{"report_id":"71ef188f-9d79-4b86-8f46-3205221659d2","version":6,"status":"done","tags":[],"date":"2026-04-13T16:33:08Z","url":{"schema":"https","addr":"bpi-trading.com/#/pages/home/connect","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"172.67.177.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bpi-trading.com/#/pages/home/connect","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"title":"bpi-trading.com/#/pages/home/connect","dom":{"size":32217,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4823), with CRLF, LF line terminators","md5":"856f1d0e4a1eb1e87776b27adab0fc66","sha1":"e7a43c1d2f548d88a569fa961533955a9499c224","sha256":"d684ccb2acf1904428d00d9466426c76416a0f088f7816a97709cf25091eb8b3","sha512":"c0827a63f0b434e7391a40b671daba22d92785d388086a40879c75f58a046e6a13bde5aa3f77c7164ff46be34b87cbd0af0d77dd419d89ec745371d41a6af7a1","ssdeep":"768:DSoLGPo8U9jdZXEnITW+Q9qtyFd5sffLsfrFsfgnsf5CsfGhOlrrxRco/7:DSK/jdZXEnJ+A7Fd5sffLsfrFsfgnsfb","tlshash":"33e2c832b1463927613789047591e73de2278216c6030bf9fbad3b754fc6eeb09a2b45","dom_hash":"domhash5ba6596a2b7a29fbe7464d4632ef8642","first_seen":"2026-04-13T16:33:31.909555Z","last_seen":"2026-04-13T16:33:31.909555Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bpi-trading.com/#/pages/home/connect","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"172.67.177.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T16:33:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bpi-trading.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":39,"request_count":39,"received_data":21535219,"sent_data":19705,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-04-08T22:12:50.414611Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bpi-trading.com/static/js/chunk-vendors.4865ccad.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"421e49c93cdd274c19f035e8f9839d4d","sha1":"eb41bc0497dea62c54b6d2ab7c84a1edb51c0b2e","sha256":"1a11adcbdbf2a24346a10cc98a32c71895abafa81382d9994e6b8acbbb840369","sha512":"2d9a98567579005c8c9612de086f070c7c495692d6939dd137e40ce5ae87ac15a4117209bd7b5ba73cb93843c93f3266dcca4fa5144717d96a9a788f75c957eb","ssdeep":"24576:Pb8k8ClAICbBaCh+hoThutLN/Y8PQ+QLEIxqKi7dc5dRRNjr3pmJeaeQJe1tfzJv:PJqBPdRRNF6WkFV4IRtYlcM","tlshash":"bc16954473c0b48943879f7a772fb1d6f41e18ae3988488be115fca069e562bfee5530","size":4269965,"data":"","first_seen":"2026-04-13T16:33:31.926558Z","last_seen":"2026-04-13T16:33:31.926558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/#/pages/home/connect","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"545b0fc617e59aab8f9592bd7b8d0042","sha1":"c959b643b69099c3a423d82687766579ae17bb8f","sha256":"d21599ad054c507834fe413fc41677b67a1e293ec1d33a0bb6088564e8079936","sha512":"7d42cfaf17fdc9de20984f9ac3bc739115dbc81a25dcd13e1cbfef0f021c1aa3cda45903841abd3f26ebd56b74ecdaf8220db63c642c70f6751c99ff3d414d63","ssdeep":"","tlshash":"71e0c0c360b63d4c01208016304ac0032bb608b2dfc15d610c4c7bb5cef9f4bc86ec59","size":342,"data":"","first_seen":"2025-06-02T03:06:56.199255Z","last_seen":"2026-07-10T21:23:09.762072Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/pages-home-connect.dbfe5917.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"845bf64cfbdfd3dbc7b237d4d574d240","sha1":"4dcf323e670434eb9c7bb9c53ed61723809b80fd","sha256":"34c7fb55b8b8f99f14dff5e77e7cd0b0da6a39ff0b5c4a9c4b00e8cb9f41f98d","sha512":"98aa367b14204c25bde3a0572661e0ef4ad4923b1d6580ec6fe52af15bbbf90b117721dcd1f6b922d51322cc4af14a7d6390ef9564845f0fb8769ba43d3ce86e","ssdeep":"192:UPpfCPNDFeNP05DRsoJCmwNZuJ3BKTTfPwGBm03V/T7e/33DyvMr+BY2:ypa9Fe2dsQx4s0e/33DYM8Y2","tlshash":"4312e8c93fe0e51d27534ba21137f8ede8164c1a5524822fc73adcb225a5a3adce3536","size":9118,"data":"","first_seen":"2026-04-13T16:33:31.915241Z","last_seen":"2026-04-13T16:33:31.915241Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/chunk-vendors.4865ccad.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"421e49c93cdd274c19f035e8f9839d4d","sha1":"eb41bc0497dea62c54b6d2ab7c84a1edb51c0b2e","sha256":"1a11adcbdbf2a24346a10cc98a32c71895abafa81382d9994e6b8acbbb840369","sha512":"2d9a98567579005c8c9612de086f070c7c495692d6939dd137e40ce5ae87ac15a4117209bd7b5ba73cb93843c93f3266dcca4fa5144717d96a9a788f75c957eb","ssdeep":"24576:Pb8k8ClAICbBaCh+hoThutLN/Y8PQ+QLEIxqKi7dc5dRRNjr3pmJeaeQJe1tfzJv:PJqBPdRRNF6WkFV4IRtYlcM","tlshash":"bc16954473c0b48943879f7a772fb1d6f41e18ae3988488be115fca069e562bfee5530","size":4269965,"data":"","first_seen":"2026-04-13T16:33:31.926558Z","last_seen":"2026-04-13T16:33:31.926558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed1969d381cdff552eb76723a1e65b5","sha1":"6877634ec0a94189b3381964b8d0d22cf8838d55","sha256":"987e096a28a551b6d4f63fc459c234607e0f355f34f4d01c6e11051224e5d40f","sha512":"bd28709dcd368c04381e196b6cdac5e7f92b0f8a1b212e9ca554c81f6e789bc4cd5871d2da7d6be9ddd4c91f54e534e4a0e2899993639ef5d907366184769ac3","ssdeep":"","tlshash":"1331e2d63fc06d8503d71bfbf57a72a1f221c455629ca042501a62e17dd0831e8a3677","size":1618,"data":"","first_seen":"2026-04-13T16:33:31.912068Z","last_seen":"2026-04-13T16:33:31.912068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/index.b829621e.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d705df2c677110ac7aa136612f99db6e","sha1":"34b0a3a5f8a964952d6e675609a9e5062eef547c","sha256":"4489e771d8681c7ecb57e08a408e7f3c0fb23e5d64ab132986aa03f51ae963a0","sha512":"97b9ec31ba8b4b2a61ef209973cd6f6f16c3e7439475a4576131d688138edc44f99285e232e33e5a215c4ffe811c933a9873e3802480be077662cca633d20b9f","ssdeep":"12288:g0pv1V93fGABTjZbT9wbi+V6iKme7btbY89eTz3jD8SIxC0:d3fPT9zty0","tlshash":"13f460c7e2ccd6ec02c60f66a31db598e9564905e608acc1a3c9d94dfcfd706b46ca72","size":728627,"data":"","first_seen":"2026-04-13T16:33:31.910847Z","last_seen":"2026-04-13T16:33:31.910847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/chunk-vendors.4865ccad.