b0902f32a9a19744d84e4b16cdcef3db600a96bbf7d","size":40282,"data":"","first_seen":"2025-12-16T07:38:47.984078Z","last_seen":"2026-02-19T03:48:10.127152Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/socket-io-Bq1seLiF.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c4708b47d1b05894dc74a819edb1fe35","sha1":"571ca7b6ba0184fb98330910845c294572e0009c","sha256":"81d7c74fcdcd2ebd103038d7d8d9c7c1ae7089dd90cd0296a1daeed259d09702","sha512":"1865efbdc6661c7b475b3cb2a202253c05c0cda45331d644f46cb1b2243c19301e0c6691a6da366dcd9db42dede81b2781edf021964c8528dd81d85a2d03b88a","ssdeep":"768:4zMhtTwsESn5FFUlffRdMFyRsTngw0IQ2ovp7czzUjEQphySPrY9nZh8bT5Vto/e:Vln11TgBIcv1c/Ubr+C","tlshash":"dcf2f9c8b2a0946683e2a1a290750203f33954557409869cbb2ceef7ed7deca7173f75","size":37122,"data":"","first_seen":"2025-12-19T11:10:25.718981Z","last_seen":"2026-06-08T00:29:29.33642Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/floating-vue-XJ7ydwyV.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7018cbcf42d68259db7b6b79547d70f3","sha1":"1a5d2d06c2edb61c51400b2224c4c325e1af0f91","sha256":"c08bce3f088a125d5711cf55cae8d273527291ab6f6d5e5e8e86df6d78fb0362","sha512":"d057a8d67510c81671138aa42935983d0c0692c1e2680271c9d4971022cd8ccf90380cf969a5393275fe556fc19adde5def943e816d428a9a9497e2704de0c05","ssdeep":"768:9Uz+7n+eTC43ULScUbGyf2J8hrfLdZAY5+mn3Wh8usqu0+fbmzZqflPOrorRtfEQ:izvfQnAY5PcP+pB","tlshash":"4b13f9bb7184f13313de95b6503a0609b3261798b40f545cb2fc9bed28b6d14626afbc","size":42661,"data":"","first_seen":"2025-12-16T07:38:47.932836Z","last_seen":"2026-02-19T03:48:10.153848Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-08T19:29:46.708024Z","times_seen":337343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/jquery.appear.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d1c754b36f693ea7de8d608acc4afe","sha1":"10736302703a32d7682359a36226f341c8982daf","sha256":"b57506318dccce1f06d2545f2db1bead5d46acb07df071aee7651d2c3013105d","sha512":"53f2b2c87a37679c54ae6e4adec6ab5e38aba31bf9ad51c69ada851d85d3b6e9d5cb3a770986d2584203d4f55fe6f03acbc0314afd99d536d70fb020847d68c2","ssdeep":"","tlshash":"0e21a8ca38c6bce583fb311c562f72421161913f574299a31ceadd7c35a6c913c13e68","size":1198,"data":"","first_seen":"2023-03-07T17:48:49Z","last_seen":"2026-06-08T16:32:30.188183Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T07:20:31.611307Z","times_seen":3252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AAgG/d=1/rs=AN8SPfpYUifknm5HXpc3sN6FXwwldLo-5Q/m=el_conf","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a733616613d3b0a16fbb5ba296f7b892","sha1":"6aad9dce4b74bcdfdde7d755da10dd6e35d25a9f","sha256":"d33deead5c9e346ac336384de61960ff0b02c11f50f9256a39d787913f9bc25f","sha512":"fb04e16f46820922b13b4dc638ac14570d7e53d4c2c4dc6b22da5495ff0271183faf735144de8e19cd5266c1586c3a9d77312e5de8971401be21d0cd441212fb","ssdeep":"1536:X/v4TufUB2+e9JCTUHdBjHvK4e7yrk3N4eOdDNezivwNWnq:Xf+e9J3jHvK4UEgziPq","tlshash":"c483b7ccb6a671658263f5b5413f000eb23f59a9f8084dacb288d8e1adf4949417bf7d","size":81657,"data":"","first_seen":"2026-02-14T03:15:15.314588Z","last_seen":"2026-02-14T03:55:06.478712Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"f885019d60d2815eac5fed1805b39d0b","sha1":"5ea8fd60c08c4f6ab3fbeafb081133d2edc65eac","sha256":"b2aeebcbe621533b413aacb6683663cb5b1336c53ff72ba2e97e5fd428c6bc20","sha512":"ea540c50e85737aeb8bef9ce37c5a9539312d51d13119a8e954c539304dc118313a3d7f76e805891f11b156d2a2eb07c16794a1d2325014e952e146344cbbf0f","ssdeep":"","tlshash":"0af0dcb30134a81982829620eadce93ee243c6058658aca6732800b5f1d825ac0dfafc","size":470,"data":"","first_seen":"2026-02-02T23:27:32.285716Z","last_seen":"2026-02-17T17:25:39.065257Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4162a48bbd8905706671176ff124286e","sha1":"fbb7bfb5d345ac4f2a75c47e55e53a886efa5254","sha256":"e5427006119399d6a70928fe7eef9e417f6b813880cbb5fdbba7459cf5824d7a","sha512":"e1e33e56ad565d0e8baccae4c9be558e9979871cf47bee19c295a3a30cf6ceba5eab15a6ab3c86f555807ccff8a0c0614d8eac5fbbce8be6bb2126ffeb4f22c2","ssdeep":"","tlshash":"d45141a2605ca01b4513d5d0f8a23eeef4de0058c77169d07e2c29efeaeacb7049716d","size":3011,"data":"","first_seen":"2026-02-02T21:45:19.706501Z","last_seen":"2026-02-17T18:56:58.991697Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"058598ce909fc01e1fc57b849fdf6576","sha1":"95c616e6208f005330ae5a314ec584728032433d","sha256":"d6a0952f10542ed6de9679f340d1fcb92efae6d63348da7d0f1a7fbad06e5f20","sha512":"5fa73ac5a3d6ed9f78e85eb2bd1c36c0a0c86557e2e5bcd58bbe42e86c41e68293773af7416b1f2d615bdb1446f6a0823ff340342554827290cd81d9349166cf","ssdeep":"","tlshash":"50f0dcb30138a81982829620e6d8e93ee253d6044668aca6732800b5f1d825ac0dfafc","size":470,"data":"","first_seen":"2026-02-02T23:27:32.28143Z","last_seen":"2026-02-17T20:25:27.215736Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/shape-1.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-1.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 1166\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 49, 8-bit colormap, non-interlaced","md5":"3083080a6061f2145dd6034a07f3b466","sha1":"22330aabb755df270ae0abd601bba8ec9546ac4a","sha256":"cedd61e88f5aee5bd98568302612740a234ef7f9039ed5d52f749fdae7b4d8a4","sha512":"6283e9c9df859df0d4e7d4b64530be8c37595649c4c3a5ec14f508c7cb67649786642dbf73cb625d930128a934953015b1b5fc6ff0a79f33d0f9bc523a5e30d1","ssdeep":"","tlshash":"4621938ee55ccce4de10017189a31d950511b56c0c034100fa3b31beecdf08c86d0b6b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.182627Z","times_seen":795,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":712,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/images/197375.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/images/197375.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 22668\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b4a241ab7581cec5290118ceddb37bd1","sha1":"0b9925bc2676310d006f67cc2b856f158311569b","sha256":"e74d72b279797f0486c4659a646354c787a55f7c3f062f7ca91d6fc35e097f95","sha512":"1ad0de7fdda06be768174805ab7adc1f1997ef6e84dd0d8f555182036f9b652080fe5e1b3f39539adbae5ba884a2bafbf6827ecb08808a1ed01bdf770daff818","ssdeep":"384:u8qi0vYPlnzH1/XtHktr+wIWdTKEmYYwhZNiWqMP7sriGbV9knwxRMxCxGIT:uo0vgxXtEtr+Vem4PVkuevkIRlPT","tlshash":"1ca2d102e90501c4813ff887a252b6dcd91ffc0d0fe7138aa3b94a6eaa5715fc45d239","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.158714Z","times_seen":919,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":965,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/fonts/remixicondf6ddf6d.woff2?t=1590207869815","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/fonts/remixicondf6ddf6d.woff2?t=1590207869815 HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/temp/custom/assets/css/remixicon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 125268\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":125268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 125268, version 1.0","md5":"9915fef980fa539085da55b84dfde760","sha1":"4d375abf43ed18aa54264c1b59714b0a59c593a4","sha256":"e61f0d10c8cac8cd0ecb36790d6cce883380c0b185ff3c9bf849ed336ba8285c","sha512":"1e4c9a5e0f5150fe33870544c7d70a73724096e60ee10e0ade4def46f31647664afe361292c7ffb39a2edda98cab06bab206f64feb7f610ab137d17fc789a3b1","ssdeep":"3072:5vCveG1NooSPyIFS5WDTVKAQI+UHmfGsrKwfGXoiEw:tq5eTFa47QIVHmusrKWGoix","tlshash":"bcc312b6e11a945cfc80e9a278dc932d4d60145e4f80b7c7ce1912ac433ecdb4bec5a9","first_seen":"2023-04-12T01:04:15Z","last_seen":"2026-06-08T16:32:30.170544Z","times_seen":3183,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":65,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:14:49 GMT\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9c51d4ed0528132b3a6be429dca636b5","sha1":"18cc681e66f5b6696a4ff89774e53aef2a51af00","sha256":"45a8505a86014b27b96db52f81bf4dbced7a8eb9b419d28e89bcfccb334b49b2","sha512":"3fa61799ef336da5f4c9a0a0fcf7d14fdb09e2e18cbc1488eae44a06b61beca3831c9eadd77b22a16a84e8041074d74d51429e23a1a6e8ce9b56860ed682e800","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMac8:4hHdPgKQcXr3lVwa3RzJZ","tlshash":"15c19cd1087be114ab831cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T11:27:36.868673Z","last_seen":"2026-06-08T19:18:24.238053Z","times_seen":9017,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/hero/hero-shape-5.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-5.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 1204\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 36, 8-bit colormap, non-interlaced","md5":"15cdeabd4f3cd0386e7557ab0c2c2fbd","sha1":"b85c817311204185520d819bfba5b2d68aaae19f","sha256":"817769cfe84fed4edce7451771448f921384e09f73364ea105924ca25a01c305","sha512":"86561281d81b263b73a1f94295f6e37380d074e05bd46cdb6bc7bbb907c09a45d52251e30d42dc64ddda2b4ea0955c0a0c155a803bfc6b18726997e5eeb825de","ssdeep":"","tlshash":"1421ba897809bf1ac6df763d4640b878cd4d78149f00c6060fc55a6c0e96bdd37d4516","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.182113Z","times_seen":783,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":331,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/blog/blog-2.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/blog/blog-2.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 172759\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172759,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 565x400, components 3","md5":"6e8d6d81af41649e282d864bbd6110cc","sha1":"f2cf79b706b7a7ad5c4b3a1eb0188ae4ee8f0845","sha256":"db0b6f3926112907cc9316670c759eb24793d3da4271507cac4198c3b38fb8d5","sha512":"177e11ead66cb9967f35c2eae459de97b7199f046ef62313000a99ad3b5fe598f49fb3a43823e55ba003bb648cb84378e89b8807b354d15e706afe743c899d1a","ssdeep":"3072:ZgbtQno7ljRcK0uK+CevaBTHy0y6ayjQs8wlX+wfEgOqmLLsERVoh0l0B5Y:Z6yo7ljli8ag6dBX+wfz4LwEEh0yB5Y","tlshash":"adf3123c07c34500179d25a32db31792639c9111e94ad8af52d7f6a29ecebdd83648be","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.174949Z","times_seen":773,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":584,"dns":0,"connect":0,"send":0,"wait":100,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-3-linkify-DSxu0C2V.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/vue-3-linkify-DSxu0C2V.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-ff39\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PiaKR1TKbuWWAqJUVEVJhyJwXIy3gR3DRhk2qiKxAB2Bo8LNDwU2nLTAh12uWw4t21%2B7VEQkgM%2BSJm35FvPw7ODZWIgTdb38mVWG0GRevcOY72bZlQ44Wnxwz0So3Ougd2Pgcg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c4ce0f35a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=726\u0026min_rtt=409\u0026rtt_var=95\u0026sent=324\u0026recv=103\u0026lost=0\u0026retrans=0\u0026sent_bytes=394972\u0026recv_bytes=2735\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3807\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65337,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21053)","md5":"1c840191d67e4382fe96ec2a00c2880e","sha1":"466d71e6207ece2939f6357d4b01ea30edb9e4a8","sha256":"adfc1ef77350a8ba76d1618a155ac6802e6d41804191fa9a932b88a81d0f6c7d","sha512":"ab39f6645b4919f2cf30911eab590f87c553318ff3cbf41dc0a9bc6ea92ceb0aa694948623ed896140ef23a4f0e768627b95708361b9ee32e852c7d8785c5667","ssdeep":"768:a27KR9FY7HCua/sF+sTnlO+zS06wjJTk7EIh8H9Oi6Sg9b4fTz1ETEGl2:PKR3CCua6Ts+zSAjJTmqHwiqc","tlshash":"2d532ad8f6c2e079475310238caf1304507c99a4fe85c42db9b8e4e734a995b71bfab8","first_seen":"2025-11-11T11:56:06.753135Z","last_seen":"2026-06-08T00:29:29.269706Z","times_seen":802,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/why-choose-us/wh-img-4.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-4.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 76566\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x330, components 3","md5":"ad20b9108d7c8c4ed34ba2566f113085","sha1":"3f90f5b5d8148b0c0e9f1713aeb2cade62fa632a","sha256":"6bdfde425c88941e7ab7768dcf616bcf59bc90d1177dcbcf11a2edb3d1052e38","sha512":"addd313edb714f7021ff17b80b0c37436eb422d51de667d0e329c7cd43a7dbd4ba88ebea97d91e87a57a87effda3e04e942ed635aa2373e847184f8f9f1cafdf","ssdeep":"1536:IMZBuqtQoqyjU8PlyECB88eU5jCtEL80nfAICK:ph39yt8S5AELXYIn","tlshash":"f47302ad9a036e06efb0afa1a55727fd95cf7b9c408374238181f63177548e018b72ad","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.192263Z","times_seen":800,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":807,"dns":0,"connect":0,"send":0,"wait":66,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/flag/canada.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/canada.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 801\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"43508a151ab884d973520b83487b4ccb","sha1":"5379f54f4468a64d2c0c9512b2df7a7936ec043a","sha256":"579aea648f78215dac32b2c68101a5cd62b03d868d92a63c4b70545f1bd1aa78","sha512":"37cd272abd993d706f9b059a0dfc31cb3d1c49cf3619c370436318267ff91f717c8eb61f9a4535ce4e4218aec909f85fd95fc41741c76875c70f6166e4c4cf70","ssdeep":"","tlshash":"5901c58e730880cced46589283badd81607a15f014babcb13201052dd152bff8fccaab","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.153715Z","times_seen":793,"resource_available":false,"data":null}},"time_used":1017,"timings":{"blocked":951,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/jquery.countdown.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.countdown.min.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators","md5":"76a923d3d69255c45cd24bf9b100244f","sha1":"eb3c96f9901692f1a03500ea632963a16afdb985","sha256":"8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5","sha512":"b97bed03f0e8868df19d9e2437158b89f06a46827af8876f616c8f42786d145105964e8518d8bad9eece23cd9c7a4767f39861488c5410ab42ffc7e20cde44a4","ssdeep":"96:GBXpuplQHIwbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qf:rQHnUpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"b9b1a5ceb3b213d508e553a201ae1116a27bf15be4d6001cb5fceac87a75c9d606fd78","first_seen":"2023-03-07T01:28:01Z","last_seen":"2026-06-08T19:38:41.274812Z","times_seen":8873,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 10:04:45 GMT\r\nexpires: Tue, 09 Feb 2027 10:04:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407403\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-06-08T19:00:05.583987Z","times_seen":6417,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/storage/app/public/photos/psrFUnRYBiRlfNKFsxZU88ZaefxlLJ1ojlKv31tC.