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"421e49c93cdd274c19f035e8f9839d4d","sha1":"eb41bc0497dea62c54b6d2ab7c84a1edb51c0b2e","sha256":"1a11adcbdbf2a24346a10cc98a32c71895abafa81382d9994e6b8acbbb840369","sha512":"2d9a98567579005c8c9612de086f070c7c495692d6939dd137e40ce5ae87ac15a4117209bd7b5ba73cb93843c93f3266dcca4fa5144717d96a9a788f75c957eb","ssdeep":"24576:Pb8k8ClAICbBaCh+hoThutLN/Y8PQ+QLEIxqKi7dc5dRRNjr3pmJeaeQJe1tfzJv:PJqBPdRRNF6WkFV4IRtYlcM","tlshash":"bc16954473c0b48943879f7a772fb1d6f41e18ae3988488be115fca069e562bfee5530","size":4269965,"data":"","first_seen":"2026-04-13T16:33:31.926558Z","last_seen":"2026-04-13T16:33:31.926558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/index.b829621e.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d705df2c677110ac7aa136612f99db6e","sha1":"34b0a3a5f8a964952d6e675609a9e5062eef547c","sha256":"4489e771d8681c7ecb57e08a408e7f3c0fb23e5d64ab132986aa03f51ae963a0","sha512":"97b9ec31ba8b4b2a61ef209973cd6f6f16c3e7439475a4576131d688138edc44f99285e232e33e5a215c4ffe811c933a9873e3802480be077662cca633d20b9f","ssdeep":"12288:g0pv1V93fGABTjZbT9wbi+V6iKme7btbY89eTz3jD8SIxC0:d3fPT9zty0","tlshash":"13f460c7e2ccd6ec02c60f66a31db598e9564905e608acc1a3c9d94dfcfd706b46ca72","size":728627,"data":"","first_seen":"2026-04-13T16:33:31.910847Z","last_seen":"2026-04-13T16:33:31.910847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/pages-home-connect.dbfe5917.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"845bf64cfbdfd3dbc7b237d4d574d240","sha1":"4dcf323e670434eb9c7bb9c53ed61723809b80fd","sha256":"34c7fb55b8b8f99f14dff5e77e7cd0b0da6a39ff0b5c4a9c4b00e8cb9f41f98d","sha512":"98aa367b14204c25bde3a0572661e0ef4ad4923b1d6580ec6fe52af15bbbf90b117721dcd1f6b922d51322cc4af14a7d6390ef9564845f0fb8769ba43d3ce86e","ssdeep":"192:UPpfCPNDFeNP05DRsoJCmwNZuJ3BKTTfPwGBm03V/T7e/33DyvMr+BY2:ypa9Fe2dsQx4s0e/33DYM8Y2","tlshash":"4312e8c93fe0e51d27534ba21137f8ede8164c1a5524822fc73adcb225a5a3adce3536","size":9118,"data":"","first_seen":"2026-04-13T16:33:31.915241Z","last_seen":"2026-04-13T16:33:31.915241Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed1969d381cdff552eb76723a1e65b5","sha1":"6877634ec0a94189b3381964b8d0d22cf8838d55","sha256":"987e096a28a551b6d4f63fc459c234607e0f355f34f4d01c6e11051224e5d40f","sha512":"bd28709dcd368c04381e196b6cdac5e7f92b0f8a1b212e9ca554c81f6e789bc4cd5871d2da7d6be9ddd4c91f54e534e4a0e2899993639ef5d907366184769ac3","ssdeep":"","tlshash":"1331e2d63fc06d8503d71bfbf57a72a1f221c455629ca042501a62e17dd0831e8a3677","size":1618,"data":"","first_seen":"2026-04-13T16:33:31.912068Z","last_seen":"2026-04-13T16:33:31.912068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/index.b829621e.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d705df2c677110ac7aa136612f99db6e","sha1":"34b0a3a5f8a964952d6e675609a9e5062eef547c","sha256":"4489e771d8681c7ecb57e08a408e7f3c0fb23e5d64ab132986aa03f51ae963a0","sha512":"97b9ec31ba8b4b2a61ef209973cd6f6f16c3e7439475a4576131d688138edc44f99285e232e33e5a215c4ffe811c933a9873e3802480be077662cca633d20b9f","ssdeep":"12288:g0pv1V93fGABTjZbT9wbi+V6iKme7btbY89eTz3jD8SIxC0:d3fPT9zty0","tlshash":"13f460c7e2ccd6ec02c60f66a31db598e9564905e608acc1a3c9d94dfcfd706b46ca72","size":728627,"data":"","first_seen":"2026-04-13T16:33:31.910847Z","last_seen":"2026-04-13T16:33:31.910847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed1969d381cdff552eb76723a1e65b5","sha1":"6877634ec0a94189b3381964b8d0d22cf8838d55","sha256":"987e096a28a551b6d4f63fc459c234607e0f355f34f4d01c6e11051224e5d40f","sha512":"bd28709dcd368c04381e196b6cdac5e7f92b0f8a1b212e9ca554c81f6e789bc4cd5871d2da7d6be9ddd4c91f54e534e4a0e2899993639ef5d907366184769ac3","ssdeep":"","tlshash":"1331e2d63fc06d8503d71bfbf57a72a1f221c455629ca042501a62e17dd0831e8a3677","size":1618,"data":"","first_seen":"2026-04-13T16:33:31.912068Z","last_seen":"2026-04-13T16:33:31.912068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"bpi-trading.com/static/js/index.b829621e.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:46.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/index.b829621e.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 15:32:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3d218-b1e33\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=531k3U4GGd59OhmtV4ayMvZLyw1%2F6rG9jOhdoq08vF%2BwJiwkzd5CO%2FfOqlnZ97UXJ8jM84FVOc%2BiUSSsLgio9VyhQgXwwwhozlK2Hlfzs5O%2FSYByKc6wW%2FUrxX1zwA5UYHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde60fb20c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65370), with no line terminators","md5":"d705df2c677110ac7aa136612f99db6e","sha1":"34b0a3a5f8a964952d6e675609a9e5062eef547c","sha256":"4489e771d8681c7ecb57e08a408e7f3c0fb23e5d64ab132986aa03f51ae963a0","sha512":"97b9ec31ba8b4b2a61ef209973cd6f6f16c3e7439475a4576131d688138edc44f99285e232e33e5a215c4ffe811c933a9873e3802480be077662cca633d20b9f","ssdeep":"12288:g0pv1V93fGABTjZbT9wbi+V6iKme7btbY89eTz3jD8SIxC0:d3fPT9zty0","tlshash":"13f460c7e2ccd6ec02c60f66a31db598e9564905e608acc1a3c9d94dfcfd706b46ca72","first_seen":"2026-04-13T16:33:31.910847Z","last_seen":"2026-04-13T16:33:31.910847Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:48.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/adapt-pc/pc.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:57:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c9c1-652\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdrErKzfoKb0kVOicboq8NQvCveI6YYuoPt2h86K22aUeEBH81tGdP4mYgIyFeQ1s96iBehC39qu9s2uUeutBaf%2BDWSw%2BrOKn7H1RNq2RQ1WjffPOEb1m2xx2n2UIGZ0GzM%3D\"}]}\r\ncf-ray: 9ebbde6c6822b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1618), with no line terminators","md5":"eed1969d381cdff552eb76723a1e65b5","sha1":"6877634ec0a94189b3381964b8d0d22cf8838d55","sha256":"987e096a28a551b6d4f63fc459c234607e0f355f34f4d01c6e11051224e5d40f","sha512":"bd28709dcd368c04381e196b6cdac5e7f92b0f8a1b212e9ca554c81f6e789bc4cd5871d2da7d6be9ddd4c91f54e534e4a0e2899993639ef5d907366184769ac3","ssdeep":"","tlshash":"1331e2d63fc06d8503d71bfbf57a72a1f221c455629ca042501a62e17dd0831e8a3677","first_seen":"2026-04-13T16:33:31.912068Z","last_seen":"2026-04-13T16:33:31.912068Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/chunk-vendors.4865ccad.