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /storage/app/public/photos/psrFUnRYBiRlfNKFsxZU88ZaefxlLJ1ojlKv31tC.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 29977\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Sun, 12 Oct 2025 10:51:44 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1078 x 266, 8-bit/color RGBA, non-interlaced","md5":"70fb6504993d692b563c3f8177ea8f78","sha1":"9790ed0790431200f90dc306b2e9ecd762b65474","sha256":"a5ed1080af1015223d4aab19159e6e54cf4e302323c25fbd7219e2d4ec592923","sha512":"94c3933c55615305fcf88ca2f0ef0f247254ac0c07c05dd262aa89657c86dfa4e6b6cf044995678516fd291bbf71c7a48d2d4f997b55f64e30ebe4f0769896bf","ssdeep":"768:oeszOJkAX+9zRP0TU8NtlbYAjbxf2miiwoFwpQkC:oe6OJM4U8nl7jbxek5FwphC","tlshash":"4ad2e215bd630e840c83d30610263659c82cde993354cdf77886d9bb89339ea98f5beb","first_seen":"2026-02-13T05:14:28.493517Z","last_seen":"2026-02-14T03:15:15.295894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":69,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/hero/hero-img-3.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-img-3.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 102249\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102249,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x600, components 3","md5":"32acfb8082f7ff4363ce4b51eea98d2b","sha1":"26959509e5121feeb3adb0ba06acce1843f70c86","sha256":"3f98d875cae7c7f85488ecbb017113e566bd8e81dc56d0bb477f67d38c551a2b","sha512":"1cfdd9ff30e5d8e7f16bcca9d872ef8623d549cb5361b5f2dddcf603eed302519f1bcf7bbf3c966a9d07651a9ccaee5ab6cff3f22945747977cb33fad5bdb30c","ssdeep":"3072:NsteC/gX9dIIfEgyGFXZ/BzpnaAZN40S9MhCnsE4Y:2eC/RoEgyGhxBznN8w6HB","tlshash":"60a31238a7c292286cbc0d56b5f195d3978ba62fe77f931e987cc947cf42100e486a70","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.163013Z","times_seen":782,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":72,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/why-choose-us/wh-img-5.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-5.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 67987\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":67987,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x330, components 3","md5":"083d0f173a285cfc0eb53e99897bc5f5","sha1":"d469132a26088e0fcf6145047ab66d62f563dbc9","sha256":"d064673fb05387d838701073bb4a7647c713d341338fa3ee20c42d27b12e09d1","sha512":"77331315e43d22ca8cd1d7f718c1e5c402055bac9b9c987626f8008c4dd61a23dfdf4457e05983ff3618f9dc06297a65309ede467ea5e834c61170671b65e382","ssdeep":"1536:98qroSdUhTMeWoDtKAE5Sfe9WDOimovxvIlzSB/NbiY:9Vrn+hTfWoDtKTs29WDOYv9hN+Y","tlshash":"e663020f56007ceb8aaad24280f545dcf7551ba665b312b4d247beed412973bdf24c0b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.164477Z","times_seen":787,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":824,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/testimonials/client-5.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-5.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21569\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"f75371f848157b639ca47a4d97fe61b1","sha1":"43d0633b744d3f35897d67179b22ce4591a3cb90","sha256":"00b5e239f9e62e1be8f00408d8551a87a14542e0cf1d46b5e405ef000135b455","sha512":"89996ad5a134bce17b5b8e1f448621cd4404e11eba12722ba3b875f26a67bdc7a909493dc77ff0549cbf4c1641b2a08eff5a36d66ae4d6a031e48a768adc1610","ssdeep":"384:LSRA9lhtmhdQZM5eOWgwNKFaRLQlvXxe0QzkcQzqjt/YXW0ngd:G9eOGNua5Q9XxeTkfWZYXW0ngd","tlshash":"27a2e190d9968388e9b9f534761433f37a800fb216979622afd1a0f9d71815f047cf7a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.185601Z","times_seen":804,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":659,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/odometer.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/odometer.min.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10264,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with CRLF line terminators","md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-06-08T16:32:30.171545Z","times_seen":2237,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prod-api.chatway.app/api/v2/pixel/widgets?user_identifier=JKukFvsLC7QS\u0026include[]=agents\u0026include[]=faqs\u0026ip=91.90.42.154\u0026is_mobile=0\u0026loc=NO\u0026channel=\u0026domain=goldentrustcredit.com","fqdn":"prod-api.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /api/v2/pixel/widgets?user_identifier=JKukFvsLC7QS\u0026include[]=agents\u0026include[]=faqs\u0026ip=91.90.42.154\u0026is_mobile=0\u0026loc=NO\u0026channel=\u0026domain=goldentrustcredit.com HTTP/1.1\r\nHost: prod-api.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:48 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Mf7E6hqnWSITcef7c%2BXgkhndR3GRDsaLyqlcIwOsLeUyKw9yeRnRrOfDh492ey56moo3buEkb2JrMslK3wUCu708aD5e0Nu2I9mrl77nzb9QBHO0PSTyyGXfS5bBu45prYxvYJ%2B4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cd965bcbf8735a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=912\u0026min_rtt=443\u0026rtt_var=821\u0026sent=9\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3980\u0026recv_bytes=1619\u0026delivery_rate=7133004\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=6c4c749a302a3751\u0026ts=824\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18329,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9154f9b88ae1cd1ec53131770408e339","sha1":"1db846d7523e33ef39f272b692312c5c88ee1c72","sha256":"f273e42a58de95495b76ab5bcbee6a6bff4e736356e8e4ba058a0b169c3b0b25","sha512":"ea883576b4d52ab8373e191ed25a86e6b8c0a7e7d5f993326c7151aeb6f80d685eabf5df6553bc1908d329c2074a3d45dfccaf3ebda591813abd6be8c982503c","ssdeep":"384:/srniwgANQ0XVGKsOey1y6l3SEBvCF2nVvimxl+NA:/qniwgANQ0liO6Yvv/qA","tlshash":"2f82878884a41cff8f67175b804e7d02311dababd9c46e654dece63c42ec499236365f","first_seen":"2026-02-13T05:14:28.542651Z","last_seen":"2026-02-14T03:15:15.298895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/library-chunks-1-CgheCQw1.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/library-chunks-1-CgheCQw1.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-9d5a\"\r\nage: 72835\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FeC4YZGT%2FgQKrd%2FJnqocVCblEjNk4X7A95Aff6oOYH4Q%2F6QE%2FcZT0QJjO1SOnO%2BWtRCRnXUaeSeSnq2FAOdlIM6vJuBNsyLQ9Ql7UKIq8wQUa6A3x8itNdYoKD5gp8t2loLGfg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c4ce0a35a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=801\u0026min_rtt=409\u0026rtt_var=221\u0026sent=344\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=418669\u0026recv_bytes=2735\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3808\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40282,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (17714)","md5":"20efd6105a09954b25eacf0602ceab46","sha1":"ed4fa8829a2d86998581c8c71fa43dfc7f3c9898","sha256":"b772c17335b072063785e6848afcb5162c6ce71134335236c9d1e9a4bf66143f","sha512":"b53cd0a7c9139ef47e4c79a4616070299f7efa62e60f449dc77d93421802a0d7335085271fb7404c397d9403f4600501bc5ea7ca6159973aa4f279c2e1af632c","ssdeep":"768:A1d3dEqzRMvkZXze2WNGoVaiLE4+oO/NeL2pi4cvpgOUz5ldjErp1wIIsI0uMomL:IjY9JFq2iQ7Vk7aF","tlshash":"bb0318d976d1b07203ea55f8406b0902f32a9a19744d84e4b16cdcef3db600a96bbf7d","first_seen":"2025-12-16T07:38:47.984078Z","last_seen":"2026-02-19T03:48:10.127152Z","times_seen":175,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/flag/usa.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/usa.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 1123\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"71f2b9f8290de4e2ef115bbd7e88e606","sha1":"772dd8595caf015645f933ee938df8602afce809","sha256":"2c842607ca094c8e0e7e92951eb9369860ad967fc8a52e664098efb53b78665c","sha512":"8f7621171112c3302a8b6f433b176092b0f45d2f6108875619321acfa6dbc5485fd8f676e3adbc65455410dec1b60afb2ac83699860ca4059a0a451a86f8d805","ssdeep":"","tlshash":"6d21b96ef7e018c1c8db60074ef4357258257c9e8fe0f874b562940fd8b51092a46733","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.152985Z","times_seen":795,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":838,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/main.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/main.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5498,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3752)","md5":"c36261f13ab72adcc6d121b42ecf7527","sha1":"c3797740ed1bcf47c268153320a1d04cec5d014c","sha256":"087aa918d5cd7d8340a2facc168e57245932b0a5f668f6249a45727b7868da1c","sha512":"a61e110a84815d8b4cb3bd2158daad9f9e12a20c95244c7d099b8f714efa5aa4ce48b72d699e4a08e6fdb7712bab17c7521586f52e18d683585df2f4c530c729","ssdeep":"48:YcKnGmRenN89Di9ooisW9ooiEM//PPBlLMeBlLqPBebfH0Yujmwm8Q+03iMbq1x5:YGOZ7W3vTLMyLqk9+0DeLfa+TBdD/","tlshash":"56b1864e712030ab94ef331598df6a44bf3b1910d700e999e2b641797d6890fbcb3a6d","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.166484Z","times_seen":852,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-chunks-B2UqFvij.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/vue-chunks-B2UqFvij.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-12a35\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SYRo4YjMW8wacgL7wwlJRssEcXb7flO5fl8xFA3JuuHWnGe7NpW%2FSOqWNNltAbqBtSspahYCNB2jruiEtpi1%2BKFslQxsEjuwJA4OKpIEDSok5xGdsa%2FbP5Y6P1NdQYq79YSyVQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c4ce0635a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=879\u0026min_rtt=409\u0026rtt_var=326\u0026sent=384\u0026recv=132\u0026lost=0\u0026retrans=0\u0026sent_bytes=463637\u0026recv_bytes=2735\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3820\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76341,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9a4d674de68df36c036c2f6f3d40fe47","sha1":"f8426334d1a4b99f57f086624bd8277853b28213","sha256":"6e3e5ec6aca09e6c13ee05980f115cc372a026b9d0204ffbb98e6eae203e2034","sha512":"961b8144d8fee971583794da35600149bbe47a7cbec49ace9e9fe822b2ab7edf99a6ba0174d70d805d31200597a79e440e75253f3b1d50d0d44a8cda38de3350","ssdeep":"768:380GJQN2EemJhEovnDbqTbWLBrsfcwn13wunX3nO0j1tqD9M5pEKtKFBrwik9PK2:dWp/n2DXkhso00Wj6sCFQCbARc5","tlshash":"537317e83182b57253fa09e6007b0406f3292d56384ed8d8f1adad9f3d7640591bbfad","first_seen":"2025-12-16T07:38:47.970776Z","last_seen":"2026-02-19T03:48:10.135141Z","times_seen":175,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:14:49 GMT\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"99732590118df209cfff721d0d4bbb19","sha1":"6ae6323f3fcd8085a9bb38292b65972b92f1881a","sha256":"7d306f38fb5378f3a004776b9c2436cb31e864dfe47674b4f8334673ae5a2bb9","sha512":"c84f3706d491bf8ee62c595caba3533a9078dd5e474ea291b8d683d50eed716f19379ceb6007ac78ad50a53f64faa65f776310029514b363a4f9126c5aa3f1a5","ssdeep":"","tlshash":"ae419bd1087be114ab831cc123ce7d37ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T06:17:11.832934Z","last_seen":"2026-06-08T19:08:57.779267Z","times_seen":4103,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files-cdn.chatway.app/3GlQG7wrPoiITbqLrrjfoiPQ6LalBg5vGdXXxXMEqwP2yCqu_88x88.png","fqdn":"files-cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /3GlQG7wrPoiITbqLrrjfoiPQ6LalBg5vGdXXxXMEqwP2yCqu_88x88.png HTTP/1.1\r\nHost: files-cdn.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 3809\r\ncf-ray: 9cd965c5afd035a6-OSL\r\nlast-modified: Wed, 15 Oct 2025 09:18:04 GMT\r\netag: \"0a6397f24b4f4502ba591be638cb2405\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 30a448a0dbd4a52ea118d2e64f0535c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: IP2sbTg62USKqvaLeB2yydW2mwjpCTAqaMGsQ5YJZeZMY97utKozrg==\r\nage: 84173\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xeDBoO0hZTygqE7B4c%2FfmFHnA19g7oUeGH%2FCU%2FoOtwZPeWhzxfu8ZuuCmVkGqh1DeMvq9bCEfQl3gDFLluAjy5OyrBf3kOJvQ%2F2N2UE8wRmn19NarMIQL6K8B1tAiaVLDtsv0lS0Ig%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=666\u0026min_rtt=409\u0026rtt_var=187\u0026sent=410\u0026recv=147\u0026lost=0\u0026retrans=0\u0026sent_bytes=495535\u0026recv_bytes=4166\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3997\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"0a6397f24b4f4502ba591be638cb2405","sha1":"3d5a5bccebf2b9cef306d9d1a9c9e57196f0f55b","sha256":"a394641d6c6886afffa11f0c932383558b4f2da7c24488300c3994e2629ab0b8","sha512":"cef66f91c41ac83a4f796ed4b27e8c92bca6b8c85be7206d18214539b04aeca2ece4064b8af584b26f906564107f3b881616763e3eb50957b8bbfb5a05d9266e","ssdeep":"","tlshash":"4e717cfc983db098dfd223c9313813afb969994a12824aa92b92f52dc01d73940161cf","first_seen":"2026-02-13T05:14:28.503559Z","last_seen":"2026-02-14T03:15:15.302706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/shape-2.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-2.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 519\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 50, 8-bit colormap, non-interlaced","md5":"0ebb76b1d4f0c812b15c580a9d4f31c6","sha1":"39976fc87dff1ac0b6f0ba6a75324a318e0aefbf","sha256":"5c7e35d5c7a4a76e878b644d412a529023fa9719915f1849b8cab2dda9ad56ae","sha512":"402cd9d6fc95b1ef4473fe11e14037b972cd32b01b7343501a722fc90fca919c8132b4de15b5b2b34f31cfcf4d53c90ce9cfbadfa3d8377a93734cd37b4aa5aa","ssdeep":"","tlshash":"86f00e82ebbced78a51286aa47314821823a73082011304aa833b0389af978ac5d39c3","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.184584Z","times_seen":803,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":774,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/flag/newzland.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/newzland.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 1040\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"9bbf5eedca3d147d0cf857312515c461","sha1":"1ba9ff83d4174b87d2703262df63834f4bb3c197","sha256":"0587301dd2fdd00f161a1a6b8d420bff27b5fc47b1f74b2ee07cdff24141347a","sha512":"28e65e6d2ba05247b5d9942b140e16429677aea34a2cbd025503b43009d504f051446ac1eb628e76f0e797e07dfb528b125fdb377cb75d2c961c568ab33877ec","ssdeep":"","tlshash":"7511b50e70845588c225030603d4503a0e339dba7db07b4ebc0f6c1dd640f5619e1f0b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.163506Z","times_seen":794,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":927,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/blog/blog-1.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/blog/blog-1.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 146739\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146739,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 565x400, components 3","md5":"1a204446aae01ddb18add26e1aef1cf0","sha1":"74c5be7f2130aeb6abd5c4771f1d3b688ca4e352","sha256":"87fec55557cfa10c01ec8981f5ddac8ee9be98836b5dc05c32566107ee43c5e1","sha512":"000dee354a645e4b171a438800cb0ab5b0ffcebf04c3af64c1eb4fbc6f370a038ad9b772ae4563bf4eb3044c1f9614da8af00a99c214ebab8374f133e88e011f","ssdeep":"3072:KalLJQKWDAWNMjUb16xrrs8BkiKhpFonssAfYjCOcUKBnefd:HQRDAWNMk1aOyssAgCOcPad","tlshash":"31e31293a91747b5e55b0dbb00caef1c121a4bc676f811c9367c97a206b939a74ce2cc","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.155764Z","times_seen":775,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":656,"dns":0,"connect":0,"send":0,"wait":75,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:05:46 GMT\r\nexpires: Sat, 13 Feb 2027 07:05:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 72542\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-08T19:51:45.419634Z","times_seen":13402,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c3ac45120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-08T19:29:46.708024Z","times_seen":337343,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":34,"dns":4,"connect":1,"send":0,"wait":18,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/partner/partner-5.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-5.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 2656\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"61c77cb7361420123fab4e5ff696e405","sha1":"613d84c29ddcc17fe9e28a4b5686b4085cd3dd37","sha256":"a3f892da036b38fee09c448d981a4cddaabff59cbd9b696ef00c93251823c596","sha512":"aaf68e8753df896f7fa70033e5ef62c4fdb1c7f71c9eb18ebfef2d489a01af0b994146dfec11dadeb3d0f600abe75412f20f677be44dbf3a308f9616d67353d1","ssdeep":"","tlshash":"ef514d452da30859e1f3a25d3d28203b9df6282e4093ce61b1973c667b505a3f0ab556","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.159222Z","times_seen":761,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":1022,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.740Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:08:19 GMT\r\nexpires: Sat, 13 Feb 2027 07:08:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 72388\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-08T19:51:45.4145Z","times_seen":65097,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/cdn-cgi/rum?","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1091\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1091,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"https://goldentrustcredit.com/\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":0,\"startTime\":1771038888974,\"versions\":{\"fl\":\"2025.9.1\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"a19988ff-12e4-497b-bbac-d8789500fcc8\",\"location\":\"https://widget.chatway.app/\",\"serverTimings\":[],\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":638,\"domContentLoadedEventStart\":820,\"domContentLoadedEventEnd\":823,\"domComplete\":824,\"loadEventStart\":824,\"loadEventEnd\":824,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"secureConnectionStart\":0,\"requestStart\":0,\"responseStart\":0,\"responseEnd\":401,\"transferSize\":0,\"encodedBodySize\":0,\"decodedBodySize\":0,\"name\":\"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":824},\"siteToken\":\"e86fbcc7788e4346bfbb6eec76997f24\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\naccess-control-allow-origin: https://widget.chatway.app\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9cd965c5c80f35a6-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:51.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 00:02:44 GMT\r\nexpires: Thu, 11 Feb 2027 00:02:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270727\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-08T19:35:44.948537Z","times_seen":353415,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/jquery.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.min.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":89503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-08T17:27:55.924477Z","times_seen":19632,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:57.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://goldentrustcredit.com/\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://goldentrustcredit.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sat, 14 Feb 2026 03:14:57 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/dark-theme.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/dark-theme.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8642,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8642), with no line terminators","md5":"2db98f202b2ea99a2c0e546c85d9899c","sha1":"71cb4231c618f94ef4fe9d1882f8a4e730f016f5","sha256":"04849ae2f5fa626f72455997b529e5612c6413077047c10486073461417b9a8a","sha512":"48a3e8bedc02c5523783f299230e749b7a6e080d8d5355f6b40b6e4f8ca9b477b41a8521014219d3cb50f88959c0e73910f5930822e7c9dfcf1a6d27d7eac207","ssdeep":"192:0KBCZ6B2nSPehnzhOe9mVxwVdU19HSkiwo7Ux+hvGb3lijIj3Yp2y3yZp1:0nSeyeY9khoEjIj3Yp932p1","tlshash":"9d02be20ed722e3a21138518f488bf981f7e31a0d6067b7df22b15e4de5a1de63b1b45","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.168042Z","times_seen":807,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/shape-3.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-3.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 1124\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1124,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 55, 8-bit colormap, non-interlaced","md5":"8cee0389372162c0a2352b2613c13570","sha1":"57a2a9b090d7b09bb3dee3290e1007ec71b4e663","sha256":"f731de19b6012dff0f19cfbda37e62c01c40e8e29280203a92d4a2f0643229a4","sha512":"dc4891e78970e3e68a4cbdbb1bef3028f16f8b8796a352042c49805dda59a9cb8247ccaa8c018daebfbecd8367fad0c62adebd077b209b21f6f21aa6f6e90fce","ssdeep":"","tlshash":"d421128a5f39de3950ecc6688314c513499cb1bfe38a309baa424685f67040d00d6b83","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.158145Z","times_seen":813,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":832,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.chatway.app/sdk.css","fqdn":"cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /sdk.css HTTP/1.1\r\nHost: cdn.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:47 GMT\r\ncontent-type: text/css\r\ncf-ray: 9cd965b9188935a6-OSL\r\nlast-modified: Wed, 04 Feb 2026 04:55:05 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"655d9d4a9b3eb38a7f6bb59a67ed142b\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 60Q64LHYR5PfI4heQPIsBlpql08e8vXXUXGONrcjPcgDH1YQCeiIbw==\r\nage: 1098\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iFp6DbkSW4o%2BBTIs2dV04Yz7nQFyH3YItCFA3VCKY1M9gzJ7NrNeAtC2SG00%2FZtmxQ9F04F%2B0hUg79vPw2eANTgEaBME7HBWEzRaQd4u2FQlH8EiJ%2FDP6Xg0dBLlXXFSQw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=779\u0026min_rtt=454\u0026rtt_var=449\u0026sent=24\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=24863\u0026recv_bytes=1304\u0026delivery_rate=17967883\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=1949\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18273,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18272)","md5":"655d9d4a9b3eb38a7f6bb59a67ed142b","sha1":"8b3aefa722cc97e4adc24ea90debd4bc58f75708","sha256":"2e39a9bcf477372445d1b46dbb47de5a0fc9e008dec79cccb24b48cb8b06bc69","sha512":"3abf69f0d7334c368835af5b42db669384f42781584119419be5034094b9c3344582f3790906f4bcdbfb118e971eaa63f4ff2f48a9a1fae35571ee0ae3b5f12d","ssdeep":"384:ZIORDFMAKpnqvrkbPlQ++9iGiK0fgR3C4caZVCuQxeEEdHgpvhQWJo0m5cgrxHQh:ZIOWgb3Q7NAEe6cs9","tlshash":"5482f072db822038e6a3828df5c6ee6d2a38d45bd3120ebdb550f139c1da1e73761e45","first_seen":"2026-02-05T00:11:53.849642Z","last_seen":"2026-02-15T18:07:23.172601Z","times_seen":31,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod-api.chatway.app/api/v2/pixel/widgets?user_identifier=JKukFvsLC7QS\u0026include[]=agents\u0026include[]=faqs\u0026ip=91.90.42.154\u0026is_mobile=0\u0026loc=NO\u0026channel=\u0026domain=goldentrustcredit.com","fqdn":"prod-api.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"OPTIONS /api/v2/pixel/widgets?user_identifier=JKukFvsLC7QS\u0026include[]=agents\u0026include[]=faqs\u0026ip=91.90.42.154\u0026is_mobile=0\u0026loc=NO\u0026channel=\u0026domain=goldentrustcredit.com HTTP/1.1\r\nHost: prod-api.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://goldentrustcredit.com/\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 03:14:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9cd965ba1aaa35a6-OSL\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZTYEfDXLEAn3TN8K6M0dTvSAWpMmjRw9P9hH5DWmKTWtrFSs%2FOC9A%2FZMigtq73Lh7F7aHMi1FXffSqwqLaqoNRvYS4%2BVneAVGqs8cnI1TGS9uhkTCRMNXAX%2F7HBsMJhXI6kCnoME\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=652\u0026min_rtt=443\u0026rtt_var=401\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3273\u0026recv_bytes=1409\u0026delivery_rate=7133004\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=6c4c749a302a3751\u0026ts=482\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":52,"dns":2,"connect":1,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:29 GMT","end":"Mon, 20 Apr 2026 08:39:28 GMT"},"fingerprint":{"sha1":"2E:B6:3D:17:52:5B:29:DC:03:5A:0F:A9:EC:0F:57:33:2B:54:50:E9","sha256":"05:C3:70:5C:FF:EB:B6:B2:B9:5A:B1:EC:19:0E:52:DF:7D:82:EC:E3:1F:F3:BD:64:AD:96:70:3B:A3:E2:E5:FD"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81657,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2082)","md5":"a733616613d3b0a16fbb5ba296f7b892","sha1":"6aad9dce4b74bcdfdde7d755da10dd6e35d25a9f","sha256":"d33deead5c9e346ac336384de61960ff0b02c11f50f9256a39d787913f9bc25f","sha512":"fb04e16f46820922b13b4dc638ac14570d7e53d4c2c4dc6b22da5495ff0271183faf735144de8e19cd5266c1586c3a9d77312e5de8971401be21d0cd441212fb","ssdeep":"1536:X/v4TufUB2+e9JCTUHdBjHvK4e7yrk3N4eOdDNezivwNWnq:Xf+e9J3jHvK4UEgziPq","tlshash":"c483b7ccb6a671658263f5b5413f000eb23f59a9f8084dacb288d8e1adf4949417bf7d","first_seen":"2026-02-14T03:15:15.314588Z","last_seen":"2026-02-14T03:55:06.478712Z","times_seen":4,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":213,"dns":4,"connect":15,"send":0,"wait":42,"receive":0,"ssl":346},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/flag/uk.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/uk.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 2254\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"1bd9dc32aa8ede4f19cd64e835d80597","sha1":"2d0586473fae3a4e3ada5c9b22dac6774c62efff","sha256":"1a81d14aa39b355e2fdb76619ae06df4de572f55904cd63b584546af42fd025c","sha512":"034f69c608575c364eec64ff64c2440c2125526ede4dfeec140eaaddc9253b04c03681cfb62435b1bf4cd027a9886305913fca97c54d85872269a59f087aed6f","ssdeep":"","tlshash":"d14129f1310cdb68c89686ef50e010c1a9e6aa4709080357aa3fa492a638872905b99e","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.183587Z","times_seen":795,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":895,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/partner/partner-2.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-2.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 4424\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"bdc7140f040e5fe80b9cee96ca8e77f8","sha1":"92c693ed81445c35abbf7bcafd15ebdd18ddf4a1","sha256":"e782d18eb3e52bd22b5b7e81e9ef38cb890aee35f3826efe90e84db4977fe76f","sha512":"fc0a5c14d3d554fb3661d46aeaa3b5d73e25ba4890dfc5d0a19eb4554fa502d3b55da657f972d206bfeb729e278ccd6aebf8d5ec4471f2b4e0cd986e4be0f682","ssdeep":"96:58UgvPikQZz+WcvcsA6w2T1ZmfVdhgoLB3JVDH0aecj69mc:1oPkz+WsAAPmfb7B3JF0aecjQmc","tlshash":"2b917e6b23147b7d9dd972a48c953c2fece4bf2622ec47805c4b0235c3f951c4d62118","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.168531Z","times_seen":772,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":643,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js%401.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/popper.js%401.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nage: 11161\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\nx-served-by: cache-fra-etou8220166-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 62\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":65,"dns":1,"connect":41,"send":0,"wait":14,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/testimonials/client-1.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-1.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 29011\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":29011,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"4658267f97ddc4e728a30e1b34f3dc91","sha1":"803b36fb2ad050ade535685b5f3ac92a32a87598","sha256":"6d8b362584cdc3dfc95309e4af19147517ae92c27d28e602c212ac92913e3f0c","sha512":"883a1f2574964f274f6f0daed68f7c8f8c9194a3a0f320f56629874800146c33941d683ce5216632651af18f7937452ec937b988d2142a2a96e686f7ccb01993","ssdeep":"768:2NeLTkSwjEri/BzR+qGPiOcSni777QMa3tAofJ3:SgoZEriBGPiOmwMa3yol","tlshash":"29d2f18841e749819021c3f2107af51d678a695c6d2b031b91d93c72ccafff64f5ea78","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.196427Z","times_seen":826,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":350,"dns":0,"connect":0,"send":0,"wait":69,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:14:49 GMT\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-06-08T12:38:52.041158Z","times_seen":6526,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/why-choose-us/wh-img-6.