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:48.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/chunk-vendors.4865ccad.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 15:07:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3cc36-41278d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWqdTZEywwdKs4Wu0OwqEE1BxhKNmPIWg5KPbkRjQeu6L%2BlpP%2FeapqMmzQwqCTWnn1QXpb2DA27LSIs7bBNuFzwWj89pQ%2FllKAAe0jvpsMVzGNYyP2y1oKW0N15k2obOWmI%3D\"}]}\r\ncf-ray: 9ebbde6c6825b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4269965,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"69ac94246e3d143ac21d5f07537f19c4","sha1":"af1aef02316b664a6945307ee43cff54967109c0","sha256":"edc54d835a2b2e6674f1632be09882be2fcfddda5b5c4cf81db0f7ca27a28589","sha512":"6ce9b74ba0fa2ec9fd724ae5610428d1842753881e3f951cb2836f0739f3e131970b3817d598dff92b1de51b3291d41dd98988a54999809ac4cd162563c5b428","ssdeep":"24576:Pb8k8ClAICbBaCh+hoThutLN/Y8PQ+QLEIxqKi7dL:PJqB2","tlshash":"9c25618067d0b84813979f79772bb0d6f45e18af3958084fe211fca065a962bfef5831","first_seen":"2026-04-13T16:33:31.913134Z","last_seen":"2026-04-13T16:33:31.913134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon2.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:49.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon2.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6r6B3Q0dj%2BTVJbAhu9Hs7P34SvcBuDgzG1%2FZ8JdbtKbAaDvcWLxhFLIRs7xsydLzy4Ob%2FWARUbMf8u0W0gG47OLz9FsdALlTTk8AaBGYlzt1IOUf%2F9GTzCkttWrR0%2FBx5E%3D\"}]}\r\netag: W/\"69d3c98f-27d\"\r\ncontent-encoding: br\r\ncf-ray: 9ebbde72aa95a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0854c8cbcd9bb2cce30d026266c77bac","sha1":"bd98513e424906e91ee8cdd1a3e0330a84c625e6","sha256":"39466386a593c19beb0a9372e3160c06fa17febfd84ee665a043609e7977f390","sha512":"b5814fab90a2148cd9813e37ed32ff34f288ffdaa7d027bf80372e11acee0d35c578b3d05ed6b0a310359948f1015866352156cdbab4fdf7cb8fc50ae3aa022c","ssdeep":"","tlshash":"edf0c2eaab480d3cbb738b34f724327590b272138b4c2158c9363977265a54c7a3f9c8","first_seen":"2025-06-22T10:40:26.695148Z","last_seen":"2026-08-08T03:31:35.513867Z","times_seen":111,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon5.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:49.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon5.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c991-43e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xF8uk5XuImNH2TLD9sQTEoFW1M2EKL8pgNlXDqzORLKXbgYY5PSckMRVdXOIs1Rjf4CkBLsau5P6qntSyccFgtX2vlsbLSl2yoVSAvFV0HtAYDgyZrg%2FGlp%2FCtyxpPCHocI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde72babca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2694870b6edfbd5f34c3f0d8bb4c306b","sha1":"053e4cc8443effe6fc5ee5ec67e5fedae92778a0","sha256":"e76e7ef6a7cb3a9eb7afa7ea01edae6816d143b52ba89463be628d973f33fc61","sha512":"ce482963a56cd2b202ebe8abfe960a37f053a4ca92a0053c0b7d96217d67dfa81b8ef535d8a11acd118ebb0ba9a822faf58780334f006a4242556aafafa057ba","ssdeep":"","tlshash":"911129dd57089d3cba324734f72176b0a12b32435f6d6264c93a28732219a4d797fdd8","first_seen":"2025-06-22T10:40:26.719187Z","last_seen":"2026-08-08T03:31:35.524244Z","times_seen":111,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/pages-home-connect.dbfe5917.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/pages-home-connect.dbfe5917.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 15:40:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3d403-239e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gI4OuRJ1nnbdtkTZdVGfChkfQ8lLgdx%2ByjrnlsZm2cd0PgLOjyI%2B3Bqemzftb%2Fv7i31GgwVjXxzOq5opwamRknaTP%2FpxM3tUjj6jIeMyC6GkS83NTiKKvEwvexHtDWblPfc%3D\"}]}\r\ncf-ray: 9ebbde69ee1ab500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8624), with no line terminators","md5":"845bf64cfbdfd3dbc7b237d4d574d240","sha1":"4dcf323e670434eb9c7bb9c53ed61723809b80fd","sha256":"34c7fb55b8b8f99f14dff5e77e7cd0b0da6a39ff0b5c4a9c4b00e8cb9f41f98d","sha512":"98aa367b14204c25bde3a0572661e0ef4ad4923b1d6580ec6fe52af15bbbf90b117721dcd1f6b922d51322cc4af14a7d6390ef9564845f0fb8769ba43d3ce86e","ssdeep":"192:UPpfCPNDFeNP05DRsoJCmwNZuJ3BKTTfPwGBm03V/T7e/33DyvMr+BY2:ypa9Fe2dsQx4s0e/33DYM8Y2","tlshash":"4312e8c93fe0e51d27534ba21137f8ede8164c1a5524822fc73adcb225a5a3adce3536","first_seen":"2026-04-13T16:33:31.915241Z","last_seen":"2026-04-13T16:33:31.915241Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/h5_logo1.png","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:48.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/h5_logo1.png HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:48 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c989-19031c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQ7saqYMvzSfJWdKYMDuUqbZjHI6rDjMJK9GQe7PBuB78rQxv1Ll3h8GFFljs65EhyOGY817Bu1CRltXNOZqdJfVzXnpfQlopTUu6zGzSB%2B8%2FreHzba6K4R%2BwswPS9ku3hg%3D\"}]}\r\ncf-ray: 9ebbde6c581ab500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1639196,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1648 x 1360, 8-bit/color RGB, non-interlaced","md5":"901642ffcbbc1e16d82990044f808d2f","sha1":"4f6c4db1f1efdfa95a024d9b05b8f1439b147a5f","sha256":"15fe6e9e55704972a94d3d9d2ba31fedfbaa21d41d2c58bc0214a7c46791052e","sha512":"0ed7a8aa2c12629645b9751ac080686aa50c84faf8e3ce261a85cc1c12c82ac7b06922cf8dad3e97a339575bbfa8615b00a195b354f172d92f086c907d6c46af","ssdeep":"24576:EorMhuBw1IW8J2bjrXKs7wIBXJ/ZKjByt/dFVTk:McHv2jrXZ7wIpJ/ZKjGVI","tlshash":"2f25338f6382aed58dc43c7844d8c8a5cf94b6d60590a663638c3e7c46faa61db1dd0b","first_seen":"2026-04-13T16:33:31.916202Z","last_seen":"2026-04-13T16:33:31.916202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.css","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:48.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/adapt-pc/pc.css HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEEPVYdLkUUSmQDgN1ej69VB9nJo1fdrj5GY0gU8OH%2FUHWvFcUVqp7e%2FKrJJ7o6oLb5UjK9GbQqgcuDMPbmTF%2BX8J8anF5k5ntLMAIl8ftnswNJYLvxHMdsMw5OEEaRNX3k%3D\"}]}\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69d3c9c0-283\"\r\ncontent-encoding: br\r\ncf-ray: 9ebbde6c6820b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d60e8626df3e2443ca5090eca10b72c0","sha1":"e7fe46887041c2e64075c4a02620e36570e6f025","sha256":"0bfc9b2499df4246575a9d31734a20786ffc65660e1bb6bcc25ab69062b73a18","sha512":"15135f787692e328198cc6c41eae0d947b8edeaa512a1dffe4b5f412eaec23929b016ca873c882a8a49d222c7527080b4b946f795c43b9aef8ffd89b65860679","ssdeep":"","tlshash":"9bf04c799ee07041d17dc6e12ba5d66c7eba0011770a4276fff4366692cf2b70860ec9","first_seen":"2026-04-13T16:33:31.917007Z","last_seen":"2026-04-13T16:33:31.917007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/index.b829621e.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:48.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/index.b829621e.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 15:32:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3d218-b1e33\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6Mzq%2F0LXTuHtZHkImq0zINniEj6kJCIFzsHCzQfUmnfHjLRfhQct4MGMujkOoj4YnNIF5lKeyzJaeZhH60Rsp0HfbuXyqiJrJAbQ2aBxLZ0LFkq%2FoyjnZU2QQ5FQf0nviM%3D\"}]}\r\ncf-ray: 9ebbde6c6826b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":728627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65370), with no line terminators","md5":"d705df2c677110ac7aa136612f99db6e","sha1":"34b0a3a5f8a964952d6e675609a9e5062eef547c","sha256":"4489e771d8681c7ecb57e08a408e7f3c0fb23e5d64ab132986aa03f51ae963a0","sha512":"97b9ec31ba8b4b2a61ef209973cd6f6f16c3e7439475a4576131d688138edc44f99285e232e33e5a215c4ffe811c933a9873e3802480be077662cca633d20b9f","ssdeep":"12288:g0pv1V93fGABTjZbT9wbi+V6iKme7btbY89eTz3jD8SIxC0:d3fPT9zty0","tlshash":"13f460c7e2ccd6ec02c60f66a31db598e9564905e608acc1a3c9d94dfcfd706b46ca72","first_seen":"2026-04-13T16:33:31.910847Z","last_seen":"2026-04-13T16:33:31.910847Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.css","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:45.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/adapt-pc/pc.css HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cx97WomlpllcfhL4nm3dn6IzH5lrM26tXZQGI7by00I%2FuSESuWwiI2mrsHXG%2Fz79yGEwU6i6jZeFBwu3nh5xUQcGTb%2Bk5Oo3MWXTlJEgOgHrBWWtPa65dE%2BRMsD3vgiQKtg%3D\"}]}\r\netag: W/\"69d3c9c0-283\"\r\ncontent-encoding: br\r\ncf-ray: 9ebbde5a0fd5c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d60e8626df3e2443ca5090eca10b72c0","sha1":"e7fe46887041c2e64075c4a02620e36570e6f025","sha256":"0bfc9b2499df4246575a9d31734a20786ffc65660e1bb6bcc25ab69062b73a18","sha512":"15135f787692e328198cc6c41eae0d947b8edeaa512a1dffe4b5f412eaec23929b016ca873c882a8a49d222c7527080b4b946f795c43b9aef8ffd89b65860679","ssdeep":"","tlshash":"9bf04c799ee07041d17dc6e12ba5d66c7eba0011770a4276fff4366692cf2b70860ec9","first_seen":"2026-04-13T16:33:31.917007Z","last_seen":"2026-04-13T16:33:31.917007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/favicon-16x16.png","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 839\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:50:57 GMT\r\netag: \"69d3c851-347\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQQkkkJnzeN7Pc6wV92aLibwanpOYj%2FyGq673tsLDaRYvrxLsgZL%2FYeAkeF2Fv6cu%2FPllrz8kgsj4KoIOsT8kQ3P2J4GmxywVUgtT3t69z2XgwwZZOJZdjW%2FZYB98mvmZFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde66295ec759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, interlaced","md5":"eb9621e501cc71537cd9221a97fd0712","sha1":"aba0e6c36b3cc31e7591eb67ecadf93715594916","sha256":"9819d76230956d1270dff4b7771b3e3c59e864a41a5424220dbe9887b379a026","sha512":"60b7ecf96be21cb93f56c9a365c741536e2d86031e3a8eaf0e58762ee625423337843b074a20260ae86bea42c44d1b349f9fd47274d26cc0b728c7a74cd43e06","ssdeep":"","tlshash":"d40156d74bb87d18876b1053991224e49e712bff6580a40b2364c636d901eed4c307b6","first_seen":"2026-04-13T16:33:31.917929Z","last_seen":"2026-04-13T16:33:31.917929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/#/pages/home/connect","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:52:23 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPeTqHdOgu07tGorEddzW6JVSAnBir2%2Fh8q1lRdn2Sc1Qkus3GeZsp4pSWM7hF7uGX9nO48jdsh3RZl0YG7Yp%2BGl7TXRdr7U6Q1OX4PvMAIytKDqjQuJp7qkk6nU86Ik2TU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ebbde67fc74b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1776), with CRLF line terminators","md5":"1cc195e1551ace4b2bad279bfb32baa7","sha1":"044c6f337f84262c4f88c1004af5f58bf43bb584","sha256":"badffe8cf0a0f0e4614bd2c1beb46a08e8b497ad633b0d865ee792bd9284574c","sha512":"37e724608968a6b579c2b0cbe24eac952cf614f32451dcb6f88d4c48d5d7a51e27c630296856f4a64c3e5e1794483c0e1e62b0eb9a9cfd52d40ca3cd122485a0","ssdeep":"","tlshash":"ba5162439d14d44e1730d322f56af06ee2e7c269de708414b6da00de44f2eed8976627","first_seen":"2026-04-13T16:33:31.918767Z","last_seen":"2026-04-13T16:33:31.918767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":17,"dns":2,"connect":1,"send":0,"wait":185,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/connect_logo.png","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:48.