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-6.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 180305\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":180305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x692, components 3","md5":"5c9ea178a8573030d28ffb3525b2f3b1","sha1":"9ff7af508915c2488e5188bb3824f6c492232302","sha256":"866c823886969f332ee6ad51137f1daec2480cfa6fa78cdcbb411dc37be97499","sha512":"84d5e9ae8d06a1afc0cfa27b56d1ddbb9d8fe5dfcecbcd18a46e50a8041ca8c7ef875c84389a5f86f22efe4a61983dc2be5e65cf60e0c81f071b2aab7c723899","ssdeep":"3072:OpYQ94yA0CLKJ5Z36nneMWZNy8+ERR3RpS9d0DBD5VUe77AGI5:OpYQo0JZ3iGZNj3Rp4d0dDHXS","tlshash":"d40413ca08fd6bf4a6d80c235e29fb2457a66fba57098abd91c7f466c7d5000e097d0c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.187676Z","times_seen":773,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":834,"dns":0,"connect":0,"send":0,"wait":69,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/contact-form-script.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/contact-form-script.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":895,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (895), with no line terminators","md5":"250bc40cc9bf0311ff49a31cb3fdd96f","sha1":"75b049495fd4ad8f8dba66abef363b74fa50b326","sha256":"01f88dcee3ea695865770808ba43f18d9b0a0db51696c39d69ea2a607c108e78","sha512":"7ba4df3992f99eb5cf3fc7ac3e4977218b0fe6d57912885197931701943e4a0d33d36971b70b656090d84bce351fccee973727bff9d85294c9dcc7d1c5350487","ssdeep":"","tlshash":"1811d012341429d9033b2bf9700e3602b3711a34c9bde91520b0b9cdbf78d9836a3316","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.186648Z","times_seen":959,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/library-chunks-1-CgheCQw1.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/library-chunks-1-CgheCQw1.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-CGUo5UWE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-9d5a\"\r\nage: 72835\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HczUnbFyVV7nndyoIJnDtQKBDbs%2FNjWxwUs4%2F8TQyylKk6y9dRHkvdz%2Ff4FC%2Fy4u%2FtoQlbn5i0qsP20Rdvs7VfjGU8Kz9T1hQ7b107hWwzgmNTZfgUcH9cMrHJaG2X19IfcbSg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c44d3a35a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=752\u0026min_rtt=409\u0026rtt_var=82\u0026sent=286\u0026recv=81\u0026lost=0\u0026retrans=0\u0026sent_bytes=353577\u0026recv_bytes=2279\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3743\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40282,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (17714)","md5":"20efd6105a09954b25eacf0602ceab46","sha1":"ed4fa8829a2d86998581c8c71fa43dfc7f3c9898","sha256":"b772c17335b072063785e6848afcb5162c6ce71134335236c9d1e9a4bf66143f","sha512":"b53cd0a7c9139ef47e4c79a4616070299f7efa62e60f449dc77d93421802a0d7335085271fb7404c397d9403f4600501bc5ea7ca6159973aa4f279c2e1af632c","ssdeep":"768:A1d3dEqzRMvkZXze2WNGoVaiLE4+oO/NeL2pi4cvpgOUz5ldjErp1wIIsI0uMomL:IjY9JFq2iQ7Vk7aF","tlshash":"bb0318d976d1b07203ea55f8406b0902f32a9a19744d84e4b16cdcef3db600a96bbf7d","first_seen":"2025-12-16T07:38:47.984078Z","last_seen":"2026-02-19T03:48:10.127152Z","times_seen":175,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/testimonials/client-2.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-2.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 24322\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"4492070c33a5a620c7f74f67f13ccec5","sha1":"eabfa0faaf8877499c8681aab77236dddbe948ac","sha256":"079d830b47f34df1cbfc52ad478b4ff995e0c28b20925a877c3f09f91ca8c797","sha512":"2b84b864b1bad11c6937c1fce97ec6b0c10df32cc9952a2bd5b174ab86f9fabcf09811574d1b396a682159969e68a595fd5ba625ef99beaf64e2b8bc0de4b051","ssdeep":"384:LeOMbPiVLUNSNs6C9RiTsqW/ioVwVUFtGBbzrEzKg7JIMr2hKOdCXff:XMbPiVLUNS49RUsqGiNGFUBbzKTGO2hs","tlshash":"9eb2e1572f838c8f6a3a4b3ce61e82a36911033d9523e79c2d6935c2d72b3fda45c854","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.187147Z","times_seen":812,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":367,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nage: 60880\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\nx-served-by: cache-fra-eddf8230194-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 62\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":37,"dns":1,"connect":34,"send":0,"wait":15,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/chart-img/chart-4.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-4.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 538\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 27, 8-bit colormap, non-interlaced","md5":"aa02aae884cb578bc0a2f1f9bf3f2954","sha1":"ba60f34106249ce0cc7485947434d7d70f411f64","sha256":"141b88a15608b337ef1fe9d476747cad1ce911f92d02c006699c61debfe00ac3","sha512":"caf6a311961b15e9628bb422e93b95131f2194b2f2fbe886de83c753edacd87a19fc243554cdda490889003fb2baa4693efc4ef78dcdee7b11fcad1a157eb2f8","ssdeep":"","tlshash":"67f00e580c70ac36cc969af3f762c03c4901bda5520648033f0c31cb9ee3b908981387","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.184096Z","times_seen":770,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":930,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:01:54 GMT\r\nexpires: Tue, 09 Feb 2027 20:01:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371573\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":119,"dns":0,"connect":21,"send":0,"wait":22,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:52 GMT","end":"Mon, 20 Apr 2026 08:41:51 GMT"},"fingerprint":{"sha1":"0F:50:AB:64:9B:F5:E8:E2:93:93:57:63:8F:7E:FA:1E:85:EE:4E:69","sha256":"7A:C0:51:F4:28:EF:25:D1:05:45:35:E5:93:56:AE:8C:29:AB:52:F5:47:3A:13:FD:82:70:42:30:E3:17:55:D1"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Sat, 14 Feb 2026 03:14:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-06-08T19:23:15.379225Z","times_seen":73598,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":81,"dns":5,"connect":14,"send":0,"wait":25,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/odometer.min.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/odometer.min.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3123), with no line terminators","md5":"6c6b4fd147a0f12f7702bfc0533b1d61","sha1":"ec5d35465e472d207dd16056b477ed5a643119d9","sha256":"de4852787adeccdbf98fbd828daa10e3ff7733dbecd8a94ae9f297e5f907049b","sha512":"30a2e4e97a9763cc8eb7e923a45e1c3e8b676308ab213a2d528d60ec3f974ee46cae763882ad032d37ef132bddd14a094c21d1888a5b87f4315ec2a59d02ce03","ssdeep":"","tlshash":"eb51e2154f91136863367506bac81b60befce9015123e98e731da54bcf43db9e398b0b","first_seen":"2023-04-07T13:32:55Z","last_seen":"2026-06-08T16:32:30.191183Z","times_seen":935,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":5,"connect":25,"send":0,"wait":68,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/hero/hero-shape-4.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-4.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 2828\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 41, 8-bit/color RGBA, non-interlaced","md5":"c6fa237e3615874a95f25dbe241465e4","sha1":"a8e42d5c5453d27fbca195ce866df66ad677babc","sha256":"e72300940f13f799954928f3ef73bebbe4c59f1664cd703adac82e3a99e7bfbc","sha512":"be45a8d14ffaca88309cb06e7460a61dd745be4bd1be3de782307c615c075c5521ad46968a135838f8e6d499611fa07d98064362245942fc556ac598c32ba4d3","ssdeep":"","tlshash":"fc512bb1f4d2e7fdc0ee3a018a7c205e646b32e3640637c0ae91120efbd79646649881","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.195929Z","times_seen":792,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":318,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/chart-img/chart-6.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-6.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 669\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 20, 8-bit colormap, non-interlaced","md5":"78a60559b34e8dd28b65b95903036c6b","sha1":"965f510a8283effd5154049e6db5d6569da7edd6","sha256":"6ede0ad128484c30e39ad7dbe5881844bea4360d7d0f65d8831597e0b058139a","sha512":"c3391299c37c1f097c04cc1091e8950102b486b6e1b823745ba43046f327e70071b8277950c118f641bc50b4d26ea69db9e98fa5bd424f53008a3eee55e6582d","ssdeep":"","tlshash":"f701239ab9458dad7771b09d03220f0591743b2023087a145db3d0b14adff09c222741","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.179136Z","times_seen":769,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":599,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cloudflare.com/cdn-cgi/trace","fqdn":"www.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.16.123.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 11:54:06 GMT","end":"Thu, 23 Apr 2026 12:54:03 GMT"},"fingerprint":{"sha1":"30:C4:B3:84:8D:46:70:F7:56:35:68:A6:7B:73:AB:E5:44:38:7A:F2","sha256":"6A:67:35:24:10:5C:48:54:0B:16:D0:93:22:C3:02:00:55:37:8B:3F:F5:63:05:2F:B2:EB:94:E5:1B:75:8D:94"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: www.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://goldentrustcredit.com/\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:47 GMT\r\ncontent-type: text/plain\r\nif-modified-since: off\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=s7G4jqz4hZJ2IIMpYqbks3JNQ20pemBtqiWd1deaY4U-1771038887.882988-1.0.1.1-xFqUDGht1e7fwtB3K7.h_fh7BxSRJHM1qMEFa34GuB9nSGZOWu4yciIbME.ingZ.Na25nbV5pnrtA7NqwucTxeiYhZ1HV_YMSgn9FMfE6ZfQsOWXCzXpzqoSpxbBib48; HttpOnly; Secure; Path=/; Domain=www.cloudflare.com; Expires=Sat, 14 Feb 2026 03:44:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GY5bfaaB%2BrdJ7BCTd1Ev4ShxoIgkYDsyjkfSPRp4Mi7pGg%2FSeyL7ZVpBJKhKxV%2FA7WeCsyGvoAvZXsd5qYuIQ2GZdTWmFzJ3nFErDLEqHq9n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd965b94e84b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"3dcbcccbf019c8f05fee291913dc5faa","sha1":"4e920f37b23d385efecee51f1c0973e429ff8435","sha256":"fe4f3d80d79df8233d6b178c5c1364df7153ac60dc3ab27d004add327707f7c2","sha512":"15f600d6d96df12100d47e2f509eacf2e9132a3aec75de5044385e65554de4c1cbd86d1900303b1aad3d3942b161a10375688c37ed9bbeec0ab3b284b963d8cf","ssdeep":"","tlshash":"1ed0ebcbd12c0018282cd008039b5381c7a0000b85ebb831fde24008efcc2d600ccee0","first_seen":"2026-02-14T03:15:15.327814Z","last_seen":"2026-02-14T03:15:15.327814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color= HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kosbA0E1tzbvUGA2Iwh1Gvl311eKaBhUi%2FpPCZwI8wAmI%2BY1ImXtMaVxf3%2F5JT0zbE4txEubgwhWNCDk8Mqudqn5jlAhjOXpNCRvajNa9269IlJcbA8LoZUYasFzSNctap9tBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cd965c03d9635a6-OSL\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=366,cfEdge;dur=18, cfL4;desc=\"?proto=TCP\u0026rtt=720\u0026min_rtt=409\u0026rtt_var=355\u0026sent=30\u0026recv=17\u0026lost=0\u0026retrans=0\u0026sent_bytes=29282\u0026recv_bytes=1536\u0026delivery_rate=17967883\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3449\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (503)","md5":"71cd3febec23741bf9456c4b0a9ba30a","sha1":"00dd8401a724993b6e24269acd1581a350cde5f8","sha256":"0c4eae4b3f9d86e9d1e2275212600233ec0c535566c3b5d5ae26943f8ee814ab","sha512":"23ca904a9119397a68ceb5d570ec9422362984a5c54c4ae7486a49699945e436ef50482fbe05d574dd01a7b431d9b433091c844482d671a5e519c92c3ecd7227","ssdeep":"","tlshash":"c031410534b0841992201b4579c1fd28fe96b7bb5589d890b1fb60bd8f44fda861383a","first_seen":"2026-02-14T03:15:15.331156Z","last_seen":"2026-02-14T03:15:15.331156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/flaticon.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5680), with no line terminators","md5":"09bfb87f4fc89fa772195da8afa1489f","sha1":"88ee2649f1e1b1e8048a0f8fb8ee750a16f339ea","sha256":"53f7eaccc5cabff8999753b23d2e2aab91a4fa445707494f4ce0d0af103fa211","sha512":"37dba85918d11177c8c46601bcd6651181afdddf0659ca24bd31213d8482e647faf0a0b25a532b316ce4fd80c9474c3ea0ad575cc98f378d5cf13634f87a512c","ssdeep":"48:s8HaHKHAEGQ4GDb3aHF1bmZmr2mHkw+JbO+TnVBGa045LDyeXoiXA:pHaHKHAEGQtQb6cF+JbO+LzTXG","tlshash":"dcc10fa4e46a10c47732ce0bafe9b218e698b128cdc19d15f11f4e1cbdf1b554386eb9","first_seen":"2023-11-12T08:26:56Z","last_seen":"2026-06-08T16:32:30.178116Z","times_seen":772,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":48,"dns":5,"connect":19,"send":0,"wait":67,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/chart-img/chart-1.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-1.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 470\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 73 x 25, 8-bit colormap, non-interlaced","md5":"b8a8d813b7c568f2b67946e982849db8","sha1":"1eb599fd13d98b754576447d2293fd61e74c8c61","sha256":"5ba5170dfd922182cdf09481c0e70c3694eedcff35a61d6c146dd031a6f5eb92","sha512":"18cbe818a68cf02983b06ab3057bea38152b514ac402ce03a9e7be81b6180b1eb845f0de6176a313aeadc94d9959a24d111cb470939e658b6de231cc13fa1474","ssdeep":"","tlshash":"2af023d6f409ee58b73960674e3acf108572bb9210045d04dd33c13546f734486b7d80","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.169519Z","times_seen":771,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":864,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 17:24:41 GMT\r\nexpires: Thu, 11 Feb 2027 17:24:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 208205\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":119,"dns":5,"connect":18,"send":0,"wait":19,"receive":6,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 17:24:41 GMT\r\nexpires: Thu, 11 Feb 2027 17:24:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 208205\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":101,"dns":4,"connect":28,"send":0,"wait":19,"receive":13,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/storage/app/public/photos/jYgGON0zJUuvIMctFmIfRSiaIOXijt4Da5hFTdwh.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /storage/app/public/photos/jYgGON0zJUuvIMctFmIfRSiaIOXijt4Da5hFTdwh.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 17006\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Sun, 12 Oct 2025 10:51:44 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":17006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"7ad52afd797a2f0378b7819bb03002a2","sha1":"ba15522d7d0c1e99f156016a3f9c7aa927d7fa83","sha256":"fe6121a8c5459ac7b534b946fa67973b268982461772b1f3fd886435ab1293f9","sha512":"ed0b7adccc5d962aae9815f7166bf3a83adce37babdd093b16d1f0d7ff25f725f21dc41fedd7cfe5c95d0435f868861b3cb8a6aca05e1bcfd08cb0ee0557f41e","ssdeep":"384:IKnFn4sMe5/IMsr1D8UiJjC/jTWR3RUfiYPH+7e/Xbk5X:nesVcr5ni9e3qzYP4sQ1","tlshash":"f672c03d7c47e2438ec96686a9ed51aae9ff551d2dd40048607aec47dc42a984f8c3a3","first_seen":"2026-02-13T05:14:28.547511Z","last_seen":"2026-02-14T03:15:15.33418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Feb 2026 18:56:07 GMT\r\nexpires: Wed, 10 Feb 2027 18:56:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 289120\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-06-08T19:42:52.672665Z","times_seen":69561,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/socket-io-Bq1seLiF.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/socket-io-Bq1seLiF.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-9102\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xDogcQVr5WXFkGJIud%2B0joierSBiZ38LBBYsc1j1hUcflq9mFvCkm0xlHDlJ6DwGA7i6dAkAWED1VBhYPPOxXicZmi3zp5V2cPHVD%2BH1CueHT0Nwzno4QKeJv96iEsyLQQkDeQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c4ce1735a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=816\u0026min_rtt=409\u0026rtt_var=176\u0026sent=359\u0026recv=119\u0026lost=0\u0026retrans=0\u0026sent_bytes=436283\u0026recv_bytes=2735\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3816\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37122,"size_decoded":0,"mime_type":"application/x-javascript","magic":"data","md5":"c4708b47d1b05894dc74a819edb1fe35","sha1":"571ca7b6ba0184fb98330910845c294572e0009c","sha256":"81d7c74fcdcd2ebd103038d7d8d9c7c1ae7089dd90cd0296a1daeed259d09702","sha512":"1865efbdc6661c7b475b3cb2a202253c05c0cda45331d644f46cb1b2243c19301e0c6691a6da366dcd9db42dede81b2781edf021964c8528dd81d85a2d03b88a","ssdeep":"768:4zMhtTwsESn5FFUlffRdMFyRsTngw0IQ2ovp7czzUjEQphySPrY9nZh8bT5Vto/e:Vln11TgBIcv1c/Ubr+C","tlshash":"dcf2f9c8b2a0946683e2a1a290750203f33954557409869cbb2ceef7ed7deca7173f75","first_seen":"2025-12-19T11:10:25.718981Z","last_seen":"2026-06-08T00:29:29.33642Z","times_seen":660,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/about/about-img-6.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/about/about-img-6.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 100901\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":100901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 320x400, components 3","md5":"f7ba0df7243cef46807ff8d03bc34777","sha1":"0afd7d2058543a89f2f84742fad305ab8283f7aa","sha256":"0bbd00e0128ce44e69e51fa7167c7e68f73f6d08c6d27f2723c5a85379b8f7de","sha512":"318befb2561d1471fbf0f6d3766dd5f0d8bcf2ce051b479ce64712e92be2251e609434537067cae7bb6b5563df41cfe7a3ce6f39a8bae960283c351f1986dd3c","ssdeep":"1536:JTV9Ij1UhMHAHn2zOEJUmOkm/r2EP80x2Ad1e6SzavRvCpMoPBgFwJrEQxQ:Jx9I+hwAH2zPqfkUr2ELrejs4pr89","tlshash":"cda3124f8c73fc60e61fa612882ce1bc26b6860df862827c44d0d715f63b76b7976045","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.183102Z","times_seen":798,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":774,"dns":0,"connect":0,"send":0,"wait":70,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/images/197582.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/images/197582.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 23698\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"905fcb9b1a36f5f816201b4108a4681a","sha1":"1a5913195dbd63eee109041a53f4421e53a088fa","sha256":"6b3af5b3118aa1b73600bd038e97ccd56643d6c076ecda896512f87c3a46fe61","sha512":"15b7e358ec2dd5a3cf524a285529f4cae6cea292ee75126fcbecea154c2103f1677a21c1260f5d3bccbb23f6986d861c1f7fffad88d6289a0a7637eefcdd0b11","ssdeep":"384:F+uZBeEnw+Y9sziZDWm/SWHbE8qTsQpxSMtetCh3mldBEc+y6nR:F+uZnYUiZDWGSW7O/ttJ3md6R","tlshash":"c6b2e1ad42712d32195e5dc57a5fad404dc03dd178f4dce2234ba8887e02be0dc6dea5","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.176375Z","times_seen":875,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":591,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/aos.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/aos.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-06-08T19:51:17.82464Z","times_seen":38274,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:01:54 GMT\r\nexpires: Tue, 09 Feb 2027 20:01:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371574\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/bootstrap.min.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:45 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:45 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":163864,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators","md5":"d72fb46fdfcc65998d65ce27889e95fd","sha1":"8aa23d660df97231c14b1d247ff2fcbe25c6fc8b","sha256":"ac9e331eebe875842c3e7605970c374521815c4277502bbb1c66dc57aaeb04bf","sha512":"6c297b6d0bf706339fdbde201b8e4281d521991746ec8be2b9d8192662902cecbaf26845340d26eb6fd9ab0260a883286f0a2377e7a8619c714dceba7d7eb3d9","ssdeep":"1536:lt04T8if0W8DsEBpy0cuJBt2rIWE5e0VUpz600I4fT:lt0430VUpz600I4fT","tlshash":"38f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.157563Z","times_seen":891,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/flag/japan.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/japan.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 676\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"d6d8f49eb74c68abd38daee5abdd0846","sha1":"59da5e99ad295277d09a2a1e0d14ebaa04ac75c9","sha256":"775b622f42ac6d8adad96c7648ccc994c542ee70cd400e77ca9cce9d4b8ee03d","sha512":"f93fbfc102bfad1b05f118085f424210180c96c5dd483c81db46a44a1d8de9b35a9d019c9ba917fad18022061134c14797b6c7975792608d446468c673441006","ssdeep":"","tlshash":"6c01fe73383ae4650cef0acfb27d6502a4a646011b22fb487b4634ed64dcc4969b32c0","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.185126Z","times_seen":795,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":875,"dns":0,"connect":0,"send":0,"wait":67,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/flag/eu.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/eu.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 868\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"b8bcad392a1d7f64622798d6e0059920","sha1":"b41ed94de447df832b59e53abe23fdd52e179523","sha256":"ce61c4677c93bfdd6c804e6100859ab906fe93c565cce3a368686b15c68d49a2","sha512":"f0da32809a628ed6b09c01d456b3b313600853a7641246a30079204fb0ca43c2d4610e0b2aa64fd4e472dc92c775f865d3316c982cc941850a46cb1f92e1a124","ssdeep":"","tlshash":"ec11561a5f64c6acd08806afa09438b4f47540461d257a17dc4e346499ffb6c6d36381","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.175907Z","times_seen":797,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":593,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/aos.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/aos.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14243,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-06-08T20:01:50.800786Z","times_seen":9629,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/tweenmax.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/tweenmax.min.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":144259,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36174), with CRLF line terminators","md5":"3ebfc60317f7c7439949d5728c2e7905","sha1":"6bdc6e3e92cf447dc3922977d923b2901e36640d","sha256":"db1047e16f9ed072dbc343334fb2dde5f14c486676495bed4e592d75dc73522a","sha512":"dbf9d706a05c8b5215e73702744e075522cd0641e1a9a6566004866681eb6d3e55e5d8cf47829a2c6bb85f9a64d25555efe9b65c8c6614332177753583d142c7","ssdeep":"3072:wAcorGC89zpEosfUfR3Hb9jLYQz3Xk9kqJaR1MfgO4553Njx849GXIFsHtsznbFc:wmGC89zpEosfUfR3Hb2Qz3Xk9kR1Mfth","tlshash":"1fe3c54523d1213e8547f2629d7fcc46b33a8d68a385c85e790c94fc68189748bbeebd","first_seen":"2023-03-10T21:06:35Z","last_seen":"2026-06-08T16:32:30.165976Z","times_seen":934,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":97,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:51.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 00:05:02 GMT\r\nexpires: Thu, 11 Feb 2027 00:05:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270589\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-08T19:36:20.227272Z","times_seen":242367,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/fancybox.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/fancybox.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":68446,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5903cd4e4bdc6c28ece32e469b887a8a","sha1":"825baf2b74a47eccb7b3f439fe58da710b84a2c4","sha256":"c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7","sha512":"9562ef7d089c8ebd39a3978cdac3266643a4a184ebb122598b9991b8c9dbbcd61e4aae736bc2e1a84ce6edd97d6f671fb366ebc802b9a8170cc82d510ffbd3b9","ssdeep":"1536:FUtGulsqqQzeFuouppK0WFVnsQrNz7M4HJ3t5oSKN1fQq58cTJ7PBTf:cGasqqQzeFuoubK0WrNz7M4pd8qq58cH","tlshash":"0663f89fb610702582bb0594a30f560ed1377116f10284fa78bcd4d55ae4fc922ebbfa","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.181628Z","times_seen":996,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/owl.carousel.min.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3185), with CRLF line terminators","md5":"87abab2867922fef553680ba678dfa06","sha1":"38e873c124fb121992f7353080c62de7ff47c1ad","sha256":"eefff6e8d13f576add7c73285b00d6ef56d3d1d6e6f98af8561fd3dbf47500b5","sha512":"dbb7f9cf9d1f47ded41384e422050d480a1f718b9c5b15516869fe9b44cc18aa478471d589fec1e024e3c81354be71f64da311702f059dfbf515ef73b400e5e4","ssdeep":"","tlshash":"1461cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd31447dae6d213ffcf","first_seen":"2023-04-18T14:12:09Z","last_seen":"2026-06-08T19:38:41.240887Z","times_seen":1587,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":5,"connect":37,"send":0,"wait":68,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/fancybox.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/fancybox.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13039,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13039), with no line terminators","md5":"32ea6a4849f931f79f4ec5816923413f","sha1":"c9fa6fa910b8cd76cf14faf4ff98933c7bae6b45","sha256":"e2d2ac9b36a0e51b450d1f32059ba46fbadcc5ad9d3063abfb562ac714211af5","sha512":"bbcf2ce681b368745003b3e64a8aed9bed1cafb08bce2ddd375ee5e6fea16d68ce5bcb452bcd603a3e0937f41401660ec3703430ada8d2877eb894445c6964b3","ssdeep":"192:yJ6DcJ566s6kC/wEvH30trWc/p2/Pw8RvGgNmUKJwe:yJKQJl/wEvX4jx2/zvG1Nx","tlshash":"db4251336540312c407bcd22d7cfe948e13a9155aa2216fbea4cfd69cbc77e911d62c6","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.151947Z","times_seen":896,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":5,"connect":33,"send":0,"wait":83,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/chart-img/chart-2.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-2.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 534\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit colormap, non-interlaced","md5":"c9eb18efeaa14310c0b3db2bc9f93a27","sha1":"c48275e79ca07a678467c7ede198b3ad2061f39e","sha256":"5f4957ffe8a2e4b25b354480b2ef2e44a663748a2bbdee7e172a62f16cfe58ea","sha512":"4281040fc9d75e2101d34f28221e97676f7e76a49355c81337dbb4a8f7704d8928c22aabca3f79db08544d721cf265817388a72a018b58e89bfb5327010d088a","ssdeep":"","tlshash":"8df005e2d5984f8c556c845113734ee0663c079b674071459d33d0a22ffd6acb2ebbc0","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.172023Z","times_seen":771,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":895,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 Bad Request\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\nage: 60880\r\nx-served-by: cache-fra-eddf8230194-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 17:24:41 GMT\r\nexpires: Thu, 11 Feb 2027 17:24:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 208205\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":137,"dns":1,"connect":15,"send":0,"wait":17,"receive":21,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 108675\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 20:32:37 GMT\r\nexpires: Thu, 11 Feb 2027 20:32:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 10 Feb 2026 00:10:13 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 196930\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":381830,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"7def5c80176b6c25973b1233160ea2d7","sha1":"9b8ed0e76f7c4e8751ac8b6012478d4edfb4cdc7","sha256":"33c1376dd026bfa89865cfac908758bffa349513e593d7231e4967c8d44d8d23","sha512":"bed64a1ff0f6f91daabecddc48a81c06a452f6651aadf14be3a12ee30594f551998b35e0db05b9b6e3bc60a41edc6f29c67dd189b64787a21b38ae221dd478c5","ssdeep":"3072:EhKxvogNR1cPmzRxp673A2zC8VYOf/xZ5YAjuIGTHLdZVVb7Nmoq0hn:+2iky3xSvb7v","tlshash":"4784d9cab266b8939262f8a190bf004bb93ddd57b4484c6cb149d8ee5db08094177f7f","first_seen":"2026-02-11T21:35:34.930944Z","last_seen":"2026-05-26T07:44:40.853401Z","times_seen":638,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":102,"dns":13,"connect":16,"send":0,"wait":17,"receive":42,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/hero/hero-img-2.