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/connect_logo.png HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:48 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:53:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c8ee-5d744\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lPwEQ2Lg84jBONqXCN1QOgaNn6faayIhQNmj9JRr%2BG1i3QwnbeaiTeog2%2FCjrLUwq%2BLg0WWQFw1Oi%2BFfAHsNcWMlYHMvgdTjLQkWz1H%2FbZcksBSnrnZEoEG5%2BD3oREtq7Q%3D\"}]}\r\ncf-ray: 9ebbde6c5812b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGB, non-interlaced","md5":"1d55ace1030a4e0aa5efced3b6821d80","sha1":"7db0bdc39379eefa6f284b943f12a4eaa7b4bf22","sha256":"f778874c314a878366c7f83bf8b5b9f9e2e3ed033a31b3f7e200dff54c258499","sha512":"75dc14a947a65d4d4d40c3512dde99fd410b7cf5c939728aae76db0dc9b75444f1c08731fe8f61fbb55569de6c1cf7315eb002a3bbc328774a34b48b59432490","ssdeep":"6144:+Hb2mM4khU0ipW40maWHDdKCUu3sCVyYJvTiv6+L3d6Ze8+Mfa1kMWvqitDk3e7U:simM4kS0inBKjQyYrip30Zh+MfaLAdD6","tlshash":"5e84236a2e31d254cd8f53bae7e46fa3a2c758cbe2ee044a454e3af88476d37c754110","first_seen":"2026-04-13T16:33:31.919674Z","last_seen":"2026-04-13T16:33:31.919674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon3.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:49.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon3.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c990-a7a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hkHvHc6f68BL0lQijhyMSD82fnawksWittnrLSm6EA0Ze8seVjfwDEGkC8UeOlu%2FzeB43tmpqKEXr%2FD8L8QSY9BgqwwHnZYMhLf8QcWBLZAB17qiB7nqEoC9TwaThDp3AE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde72baa2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2682,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a77c689dbeaaca629e58dd31b6bf9312","sha1":"ce499209c8e6062f0d0c57fc825d554708b9affc","sha256":"ac4ec25fde7152c7da4440bbdfab441cea966b9f25629590a9516cb8a89d1203","sha512":"54492a3c6da4287a6af9127df8c96d1195a0d27b534e3f7e88fc979101de4353c51bff0eecde99909afa423f9596b2a2664a08c778f5419369f407506f8b7ce5","ssdeep":"","tlshash":"b2517cd657889afcf13177acdb11b230317b247b3a2af706852225b1a90619c9dbf8c4","first_seen":"2025-06-22T10:40:26.73605Z","last_seen":"2026-08-08T03:31:35.5257Z","times_seen":111,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/connect_logo.png","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:49.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/connect_logo.png HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:53:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c8ee-5d744\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVwMFcnYj1b%2Bcetkv9edPU1uUY3q0fvlPCauNJuD%2FJ24u%2FcyPuHpqpin1MHJvF5cKDNeP1aU3hBWNZqiOUB%2FeOKb7Pr5BX8JV00ICIGnUTYr3mklGhDHpi0Feidj2hStfKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde735ceaa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGB, non-interlaced","md5":"1d55ace1030a4e0aa5efced3b6821d80","sha1":"7db0bdc39379eefa6f284b943f12a4eaa7b4bf22","sha256":"f778874c314a878366c7f83bf8b5b9f9e2e3ed033a31b3f7e200dff54c258499","sha512":"75dc14a947a65d4d4d40c3512dde99fd410b7cf5c939728aae76db0dc9b75444f1c08731fe8f61fbb55569de6c1cf7315eb002a3bbc328774a34b48b59432490","ssdeep":"6144:+Hb2mM4khU0ipW40maWHDdKCUu3sCVyYJvTiv6+L3d6Ze8+Mfa1kMWvqitDk3e7U:simM4kS0inBKjQyYrip30Zh+MfaLAdD6","tlshash":"5e84236a2e31d254cd8f53bae7e46fa3a2c758cbe2ee044a454e3af88476d37c754110","first_seen":"2026-04-13T16:33:31.919674Z","last_seen":"2026-04-13T16:33:31.919674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:45.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/adapt-pc/pc.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:57:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c9c1-652\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aK%2F5E9DzzWnIYmOlDZ3mp%2FTih%2F3E5IX0Ii8tPK53T5xs0YQdBP3xPSdv0frw1mKhUjkcumjvOqDXTP65mUusaJlAt%2FlyYdSNjsWbpY8JWsquIofCcIgVtv1YH9Jdj59X57w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde5a0fd9c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1618), with no line terminators","md5":"eed1969d381cdff552eb76723a1e65b5","sha1":"6877634ec0a94189b3381964b8d0d22cf8838d55","sha256":"987e096a28a551b6d4f63fc459c234607e0f355f34f4d01c6e11051224e5d40f","sha512":"bd28709dcd368c04381e196b6cdac5e7f92b0f8a1b212e9ca554c81f6e789bc4cd5871d2da7d6be9ddd4c91f54e534e4a0e2899993639ef5d907366184769ac3","ssdeep":"","tlshash":"1331e2d63fc06d8503d71bfbf57a72a1f221c455629ca042501a62e17dd0831e8a3677","first_seen":"2026-04-13T16:33:31.912068Z","last_seen":"2026-04-13T16:33:31.912068Z","times_seen":1,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/#/pages/home/connect","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:45.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:52:23 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5sGtds2Aa41m4pOEPrscUr6Bw8uzij6IACtbjPXJvDo4sniUo4%2BcWtQf6YAAp4xpy8dv2nyKEHFMEsyZFYBLs8uJ%2FiA52QNNWtuDLagzOxkZG%2BjkDZ%2BBzktX2NAG3eawMo%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ebbde5e0b5bc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1776), with CRLF line terminators","md5":"1cc195e1551ace4b2bad279bfb32baa7","sha1":"044c6f337f84262c4f88c1004af5f58bf43bb584","sha256":"badffe8cf0a0f0e4614bd2c1beb46a08e8b497ad633b0d865ee792bd9284574c","sha512":"37e724608968a6b579c2b0cbe24eac952cf614f32451dcb6f88d4c48d5d7a51e27c630296856f4a64c3e5e1794483c0e1e62b0eb9a9cfd52d40ca3cd122485a0","ssdeep":"","tlshash":"ba5162439d14d44e1730d322f56af06ee2e7c269de708414b6da00de44f2eed8976627","first_seen":"2026-04-13T16:33:31.918767Z","last_seen":"2026-04-13T16:33:31.918767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/chunk-vendors.4865ccad.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:46.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/chunk-vendors.4865ccad.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 15:07:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3cc36-41278d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9V%2BepVnkpD4Ys01UxndXJQuCyewMMwp3uZaQw9z0cjDd08ocAm4IxJorVd07V78NE2woF%2F8ez7xM2JCgcAMh9wpzjPCgR9jFcR2%2F1fkjfiGCPbfLqF4RWrcVPb2HcINPho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde60eb0bc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4269965,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"69ac94246e3d143ac21d5f07537f19c4","sha1":"af1aef02316b664a6945307ee43cff54967109c0","sha256":"edc54d835a2b2e6674f1632be09882be2fcfddda5b5c4cf81db0f7ca27a28589","sha512":"6ce9b74ba0fa2ec9fd724ae5610428d1842753881e3f951cb2836f0739f3e131970b3817d598dff92b1de51b3291d41dd98988a54999809ac4cd162563c5b428","ssdeep":"24576:Pb8k8ClAICbBaCh+hoThutLN/Y8PQ+QLEIxqKi7dL:PJqB2","tlshash":"9c25618067d0b84813979f79772bb0d6f45e18af3958084fe211fca065a962bfef5831","first_seen":"2026-04-13T16:33:31.913134Z","last_seen":"2026-04-13T16:33:31.913134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon3.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon3.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c990-a7a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPpyJMYDg8NWyoG1ayKKi5OIA%2Fm9xLP270GweoHg2T5Cx2a8WzGGfBggSTAvonaKcPeHsU6qDrwVN2TVjbPr8U93dXoXIxsk1Kv%2BZttGt3T2eGfUHseelDs22eSLR70Pf5A%3D\"}]}\r\ncf-ray: 9ebbde6a0e30b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2682,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a77c689dbeaaca629e58dd31b6bf9312","sha1":"ce499209c8e6062f0d0c57fc825d554708b9affc","sha256":"ac4ec25fde7152c7da4440bbdfab441cea966b9f25629590a9516cb8a89d1203","sha512":"54492a3c6da4287a6af9127df8c96d1195a0d27b534e3f7e88fc979101de4353c51bff0eecde99909afa423f9596b2a2664a08c778f5419369f407506f8b7ce5","ssdeep":"","tlshash":"b2517cd657889afcf13177acdb11b230317b247b3a2af706852225b1a90619c9dbf8c4","first_seen":"2025-06-22T10:40:26.73605Z","last_seen":"2026-08-08T03:31:35.5257Z","times_seen":111,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon6.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:49.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon6.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XD0oo%2F4ECktYW2Pov7xfckykKOaLVsTidg3M03%2B4S9D6ve7q9irTmZvQfDcXzoeiVD9xHL2%2FlUMMD%2BgynKi3NWyKmIKdXwPKN%2FPEc0velaPDiwRQtVEzfqzCgHTsgauBylY%3D\"}]}\r\netag: W/\"69d3c992-3a3\"\r\ncontent-encoding: br\r\ncf-ray: 9ebbde72aa80a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":931,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d89b3c65b3b8de0ab02378026906c1a","sha1":"a172b3634b1c883c1d22d41f8746c4fde605e7f2","sha256":"19f3cfcc2a9727c72a3d1242d97933fdd6c58d339533b5a6b6c2047c5ee769af","sha512":"1078266cb30df68632310431795af4c3a28107c1c148af5ffc9f2483fa3870cfb0a46ce3572a4501e1bd2f3361182e778c5e57eb4b563164fa790f2d7afc80b3","ssdeep":"","tlshash":"7911259e97080c3cb6234b60d7463771b1370e632a09f764d83232316a11a0db47f9e8","first_seen":"2025-06-22T10:40:26.740997Z","last_seen":"2026-08-08T03:31:35.523729Z","times_seen":108,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/#/pages/home/connect","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T16:32:44.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:52:23 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9aI50IyyzkyNVe%2BajrsHyOMotrLORPz6f0%2BwWGMvsgyAztas5P%2Bk3LfKOwqq0Hdq0OSoi6v7iLQ1KL9JmLqulJY3gLqB%2Fprg8I0CkGKuGEkCca1vTBMhJey0Xfcidfby8g4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ebbde563f5e568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1776), with CRLF line terminators","md5":"1cc195e1551ace4b2bad279bfb32baa7","sha1":"044c6f337f84262c4f88c1004af5f58bf43bb584","sha256":"badffe8cf0a0f0e4614bd2c1beb46a08e8b497ad633b0d865ee792bd9284574c","sha512":"37e724608968a6b579c2b0cbe24eac952cf614f32451dcb6f88d4c48d5d7a51e27c630296856f4a64c3e5e1794483c0e1e62b0eb9a9cfd52d40ca3cd122485a0","ssdeep":"","tlshash":"ba5162439d14d44e1730d322f56af06ee2e7c269de708414b6da00de44f2eed8976627","first_seen":"2026-04-13T16:33:31.918767Z","last_seen":"2026-04-13T16:33:31.918767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":58,"dns":42,"connect":1,"send":0,"wait":445,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/index.b829621e.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:45.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/index.b829621e.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 15:32:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3d218-b1e33\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qq1rwQyx1HYU31y3aLzaRrKR3J16obcW%2B95k2Ll3LEwgKt7NmLE81YqdSCNVVzqwYbp4SPgrR0em526hygqqlsgZUNXeAQdDsyFTKUkNrff047%2BeclGTEfu4tMGQ%2B3jEHsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde5a0fedc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":728627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65370), with no line terminators","md5":"e75ea99d6d94e92c7209ff3db9df59a0","sha1":"88ee99953172b804d4956d5a62b6617ea317e119","sha256":"b5630d7b638027c482bb7fd5252f788f16356ba11d13bcb0f44f28a3320d4809","sha512":"19d39749f650e159b7ee29967d0df926726fa37e4fc302f2a1da313f3ed7eccbf20f689a95ceb165cad5e355c82f67ee51b5f3997bf1a358ee0e6e5f2429b220","ssdeep":"12288:g0pv1V93fGABTjZbT9wbi+V6iKme7btUydsWIC7EU7fBCQ+Li:d3fPT9ztoQQi","tlshash":"35053ec3e1c9c3dc01c67fa9671da798ab550906a3485ccd97e9ec48f9fe212b19c932","first_seen":"2026-04-13T16:33:31.922027Z","last_seen":"2026-04-13T16:33:31.922027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":431,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/chunk-vendors.4865ccad.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:45.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/chunk-vendors.4865ccad.