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-img-2.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 142460\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":142460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x600, components 3","md5":"90b948945ee7a4fec9c30343ca95f019","sha1":"f95143740991349816225ba5afccbd5232f8ac8d","sha256":"5f531109f4933e8b3156823d17b99a177fb75de338e44f7c03035902c97a510f","sha512":"ce42794246995ceca531329c2ac2b993799f69b0acf205f84a721fd4c3811d7b9e77b2a77e503a61980756493c8018376325f29e8b9f1e92a944b281bbd840fc","ssdeep":"3072:6GljmlEjc289s4Qzg7WL/uvKQVlK8X+OSCxW0JlDw5WRV:3slQtl4ugKLmlvpSH5WRV","tlshash":"6fd312337e37e19d9884ba67c8a753f9b32a7734e6ea0946d02c0db4d94f12b5b14806","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.16701Z","times_seen":768,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":396,"dns":0,"connect":0,"send":0,"wait":70,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/partner/partner-1.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-1.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 4435\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"a0870e62943816aa1e7f2e60dce300c6","sha1":"2eb84c3e61fe5487c4f6e7e440a7e187866ca3d6","sha256":"6adcebaadd6ddd2bf42738c5db2b218c03dfe964bc1e5cb7c49d64fab90401d0","sha512":"02028698c0accc01ed05d12f60151eaf42fb25cde450cfb77443e0206b43381fceeec91e296c9dfc69115448c755a04c628137da4c6e1540ffb0838e3a87af8c","ssdeep":"96:+PrlHu+NacmxNKnUj70me81PcLSehjedNiBd/tSaXmg86lVA4xAN:0ZO+oji81PcLXjedNiB1bXt86rAN","tlshash":"c9919fe373a5319758c101634cd68eadc21b342f401dd4262a37fa7b5be5e290956af3","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.167549Z","times_seen":767,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":389,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:49.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 00:02:44 GMT\r\nexpires: Thu, 11 Feb 2027 00:02:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270725\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-08T19:35:44.948537Z","times_seen":353415,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T03:14:44.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; expires=Fri, 08-May-2026 11:14:45 GMT; Max-Age=7200000; path=/; samesite=lax; secure\ngrand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D; expires=Fri, 08-May-2026 11:14:45 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:404.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Chatway","description":"Chatway is a live chat tool for websites, designed to facilitate customer engagement through real-time conversations.","website":"https://chatway.app","common_platform_enumeration":"","icon":"Chatway.svg","categories":["Live chat"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":36812,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (335), with CRLF, LF line terminators","md5":"1fe286ea7e47e8a999a370550e41c22f","sha1":"54277cf79b25c116344e402a14343b797dc9bf25","sha256":"ba8f7a2223da14edb59a37188d33629e5176a2cc1abaf5ae665741716479ecf8","sha512":"09a4e33783740036e844d91d067d774d473f35899045e41c14930a078a4a2c4b3f2cd70d9c00aeed417f4a51a6a8dc02718b08b292aa874491ffe3b5ba5fc2f6","ssdeep":"768:+SYrtbXn+Z6LKyJ8+BsQ52zmCxpd0F/4pbXq1NAm9eMFf/m:xuXn+Z6LDJ8SCxpd0F/4pbXq1NAm9eMg","tlshash":"8bf23e2120f2117301a394e16a256f5bafe0e303ca1b4a147af91feb6fc7d96cd17529","first_seen":"2026-02-13T05:14:28.520794Z","last_seen":"2026-02-14T03:15:15.346724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":148,"dns":99,"connect":23,"send":0,"wait":547,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/style.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/style.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":99243,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"231181ef0e78afe4c8c369f0b0cb8066","sha1":"3c14c3667faabea86bd4bd4f138100718a8f9c8f","sha256":"a7209c2137b1636de472b042fe4753d31967aff75a81c2869e9d3763bf165e5e","sha512":"1e54b7d227773bacf1bfd3e1f23b5b7216e584a17943b3a559fbd7fc265010fc651523ea3cb1ee9003c6a12a7d5681b1b461f539d16bebfe152aa48e07f5a4da","ssdeep":"3072:+gQgrtgMg7/TXecD1thqi9B1Gr8JZV+UhM3HFCwEdXN1yiZIwfdxgH:+gQgJgMg7/TXecD1thqi9B1Gr8JZV+US","tlshash":"2da3a9619246232ea127c61192cc66d43e38c563e72707feb6163716c7cb7e7226bf09","first_seen":"2023-11-12T08:26:56Z","last_seen":"2026-06-07T20:31:52.530179Z","times_seen":672,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 10:03:50 GMT\r\nexpires: Tue, 09 Feb 2027 10:03:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407458\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-06-08T19:51:45.420239Z","times_seen":13052,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/markdown-it/13.0.1/markdown-it.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/markdown-it/13.0.1/markdown-it.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 29336\r\ncf-ray: 9cd965c38c18120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62714aac-7298\"\r\nlast-modified: Tue, 03 May 2022 15:30:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 265048\r\nexpires: Thu, 04 Feb 2027 03:14:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LB6uzSlBnb9E6yVQSrenbjrwcXZJoVxVS1F0Uc7GnGtL9exnavUQvlcGkyKE8bvU3z0Hg3poXPPd7f%2FBdyLCI09erRJZp5ITL9JyBA5qCMFhH1fCPhg71u087ezxcjPL%2BA4XVmXX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103012,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65454)","md5":"2c312733bbc9b162af28c64c8991b3ba","sha1":"9e7644adf7f90a5afd8d60cf2887134ef08fb72e","sha256":"84dca58da83a8220ac8efff22a6c4af3f55e1f3bcc0ef739bbc033991be6d412","sha512":"4987c35183e0e71b29b06e8e3a95d4dfae86f1266c7473a1aa4fe271dad827613f58a6713f1cdeeddd870f70325e94fb536d8f679cbbe31469a99e80d9b27e91","ssdeep":"1536:+WA83I94l3mQiB9JGv18Px6/HpGmqD4JIz3BXUT+3VNb3xzsp4tEHDT8er3Q4A:+WAL6l/KP2H8zcOFLN36C2DQugb","tlshash":"5ba30b5562dfdcab229030d82c7f290da9fe4a42440cc428ffed91eb19a5993315bf76","first_seen":"2023-03-09T23:28:50Z","last_seen":"2026-06-08T00:29:29.335749Z","times_seen":1530,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":11,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-chunks-B2UqFvij.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/vue-chunks-B2UqFvij.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-CGUo5UWE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-12a35\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bSoqLQI%2FEgBBZhe3D9BxVXAGBmRL8eIC8YcIiiszP5Vdq4Khu8ZbKnt7WhYGxm2lHZ9%2FHlcanczrD6wh7TDjl0EMjzEd8xJLf3AEH11f15iGobOkDtq3tzfD40vgpUo653MVpA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c44d3635a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2018\u0026min_rtt=409\u0026rtt_var=804\u0026sent=233\u0026recv=56\u0026lost=0\u0026retrans=0\u0026sent_bytes=294405\u0026recv_bytes=2279\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3738\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76341,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9a4d674de68df36c036c2f6f3d40fe47","sha1":"f8426334d1a4b99f57f086624bd8277853b28213","sha256":"6e3e5ec6aca09e6c13ee05980f115cc372a026b9d0204ffbb98e6eae203e2034","sha512":"961b8144d8fee971583794da35600149bbe47a7cbec49ace9e9fe822b2ab7edf99a6ba0174d70d805d31200597a79e440e75253f3b1d50d0d44a8cda38de3350","ssdeep":"768:380GJQN2EemJhEovnDbqTbWLBrsfcwn13wunX3nO0j1tqD9M5pEKtKFBrwik9PK2:dWp/n2DXkhso00Wj6sCFQCbARc5","tlshash":"537317e83182b57253fa09e6007b0406f3292d56384ed8d8f1adad9f3d7640591bbfad","first_seen":"2025-12-16T07:38:47.970776Z","last_seen":"2026-02-19T03:48:10.135141Z","times_seen":175,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:51.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 00:02:44 GMT\r\nexpires: Thu, 11 Feb 2027 00:02:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270727\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-08T19:35:44.948537Z","times_seen":353415,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nage: 80706\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\nx-served-by: cache-fra-eddf8230174-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 62\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":58,"dns":1,"connect":33,"send":0,"wait":14,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/partner/partner-4.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-4.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 3448\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"c7b36c0c4560fdea98eab463db51a474","sha1":"00e01da4b9a08cf4f859f4ba3c54fe292be72388","sha256":"fce1540a6b8cf77da50e312a7d5eb2dde2176f7f1ff7fbbad1e5a4c30ef0cc44","sha512":"b5a856be934819a91c325f5b8a9430175136dba7cdc524706798dfc484bcba4209e442cf48f3290f043d9f88e0ee5cb153de19e98f9a2fc1ad6bd240b2921df7","ssdeep":"","tlshash":"7c618e9e580af69503a83390e9605dcd60169026b75936b5d30342effb6ca7350bd307","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.190218Z","times_seen":771,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":1034,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/partner/partner-6.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-6.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 4525\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit/color RGBA, non-interlaced","md5":"fc41f4a53986aa873fbb5d6d9480e7a8","sha1":"ec5fda8c50ae629693b80cfb833e8ecfccb94c0d","sha256":"aff05b470f5f5b13fced8c6f71ea75389014ff83831ce96512b8494304ce8c33","sha512":"85253276198c3e73fd3d5a8a658169da010ad1479beb5ed9d1476095464447ae60027e2cc5cb132de08f3488a1d635b491339d81822901f1b8fcd0e70b25b999","ssdeep":"96:l0ljl98zyFpJxVoEkWgNn+2NeNK5l+cwbxewTJe4:mszyFpJF5snzNepcExeGp","tlshash":"c0918d97199a443f63f8421f8b6d48672f4cf5a810d7f6ef4b500a203627b0f3655a28","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.169016Z","times_seen":766,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":712,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.082Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/chart-img/chart-5.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-5.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 452\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 17, 8-bit colormap, non-interlaced","md5":"e3a4eda0513a1b921ff926d9d93d4f76","sha1":"f297d2ba283fb256eeb948e945721f8f53daaf51","sha256":"95b9133d00730f47385e1beac188df6493a3c17d694c6a5d3c808b7c8081dd4a","sha512":"a061bf8205b818f45b57e5cf688cfa9b74921b285a497855c27326009619586d76fdef8763b8f40f8ebefc8c9a67c5385182b681856424dc93d14c56f31b1f60","ssdeep":"","tlshash":"8ff0f8c293d66a2eda540af5cfaaa31ce0b03c4a0e744e0f4c532e0b566010a1a8009a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.154402Z","times_seen":769,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":954,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/index-Cd_kVpvs.css","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/index-Cd_kVpvs.css HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-2f46f\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xqK0SP6dIapMQj9R4k%2BDjF8I0V9oTscRnL5ZeQ%2BcyMG1fYdUSf7apAH%2BRLs4g%2FnZZt16jVzsBFTdcen4MK13wQ3a8d6XKmRk0r982y1H7I%2BppsY0Noe7kKPULBuZOloZ4PmOAA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c35b9035a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=816\u0026min_rtt=409\u0026rtt_var=354\u0026sent=38\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=31244\u0026recv_bytes=1789\u0026delivery_rate=17967883\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3590\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193647,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"388790c82f31a88ef9321828ef1598b6","sha1":"b06c2d8a68124b428c7fa7a556d43adeb2976d7e","sha256":"9f02f9d996b1a16934091a68dc1a7794f69ab7ddc66db14bfda47df184b44532","sha512":"90a36a662811715605a871de331696785868d9af75b9b4ca50eda6b693d99799c9c6e3c11888ff92c6dcfeb76f99caac744edec2ade7173862e9ea2ed091313e","ssdeep":"1536:i44CCBG+WOnWxca6lXN7OcOxUyw+gBRNsXUB/MF+JCyxKckQYJwXaC+eOORpa4K:i44fBG+ficPPObL3+R2QEF+JCokQah","tlshash":"73142a62b6913028f633c56560e06efc7236a247d6120fbdf5177f7c87c62e329a1a58","first_seen":"2026-02-05T00:11:53.860029Z","last_seen":"2026-02-19T03:48:10.118904Z","times_seen":37,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:57.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://goldentrustcredit.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1190\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1190,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"zxx\",null,\"TE_20260211\",null,null,[4,0]]],1871,[[\"1771038887747\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"CDA6F02A-14E5-46DE-9EB6-13DAA93F051E\\\",[\\\"https://goldentrustcredit.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"http/1.1\\\",[],[],[],[null,1000000],[null,18000000],[null,117000000],[null,118000000],[null,176000000],[null,145000000],null,[null,200000000],[null,723000000],7879,6458,36812]],[\\\"translate:page_load_to_initialized\\\",[null,723000000],[2,115000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1771038897747\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://goldentrustcredit.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sat, 14 Feb 2026 03:14:57 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-06-08T19:34:28.805149Z","times_seen":556009,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/responsive.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/responsive.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19549), with no line terminators","md5":"41f6f258e711bd2f007f2fa62ead6217","sha1":"7fde53fc9fcb23d73eff3c8e9a0194e33c0432ff","sha256":"a8b7d048746598b7abfaa4e69644003831806e2a4d87e8a702d49fe949e144b9","sha512":"2c2a6c94e122c0337dfc55ee32f5b8fba21c63722814f8bcfe22b2f8b971e8374cd12660c357d5a017117082161ebd9fd455e79e8bc3aaf66df53855ca76915f","ssdeep":"384:WtWRoiBxVVdRr3Os0djy9ScnTUUHaeXTl0vwzaxEF:lRoiBxLOs0djy9ScnTUgB8w2xm","tlshash":"d292359323160b3de12b4822408d72f43f199a72d7a742fe9d154a2adbcd3b713b4b19","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.17861Z","times_seen":860,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":94,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-06-08T16:32:30.161958Z","times_seen":2210,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/form-validator.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/form-validator.min.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6063,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5862), with CRLF line terminators","md5":"c4daf2755cb5c35eb40079a0457af6af","sha1":"98813bbfbc7a3b53b68457778cbf073281af1ecb","sha256":"5932ef8c9c2d361a85d8834d47f508dbd305fda081fb646c18f7fbe76839080a","sha512":"428ab339eaee7b3da2ee135ae6e9a99dd7626693027f1eb33a4239486475dcda6bd40f2dfa40fed5d46728813354f874feb0572f6806ea51c523ef6640825051","ssdeep":"96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c9c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.173097Z","times_seen":959,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/about/about-img-5.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/about/about-img-5.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 141805\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 480x650, components 3","md5":"5e2a9a8715ef44bfcc4419c54e7d9906","sha1":"9534d84ea5d0a143bfc6ed695f7d9aab4058f9c5","sha256":"1cf2e1d7c174d3155616e66fbe49a1f0458de06c643cca6c9d1a056ce526aae5","sha512":"1f4b821f50e90980d14e89a77682166006ba52bd5dfc709f1ee8ae305ae3973c6406c321fbba66d236c6a1f8991303299444e90dfe49cb35e70abea1f8d220de","ssdeep":"3072:lQfm2Kp4kslg26ZJkyBAvzHibrkW4o8newrZ7B/IokyJran4MhYkx2:l8yxsq2eryb6odnew97B/Van4IFM","tlshash":"ffd313b89c6aedc74804813b3f1b42aae9fc95c2f1c76a113356b955c8f4061db7703a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.159723Z","times_seen":786,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":757,"dns":0,"connect":0,"send":0,"wait":70,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\nage: 2669329\r\nx-served-by: cache-lga21963-LGA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 123902\r\nx-timer: S1771038886.048768,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":69597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-06-08T18:39:48.878418Z","times_seen":79014,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":71,"dns":2,"connect":32,"send":0,"wait":27,"receive":8,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.chatway.app/widget.js?id=JKukFvsLC7QS","fqdn":"cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /widget.js?id=JKukFvsLC7QS HTTP/1.1\r\nHost: cdn.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9cd965ad59df35a6-OSL\r\nlast-modified: Thu, 12 Feb 2026 07:12:39 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"a6f46b0aa8fde59c98bc5e6be3f04fbc\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: dXU4JDUmkXbkC4OT-Zr0syK0Q7p7Rale8So-nkhSZofvWMzN6Wrmow==\r\nage: 72050\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Z9w423Bj9%2FuNjCqihFdKt6Mit6gwOCAk3esFQQ%2FGn54O4BAkdLVjn%2F55P%2Fu0H4JAGEcYdyd1mSySYyBvrTQd1JWQr549XDxXRlAlc86VrxDJeMxuYXrSUul7eazwa3I0GQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=642\u0026min_rtt=454\u0026rtt_var=367\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3272\u0026recv_bytes=1210\u0026delivery_rate=6581818\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=236\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31783)","md5":"a6f46b0aa8fde59c98bc5e6be3f04fbc","sha1":"4635b193ce7a6083d64e50954ceac13aa4b4f35a","sha256":"66386f69bc9e18d70c9fd9529d2199fe22d096dacd9cf4aae3cc67c9b9eefe29","sha512":"75b52d212d3ddd03dd90c84938142753cf153f2d7e42c5ebd67b662a73e9762991ee20df4fd08ed946ba1f29742e3fc0e2e601e525ee3ae2c9d6b7c46f1eb448","ssdeep":"1536:FcSCNrxaJPLdEWBGJCx3HnpOpHY94x3dX3V:qSCN1qLdE6epK4x3d1","tlshash":"4d7329b071a6193546eb48de6465b60036215c9db8858c78fc7ccdaabb85cc6433bff8","first_seen":"2026-02-12T19:35:00.470474Z","last_seen":"2026-02-15T18:07:23.014417Z","times_seen":14,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":4,"dns":3,"connect":1,"send":0,"wait":183,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/hero/hero-shape-6.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-6.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 1934\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 97, 8-bit colormap, non-interlaced","md5":"f83b8c90bfd681efd73d4819b6d12b7a","sha1":"443a851b10b6d2b331b4fa05f6ec6bfcb8482d5b","sha256":"35f443944fc4ae8a47098e39823bc5d967f9d440dac39971d5b3f0858f185f8d","sha512":"2a13e0f0e85cdd5b8c14c84dce56950c6e3071b5a39fa380aca3aa8f509745f8f1cc23df22038338c29d523107135d3530db173fb08cbea9a7579b950fcdc3c5","ssdeep":"","tlshash":"d8413b62c4063c7bfa4468b5d612088fe4b9c62a079502353bec71e17b6606c993057c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.174423Z","times_seen":781,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":337,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/floating-vue-XJ7ydwyV.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/floating-vue-XJ7ydwyV.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-CGUo5UWE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-a6a5\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YwVtnUkdkkqowntqXIqWkASb4H8bNyE5uOZ2iigUIaQ6ty%2FIBdXZPYOA4OA1wQvq%2BM51l8Eh00Ppw6NaCss57jbRFxq1HRoxN3G%2F07jFrz0Q0grpFEuLa%2BVgyUWxJn8AEZcmig%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c45d4935a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=875\u0026min_rtt=409\u0026rtt_var=431\u0026sent=272\u0026recv=70\u0026lost=0\u0026retrans=0\u0026sent_bytes=338884\u0026recv_bytes=2279\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3741\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42661,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (42660)","md5":"7018cbcf42d68259db7b6b79547d70f3","sha1":"1a5d2d06c2edb61c51400b2224c4c325e1af0f91","sha256":"c08bce3f088a125d5711cf55cae8d273527291ab6f6d5e5e8e86df6d78fb0362","sha512":"d057a8d67510c81671138aa42935983d0c0692c1e2680271c9d4971022cd8ccf90380cf969a5393275fe556fc19adde5def943e816d428a9a9497e2704de0c05","ssdeep":"768:9Uz+7n+eTC43ULScUbGyf2J8hrfLdZAY5+mn3Wh8usqu0+fbmzZqflPOrorRtfEQ:izvfQnAY5PcP+pB","tlshash":"4b13f9bb7184f13313de95b6503a0609b3261798b40f545cb2fc9bed28b6d14626afbc","first_seen":"2025-12-16T07:38:47.932836Z","last_seen":"2026-02-19T03:48:10.153848Z","times_seen":175,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/floating-vue-XJ7ydwyV.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/floating-vue-XJ7ydwyV.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-a6a5\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1OsZlsVhmvu3%2F71u1lj9hkw0xZ49Yr4XjJEqmLrWlrvWMYzLblorSPWsm220WhGMiQ1PTPbFXWg65lCCpfSXWnSVJunI0y434JvrWWAsuTTrsaLgyJorgQHGP3ha4qEcjXoy7Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c4ce2035a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1158\u0026min_rtt=409\u0026rtt_var=763\u0026sent=370\u0026recv=125\u0026lost=0\u0026retrans=0\u0026sent_bytes=448947\u0026recv_bytes=2735\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3818\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42661,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (42660)","md5":"7018cbcf42d68259db7b6b79547d70f3","sha1":"1a5d2d06c2edb61c51400b2224c4c325e1af0f91","sha256":"c08bce3f088a125d5711cf55cae8d273527291ab6f6d5e5e8e86df6d78fb0362","sha512":"d057a8d67510c81671138aa42935983d0c0692c1e2680271c9d4971022cd8ccf90380cf969a5393275fe556fc19adde5def943e816d428a9a9497e2704de0c05","ssdeep":"768:9Uz+7n+eTC43ULScUbGyf2J8hrfLdZAY5+mn3Wh8usqu0+fbmzZqflPOrorRtfEQ:izvfQnAY5PcP+pB","tlshash":"4b13f9bb7184f13313de95b6503a0609b3261798b40f545cb2fc9bed28b6d14626afbc","first_seen":"2025-12-16T07:38:47.932836Z","last_seen":"2026-02-19T03:48:10.153848Z","times_seen":175,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/testimonials/client-3.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-3.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38351\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"0b0594273fe1b0c138afaec55d626365","sha1":"42fbe28cd4401ff7905592ef8aed7e257de18c41","sha256":"ae7da33946d2beb7729ca295821719219230adec8515594ddc697edb228df028","sha512":"f4af1f08a8c8337f2710e438a7c9dbf02486ab24f9ce916d4b21305bb1ab5c64a88562608bfc67880fc3ab870e591a3b5f5c7b021da4e228201f5459303e456d","ssdeep":"768:efjnuv39PX16ZmtIET7ST7XNzGU4jtku6pzL+iePBObysNY7z:QjK3lXamtHOoPt34iObysNYf","tlshash":"dc03f2a4bb4f1c2ae6535488548d87de950bff4c396f36812ce845636c1b3279c1d19f","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.162486Z","times_seen":813,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":371,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/flag/france.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/france.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 704\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"9b5b3d7931b3029b5d87f478c3879a21","sha1":"e31575340bbc26635b43c3e4b48e1efb379c494f","sha256":"d0af89d9567368a223db1b6345148d40e272a3de4c2d6c378c6301ec10864328","sha512":"375b8a5b5eafc62eb88ece2cd5c38d6dc35aabcb1e7adf3a98975c1855b3b7138729716d1aa666e83fe471bb417a38ce384e0484941d085b0ab014770c583412","ssdeep":"","tlshash":"bb01449ee1045851ca15c44e1b9ae861ee1a595fc9b4d0b93c43c41cd403b7c18d1743","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.155072Z","times_seen":790,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":954,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":44348,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-06-08T19:38:41.266202Z","times_seen":11855,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/fonts/flaticon63cc63cc.ttf?cefae1a4bb47c2f93f732cd251c9c01e","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/fonts/flaticon63cc63cc.ttf?cefae1a4bb47c2f93f732cd251c9c01e HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/temp/custom/assets/css/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: font/ttf\r\nContent-Length: 34936\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34936,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticonRegularflaticonflaticonVersion 1.0flaticonGenerated by svg2ttf from Fontello project.htt","md5":"ca8030904ed567a42f1dca62d90c5043","sha1":"c1f31d849c90b8815bb080068aa45aeea24e3d63","sha256":"506d72967add3dbedaaff32751d8d2dd5ae16e42771043148bc3c5d54515d8db","sha512":"bafd57abf0ba2e26a4583aa9d8ed75ed3f22c22add2b36d3c61d3239f36b1b2e429eff02c045c7b849458877cce6d50bd7d25a587f9561b4e334d853e08ede5e","ssdeep":"768:D0UbwR62v2kfJw1ssaJnqmfzOhXsoRvr1tksU:DFbwRF+kfydaJqmfrObk5","tlshash":"b0f27bbf735f4e3ed3233abf9cc865224ae1a90815a379836d8d690dc9160c42ef0259","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.180116Z","times_seen":865,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-3-linkify-DSxu0C2V.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/vue-3-linkify-DSxu0C2V.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-CGUo5UWE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-ff39\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bFS10JJiH2UXYbDsIcqYJ%2BL3sH3QkmeU78cZNbYiMN4ACpvBO59SLNS0i7DS0JmI51Gz0sy92TF54cFOrkIYJ%2FVg%2FnQgKqxE9tIPKwqxYk7VjYBFuF3wFBfPaFKry%2B4vVUZVBQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c44d3e35a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=828\u0026min_rtt=409\u0026rtt_var=131\u0026sent=302\u0026recv=88\u0026lost=0\u0026retrans=0\u0026sent_bytes=371192\u0026recv_bytes=2279\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3757\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65337,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21053)","md5":"1c840191d67e4382fe96ec2a00c2880e","sha1":"466d71e6207ece2939f6357d4b01ea30edb9e4a8","sha256":"adfc1ef77350a8ba76d1618a155ac6802e6d41804191fa9a932b88a81d0f6c7d","sha512":"ab39f6645b4919f2cf30911eab590f87c553318ff3cbf41dc0a9bc6ea92ceb0aa694948623ed896140ef23a4f0e768627b95708361b9ee32e852c7d8785c5667","ssdeep":"768:a27KR9FY7HCua/sF+sTnlO+zS06wjJTk7EIh8H9Oi6Sg9b4fTz1ETEGl2:PKR3CCua6Ts+zSAjJTmqHwiqc","tlshash":"2d532ad8f6c2e079475310238caf1304507c99a4fe85c42db9b8e4e734a995b71bfab8","first_seen":"2025-11-11T11:56:06.753135Z","last_seen":"2026-06-08T00:29:29.269706Z","times_seen":802,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260211","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:29 GMT","end":"Mon, 20 Apr 2026 08:39:28 GMT"},"fingerprint":{"sha1":"2E:B6:3D:17:52:5B:29:DC:03:5A:0F:A9:EC:0F:57:33:2B:54:50:E9","sha256":"05:C3:70:5C:FF:EB:B6:B2:B9:5A:B1:EC:19:0E:52:DF:7D:82:EC:E3:1F:F3:BD:64:AD:96:70:3B:A3:E2:E5:FD"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260211 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 14 Feb 2026 03:14:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: script-src 'nonce-52KhdHrA82-uJtNnRMBW0A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw0ZBiEOLmWHFx_xk2gQftxxOVlJLyC-NLihLzinMSS1KLU4vKUovijQyMzAyMDA31DMzjCwwAErESiA\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=31.SE=d_uR5JAacqO7q8DZitE3fKc9sTy9rZvxPa0WKdLN8Rq0xdX799aU8jniGWuFwjvk-e37miMp8ZXQr-X-l7_6SXG1XJgsqCD4Ce9f_4E5fAgopdu08s0lhFb8y9_klcNZa0yMsd-gmX21zVdLtFBeIV7NE6wSeUBoL4sAgxfoP87MHSfB_7nLLkT35S2chwLqC2t4N5fvlqwbQepd1S8cGaZySMYrYds0iHy5zO1Cfb2kHgMYKlTvDQ; expires=Tue, 16-Mar-2027 19:33:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:wght@200;300;400;500;600;700;800\u0026amp;family=Roboto:wght@300;400;500;700;900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Raleway:wght@200;300;400;500;600;700;800\u0026amp;family=Roboto:wght@300;400;500;700;900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:14:46 GMT\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12089,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"639340ecbe89bfa40436d07e95d5d5c0","sha1":"1fcee10dacb1971ee08f65e69f1a0a15e7c8ea32","sha256":"48b7b8dc47ec45da9abacf0728f246ec8715f4689bd4caae4c2a2555077e1f14","sha512":"7eee30b686c61f845fd5dfcf0bd3ba751062db920e776d3d7e8fcc3ba50e3dbc5a19acc6e3ce36569c0633e9d82b25574bb41315585697c36e0ec7b2487ba1e3","ssdeep":"192:MicTxHyDi1iHT+H1Dl0iaTzH0Dkfi9ToHfDPGi4TtHGD25iDTKH5DpYimTvHYDIp:x+NMzwNYr2tWXCRg3ExsP9","tlshash":"5d42ada10917d404eb476dc663ce3e36ee8e62057047953a9bfd58bcbcaad3613a070d","first_seen":"2025-09-14T16:10:41.877473Z","last_seen":"2026-06-08T16:32:30.179607Z","times_seen":843,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":200,"dns":3,"connect":8,"send":0,"wait":19,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.chatway.