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 15:07:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3cc36-41278d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2B64JWD85bUxhs5Ci36miOxxfSLjY76Jruw%2BwrFhZ1SgpZt7nmTNfiwF%2FarNgr1MBrXBFfkLjEGRddaSbCQr04uFRKBTSgAMGj3HyJ%2B%2Fhe0YWvn1GFM4cCiMMciDwn4sOtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde5a0fdcc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4269965,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"69ac94246e3d143ac21d5f07537f19c4","sha1":"af1aef02316b664a6945307ee43cff54967109c0","sha256":"edc54d835a2b2e6674f1632be09882be2fcfddda5b5c4cf81db0f7ca27a28589","sha512":"6ce9b74ba0fa2ec9fd724ae5610428d1842753881e3f951cb2836f0739f3e131970b3817d598dff92b1de51b3291d41dd98988a54999809ac4cd162563c5b428","ssdeep":"24576:Pb8k8ClAICbBaCh+hoThutLN/Y8PQ+QLEIxqKi7dL:PJqB2","tlshash":"9c25618067d0b84813979f79772bb0d6f45e18af3958084fe211fca065a962bfef5831","first_seen":"2026-04-13T16:33:31.913134Z","last_seen":"2026-04-13T16:33:31.913134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":702,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:46.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/adapt-pc/pc.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:57:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c9c1-652\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLITo5ptBv4iwCL5AH8X65wI9TADxU7krI3YYZWHBOhSwnAf%2B%2FiWnB3%2BN2CqqSgVl9hYIZklvgFQJl6DqlaqEX0TOsxcowSV3NfQBgeF0vyybKXUhFMMgfiwpnLjCA1eOTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde60eb08c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1618), with no line terminators","md5":"eed1969d381cdff552eb76723a1e65b5","sha1":"6877634ec0a94189b3381964b8d0d22cf8838d55","sha256":"987e096a28a551b6d4f63fc459c234607e0f355f34f4d01c6e11051224e5d40f","sha512":"bd28709dcd368c04381e196b6cdac5e7f92b0f8a1b212e9ca554c81f6e789bc4cd5871d2da7d6be9ddd4c91f54e534e4a0e2899993639ef5d907366184769ac3","ssdeep":"","tlshash":"1331e2d63fc06d8503d71bfbf57a72a1f221c455629ca042501a62e17dd0831e8a3677","first_seen":"2026-04-13T16:33:31.912068Z","last_seen":"2026-04-13T16:33:31.912068Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon6.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon6.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BPe7MCuxGoTf4MHfPeewJQUQbRFWcSQ4PSxujirNLi5rfKnmIB8hSSmzW3G3SxtOIDamrIgu%2Fa7UDCXg3x04ZWPc8u8nRzZ%2BRlnWIYy8SIFN9pMauFKaIoBa4Dh1HG2fYw%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69d3c992-3a3\"\r\ncontent-encoding: br\r\ncf-ray: 9ebbde69fe2bb500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":931,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d89b3c65b3b8de0ab02378026906c1a","sha1":"a172b3634b1c883c1d22d41f8746c4fde605e7f2","sha256":"19f3cfcc2a9727c72a3d1242d97933fdd6c58d339533b5a6b6c2047c5ee769af","sha512":"1078266cb30df68632310431795af4c3a28107c1c148af5ffc9f2483fa3870cfb0a46ce3572a4501e1bd2f3361182e778c5e57eb4b563164fa790f2d7afc80b3","ssdeep":"","tlshash":"7911259e97080c3cb6234b60d7463771b1370e632a09f764d83232316a11a0db47f9e8","first_seen":"2025-06-22T10:40:26.740997Z","last_seen":"2026-08-08T03:31:35.523729Z","times_seen":108,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon2.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon2.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbPEGiTXntSta8czOOljlVolSX4BcqbxvaMO%2FtajEKPWkJkfFB79ox003isONvtijC%2Fhfc6Otjt6p0xb%2B38mBFPWUMdjeIsIz8duQkjVLvx%2BvHHhGQNacbE9xV6%2FrBGlbBI%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69d3c98f-27d\"\r\ncontent-encoding: br\r\ncf-ray: 9ebbde6a0e2fb500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0854c8cbcd9bb2cce30d026266c77bac","sha1":"bd98513e424906e91ee8cdd1a3e0330a84c625e6","sha256":"39466386a593c19beb0a9372e3160c06fa17febfd84ee665a043609e7977f390","sha512":"b5814fab90a2148cd9813e37ed32ff34f288ffdaa7d027bf80372e11acee0d35c578b3d05ed6b0a310359948f1015866352156cdbab4fdf7cb8fc50ae3aa022c","ssdeep":"","tlshash":"edf0c2eaab480d3cbb738b34f724327590b272138b4c2158c9363977265a54c7a3f9c8","first_seen":"2025-06-22T10:40:26.695148Z","last_seen":"2026-08-08T03:31:35.513867Z","times_seen":111,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:51.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 16:32:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 13 Apr 2026 17:02:58 GMT\r\ncache-control: max-age=1800\r\nset-cookie: __uni__uid=rBEQiWndGrqNOOx6A3WlAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-08T08:44:49.359785Z","times_seen":20168,"resource_available":false,"data":null}},"time_used":13991,"timings":{"blocked":6494,"dns":1,"connect":243,"send":0,"wait":1002,"receive":0,"ssl":6248},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/h5_logo1.png","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:45.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/h5_logo1.png HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:45 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c989-19031c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GukVAdz64fvZv97mn16FTvQGX383HbMXeUCMDjiHlnELJ%2BFwe034Wj7ZNV4CSkrLJ6gI%2FWTNj31aBuLSbd2uq5WIDyWO5iNnOBGL6sUBsb1b9fLTJuCZaZzKhspHbzLB2fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde5a0fcbc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1639196,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1648 x 1360, 8-bit/color RGB, non-interlaced","md5":"901642ffcbbc1e16d82990044f808d2f","sha1":"4f6c4db1f1efdfa95a024d9b05b8f1439b147a5f","sha256":"15fe6e9e55704972a94d3d9d2ba31fedfbaa21d41d2c58bc0214a7c46791052e","sha512":"0ed7a8aa2c12629645b9751ac080686aa50c84faf8e3ce261a85cc1c12c82ac7b06922cf8dad3e97a339575bbfa8615b00a195b354f172d92f086c907d6c46af","ssdeep":"24576:EorMhuBw1IW8J2bjrXKs7wIBXJ/ZKjByt/dFVTk:McHv2jrXZ7wIpJ/ZKjGVI","tlshash":"2f25338f6382aed58dc43c7844d8c8a5cf94b6d60590a663638c3e7c46faa61db1dd0b","first_seen":"2026-04-13T16:33:31.916202Z","last_seen":"2026-04-13T16:33:31.916202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":746,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/adapt-pc/pc.css","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:46.