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:14:47 GMT\r\ndate: Sat, 14 Feb 2026 03:14:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e92cf7832aae7d8edc2ba6e7f85493b8","sha1":"8f3b35b53db9e44a35fd26e00c3fe1fa881431bc","sha256":"02d91b9ba6bfb3b8e5da28ba4628f887c207ca087e83b2df3ad228dbb633a938","sha512":"12a0764ce55eb2af4f0469219dc70d7afad9743c889ac7e4c4ab70c31bb2d985411096815abac0eeb1ae116da33d0959016fcd78d5ebcd13e4f5068a5cdf6ca9","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMac5:4hHdPgKQcXr3lVwaq","tlshash":"6da1add1087be114ab831cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T06:50:49.017567Z","last_seen":"2026-06-08T19:00:05.572002Z","times_seen":2859,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/partner/partner-3.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/partner/partner-3.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 1737\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 35, 8-bit gray+alpha, non-interlaced","md5":"c8709f528bdf5908fa48eb0c8a96f855","sha1":"ac6bdab15e367ed6a1099fb91a8e71d3e80ec2ed","sha256":"821314c8b7cdbd225c05422daf867d1311816503399937c799e499ce9eb67918","sha512":"825c50712378108e37a0dd914d355384a757ab8e7444968441185da3e5cd6e01af5c3beea9a5166f89a323841ba0ef35b69c9b6a90445a5d83c82b724174a397","ssdeep":"","tlshash":"d3312b76db91fa2dc0313a32d418e35d6720bb8b945bcd223044bc54f1593b4bd23210","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.175427Z","times_seen":766,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":1052,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/chart-img/chart-3.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-3.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 462\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 22, 8-bit colormap, non-interlaced","md5":"93371548ccbe732f0d4da146e655a847","sha1":"713328fc5b2ba4605d234f8fc6a447d4e80fb081","sha256":"65e31de86753a271f5b52be6716a181ff8931fbcd48a4f056e65e275e690d6da","sha512":"bbc03e8d358fe0d35c38b9e7ceffb6c9628ef69ba8152168349aacf1d462940f8923456a7a0215f1d524ee467bde7192756b861de7d843be0bb2dedf89a42741","ssdeep":"","tlshash":"c5f0abdae5e8a82bcd6949fac73c983d2a463e44200d2007e814382b9eb9c408658a48","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.170058Z","times_seen":769,"resource_available":false,"data":null}},"time_used":981,"timings":{"blocked":913,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/testimonials/client-4.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-4.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:47 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 28230\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:47 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"04fc1ce1a80a1ff934ed63d7c439a5de","sha1":"057c48e27645778485beeb5965d046d7ac545893","sha256":"cd322a5aade9d9947c3dc9c9f846bb0b942dbc569e6cbe3bdbbb79246bd7b151","sha512":"cc9094b4d5b1e41f852f8d0f9e46dee475b8e72697d789bf0aa8859082e32e922efc35b694cb8b7e9ae37c031db8c70c54348c4fab51997e9bfb7f8790be9650","ssdeep":"768:4kzuA5cufgMAaSY2m7NBvcsoqHJ+Gv+1Cj:Bcgg1DJqp7yu","tlshash":"00c2f123f15aa446c4903d7811b2c28e9ccde362ce47da25379158ebf6077f8338e565","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.160244Z","times_seen":811,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":1008,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:47.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Feb 2026 10:30:29 GMT\r\nexpires: Wed, 10 Feb 2027 10:30:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 319458\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-08T19:42:52.67885Z","times_seen":48979,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:01:54 GMT\r\nexpires: Tue, 09 Feb 2027 20:01:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371574\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/down-arrow.png","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/down-arrow.png HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/temp/custom/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 438\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:48 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced","md5":"6f1f1acf5c62fcda73ee05662c8182ae","sha1":"e09fc52fa587eb882b2f31f4e6380c820e5078b1","sha256":"777bfb6de1e8019c69bfcf4a6a4113b04ac9ff635ab57457686820830b68a6e5","sha512":"84d1fe9adb2b18c8f3aa3154c6fb59e285c8a55b08d24b5d99abf8d8f904d6cb2046dcbdc3cb6114baa5ec21f8bef1b149a1d3f3d2baf97ea2b71593e2343a71","ssdeep":"","tlshash":"fef023f7535250a8dfb14570696d00f4dc37202d9d02910646094eef65d1090c8c7802","first_seen":"2025-04-23T10:50:27.724108Z","last_seen":"2026-06-07T20:31:52.540314Z","times_seen":144,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:48.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 10:02:29 GMT\r\nexpires: Tue, 09 Feb 2027 10:02:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 407539\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-08T19:00:05.583277Z","times_seen":11319,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js%401.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/popper.js%401.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://goldentrustcredit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 03:14:46 GMT\r\nage: 11161\r\nx-served-by: cache-fra-etou8220166-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 62\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/index-CGUo5UWE.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/index-CGUo5UWE.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-873eb\"\r\nage: 719\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rgY%2BYZxpOWpOtIeQkeqNnWyCh6XkTkLFbsIZ8IwBsN72%2Br1HNtWUzBcFLIkVOfQHwcFaLE4YLn6m0P2pTatBL%2BJBJx9UYEEj6noGJeAdH0B8sIpgbMqscIUkkf8nB8lbw71dPA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c35b8935a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=794\u0026min_rtt=409\u0026rtt_var=414\u0026sent=36\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=30718\u0026recv_bytes=1789\u0026delivery_rate=17967883\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3588\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553963,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39763)","md5":"1d7a0c4838c89ae9f676a0c79453dcde","sha1":"12d7001a9c4d823cefee6fe1231046267492d1ce","sha256":"fd51a0ee48016945373866d26f88fbaa091de3d78972a0398f0a50c56c03826a","sha512":"a1d5a251d16ef1e644eb781e4ea32a1a4c0acffdb77b9cda5aaf32d4e38fbd8e61ef948c55a7d0770e71ccbe3667248225e76fb65fa368f0c7ba2f59f2ca59ca","ssdeep":"6144:bj2wgMXXRxuXfait0GRdMNV7VfIBa1vMFKk2hMtAcCyCSWdgK5xUIIcMthMlv:baMCXfdRdMZ51ZRLRiFhMlv","tlshash":"12c46be532d1b73b52333760981b700ab72c5da9dc48c4dcf6eac8de2a64c54617eb68","first_seen":"2026-02-12T19:35:00.355858Z","last_seen":"2026-02-19T03:48:10.147556Z","times_seen":21,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/css/remixicon.css","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:45.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/css/remixicon.css HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f1f4e764479f95ac22b0b77cf9920d5b","sha1":"c6185202501a6084f83273ad6fe099641f11a8d9","sha256":"3c8d0233a1e66ba081468ad728a3032f70f10a5a5c890b0f9541722cba8a5bc8","sha512":"9cee62ab5c81be3db0750c47cb20030f7f0b2ec6c95638b8a130ea22548b7c01a10f5835ed9091cc74059dae399782f751cbaf15cce47982daa28f258e58bd84","ssdeep":"1536:Fc+QQP3ILxAju/j/mZjblpU0UvDfFawWgUipUwRET5yZ03fIJ3:H3uxF/KPbdwRDn3","tlshash":"3993f2ede64e44c13732c886db74b78a60e9fab6c5815c95f85b500deec76a102c4ebc","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.164955Z","times_seen":801,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":62,"dns":5,"connect":37,"send":0,"wait":86,"receive":2,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/img/blog/blog-3.jpg","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/img/blog/blog-3.jpg HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 139098\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 03:14:46 GMT\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":139098,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 565x400, components 3","md5":"abecac2374b69bfbf1fbe1f751af2bfe","sha1":"781881d6416298a043e790fdf8746b7f4f298214","sha256":"76097e57ea90ace6051dbb1bd2444a8ccf4dcc9893d600e080938cc509fe6d8a","sha512":"156f7cc6426c41e4bf86205d72d37b64fa3bbb95094631550a9c732b6dea9a2d792e8b8a395183901515457978ac29b5ca1cce75c5391d5a2d5c254bb9ad246e","ssdeep":"3072:cowBbjNObpdlXVA8rAjS92y47Ofs+W1joFTWrP10FxBARtaP:lmvNObjle8UjSJIOfajosxKyRtc","tlshash":"add31258f23bca28a7b2311b45adec80ba0cdf5c291333c7935d2a65d5cf4226f92751","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.192788Z","times_seen":774,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":583,"dns":0,"connect":0,"send":0,"wait":83,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goldentrustcredit.com/temp/custom/assets/js/jquery.appear.js","fqdn":"goldentrustcredit.com","domain":"goldentrustcredit.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goldentrustcredit.com/","date":"2026-02-14T03:14:46.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldentrustcredit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:42:30 GMT","end":"Mon, 11 May 2026 07:42:29 GMT"},"fingerprint":{"sha1":"2F:7B:F8:42:F0:13:31:4D:11:36:01:C9:AB:B7:1D:4A:E4:DF:7A:47","sha256":"33:B6:03:0D:9C:EB:A9:FE:77:A9:9E:1E:B7:9C:51:DA:E9:A6:03:DA:56:C7:6B:E9:9E:D5:96:3B:4D:92:A0:C6"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.appear.js HTTP/1.1\r\nHost: goldentrustcredit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goldentrustcredit.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlQ0Ujc2Tmg1K1l5SGtQQnJBbmdhVlE9PSIsInZhbHVlIjoicU1Qd3VVRStEVXdLWE5DeTlUS0tDMVBKWHJDL3JvczFWQ0wxUmR1TkxENUFKUTB4R3loYVQwNmVqWERsODlrRFA1TlNwVU54UFlpcUNucDVDTmhWYnJtYlY4ZEd6dHJQNXc5ZThicDZlYm9vMkVuYTRMWVBGU09KRVhSOERFZksiLCJtYWMiOiIzZjUyMGE3NTcwYmZiZTBmOGZjZjc2N2RkZTg5NDY3MTFhN2MyOTkzYmM4MTVhY2UxZGQyMmFmZDM0ZmMzYmEzIiwidGFnIjoiIn0%3D; grand_session=eyJpdiI6IjZVRUNJUHBtSFFTd2ppOHB1dlpBOGc9PSIsInZhbHVlIjoiU1B0aSt6ZGdhS0w0QTRjZmovSkZ1WlI5ejRpVWRTbjRMTnZENnFtK3F2MW03S1M5QjZ4b1VNV1pDdUlwUUcvbkZhYW1SUWVSMVllSTlCZjBOR2F2czQxdEhpbmNBQXp4YVRWYXczRFQyb1E1dW96VjBVNEZUcFY5TUVYenYwQjMiLCJtYWMiOiIzZWE3ZDc3MDkyOTJmODVlYzA3ZWQ0ZmI4OTFhMmIxMTY0NjNjNzQzODk4NjNmZWQ3NjZmNzcwZGNlY2IwOGZhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Feb 2026 03:14:46 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Thu, 24 Aug 2023 18:09:58 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1198), with no line terminators","md5":"80d1c754b36f693ea7de8d608acc4afe","sha1":"10736302703a32d7682359a36226f341c8982daf","sha256":"b57506318dccce1f06d2545f2db1bead5d46acb07df071aee7651d2c3013105d","sha512":"53f2b2c87a37679c54ae6e4adec6ab5e38aba31bf9ad51c69ada851d85d3b6e9d5cb3a770986d2584203d4f55fe6f03acbc0314afd99d536d70fb020847d68c2","ssdeep":"","tlshash":"0e21a8ca38c6bce583fb311c562f72421161913f574299a31ceadd7c35a6c913c13e68","first_seen":"2023-03-07T17:48:49Z","last_seen":"2026-06-08T16:32:30.188183Z","times_seen":1004,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"goldentrustcredit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/socket-io-Bq1seLiF.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=JKukFvsLC7QS\u0026widgetId=gxkdmi6mltvmrsjlbhcy\u0026bg-color=#CC0000","date":"2026-02-14T03:14:49.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:41:02 GMT","end":"Fri, 24 Apr 2026 11:40:58 GMT"},"fingerprint":{"sha1":"CB:79:F7:0F:D9:75:05:11:53:CF:76:49:3A:11:3C:C2:06:C8:99:67","sha256":"D1:82:C3:B2:8B:09:0F:15:04:8A:D4:70:9E:5F:29:9C:A3:3E:AC:43:9C:7E:4B:68:20:AE:2D:84:3C:1F:F4:EA"}}},"request":{"raw":"GET /assets/socket-io-Bq1seLiF.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-CGUo5UWE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:14:49 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 12 Feb 2026 07:18:42 GMT\r\netag: W/\"698d7ed2-9102\"\r\nage: 74055\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=t6k4E12smV44MfZNYHO9eKuIh5UaKMNVuXsU9hhvPpvyklFOxmv%2BZvR2y4SPBCTghVXvZ2qB%2F4kNvwQw%2Fl92zPahtmUoR1AjiDMOvyHOd0%2FLPJlE837v6D7hivpyoGUbPinYgw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd965c45d4335a6-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1887\u0026min_rtt=409\u0026rtt_var=811\u0026sent=250\u0026recv=57\u0026lost=0\u0026retrans=0\u0026sent_bytes=315113\u0026recv_bytes=2279\u0026delivery_rate=52008534\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=fb00bf3d3401d2d9\u0026ts=3740\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37122,"size_decoded":0,"mime_type":"application/x-javascript","magic":"data","md5":"c4708b47d1b05894dc74a819edb1fe35","sha1":"571ca7b6ba0184fb98330910845c294572e0009c","sha256":"81d7c74fcdcd2ebd103038d7d8d9c7c1ae7089dd90cd0296a1daeed259d09702","sha512":"1865efbdc6661c7b475b3cb2a202253c05c0cda45331d644f46cb1b2243c19301e0c6691a6da366dcd9db42dede81b2781edf021964c8528dd81d85a2d03b88a","ssdeep":"768:4zMhtTwsESn5FFUlffRdMFyRsTngw0IQ2ovp7czzUjEQphySPrY9nZh8bT5Vto/e:Vln11TgBIcv1c/Ubr+C","tlshash":"dcf2f9c8b2a0946683e2a1a290750203f33954557409869cbb2ceef7ed7deca7173f75","first_seen":"2025-12-19T11:10:25.718981Z","last_seen":"2026-06-08T00:29:29.33642Z","times_seen":660,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}