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/adapt-pc/pc.css HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wD%2F55uKwZEUGIxjOJ%2BH5Y3UDSXmxLtKcSPeL3%2FvWoHMiSKo6w2zURWPd56vzHEAvokIENAYdGmXYgu7BVBlxTG%2FCwUBM5VynyMJABqeV9i0OR6%2F%2BHGCX21u70%2FGyj7Ln%2F%2FM%3D\"}]}\r\netag: W/\"69d3c9c0-283\"\r\ncontent-encoding: br\r\ncf-ray: 9ebbde60eb01c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d60e8626df3e2443ca5090eca10b72c0","sha1":"e7fe46887041c2e64075c4a02620e36570e6f025","sha256":"0bfc9b2499df4246575a9d31734a20786ffc65660e1bb6bcc25ab69062b73a18","sha512":"15135f787692e328198cc6c41eae0d947b8edeaa512a1dffe4b5f412eaec23929b016ca873c882a8a49d222c7527080b4b946f795c43b9aef8ffd89b65860679","ssdeep":"","tlshash":"9bf04c799ee07041d17dc6e12ba5d66c7eba0011770a4276fff4366692cf2b70860ec9","first_seen":"2026-04-13T16:33:31.917007Z","last_seen":"2026-04-13T16:33:31.917007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon4.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:49.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon4.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c991-450\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=veOVrZwppFtCP8lfD%2BygpDgFxpJF0Li04ZIqRP5nAlqUFmkeLcLswySI00vaXG2%2Biwv8Ne8G3goXs%2BdAoj8Xdrkg%2BprFjyMbpAYlJwOmvS%2BuxZm164PhWLxUgUqRga3UNE4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde72baa6a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f630510914bfde2a67342d60854decad","sha1":"4a111f1e3c63c8b8720b9ca37eb96a672076fdeb","sha256":"1b9a52731101d62150c6957b1184e27021653be32701db407709a40028f924e8","sha512":"48396c9eb1ad8e75689f1f8d53847e56d06f0142d98315db6016ed6a58dfe73b5c1e83186f10860f44bdf0bd93a41b34c5d5244266f66503becc84cc2ba8d780","ssdeep":"","tlshash":"4811328b9b086d7cb7628b70eb167630752b31338b0e6240c5722a33b92615ce53f9c8","first_seen":"2025-10-21T13:52:00.317914Z","last_seen":"2026-07-28T19:27:44.716844Z","times_seen":51,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/pages-home-connect.dbfe5917.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/pages-home-connect.dbfe5917.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon4.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon4.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/index.ed4a2d2b.css","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:48.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/index.ed4a2d2b.css HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c99c-1794e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pZ9Mc9R8JkrFE2ZAVVmSv6h3eX6WE7o%2BVF5ByOh8j8R6lZ%2Bv1pruL2Jc%2FhVRzxCxttCPC%2Fph96oRLH8Tw2JIE%2FiNOQymW%2BEO%2FZz16Da2mTLMZk5WZROfZmSO2vxZ3bJZ1U%3D\"}]}\r\ncf-ray: 9ebbde6c681db500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-08-07T20:03:32.998814Z","times_seen":1815,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/js/pages-home-connect.dbfe5917.js","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:49.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/js/pages-home-connect.dbfe5917.js HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 15:40:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3d403-239e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmUVmTHKAhte%2B0s65DeFtl8972ryHF1NnYJbtz23tuv8PEhQf%2BqiyPiSwOAKaBei6cjabmyuhpCnDTiEFtixJ1FBX9lKDTwUyxy2ffzj5I2amgDX01PNaMhgEvqAFsjt508%3D\"}]}\r\ncf-ray: 9ebbde728dc4b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8624), with no line terminators","md5":"845bf64cfbdfd3dbc7b237d4d574d240","sha1":"4dcf323e670434eb9c7bb9c53ed61723809b80fd","sha256":"34c7fb55b8b8f99f14dff5e77e7cd0b0da6a39ff0b5c4a9c4b00e8cb9f41f98d","sha512":"98aa367b14204c25bde3a0572661e0ef4ad4923b1d6580ec6fe52af15bbbf90b117721dcd1f6b922d51322cc4af14a7d6390ef9564845f0fb8769ba43d3ce86e","ssdeep":"192:UPpfCPNDFeNP05DRsoJCmwNZuJ3BKTTfPwGBm03V/T7e/33DyvMr+BY2:ypa9Fe2dsQx4s0e/33DYM8Y2","tlshash":"4312e8c93fe0e51d27534ba21137f8ede8164c1a5524822fc73adcb225a5a3adce3536","first_seen":"2026-04-13T16:33:31.915241Z","last_seen":"2026-04-13T16:33:31.915241Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/index.ed4a2d2b.css","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:46.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/index.ed4a2d2b.css HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c99c-1794e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jffp6sEFebRp0P1yuVs0M6SWVRRsbEIOp05NkDsSsLgmv97buJHniurUoPMIpomCN%2FVHIy4ZK9b3KYRp07QlLeVOJiQxao3NZnc405IBvNoYm3%2BiMfDWfNB9rEmQISAhI%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde60eaf7c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-08-07T20:03:32.998814Z","times_seen":1815,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/icon-512x512.png","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /icon-512x512.png HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:52:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c8a6-78487\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0wQivJxGo48RH2j5EhtaVExTr3C%2BKnbonBhAeLENL9K4u%2FvbHK08CxAtl7v5WVU16RatS5V%2Fcs9RjHQU1PpwEubSBuhGs5O9LladehqYP8i267yejFXbFBcQ%2Fd6lpSvMVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde66295bc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, interlaced","md5":"08af66db8ee83e42f5cd8a0ad3ac8327","sha1":"3a39a6f2e9ade1e8224eb8ad88e0a96e15923dbb","sha256":"9c1bf7aa855987b84eee5b70098447e4b7b10019b0873fef826ae624c57438b3","sha512":"1ef998637cf94f838fb954a630f81976b1324d5073901d1dabfa555980191c833269c05c73884fc01e66a43748bf252e0f402bc2d143626f498f45b663f4fe11","ssdeep":"12288:0TxavEzdXYn1XNZZzuuWQhQGnmdCv42tZFV/J372ph53Zo:0Tx6ExX0braufhQJdo4GH/Jr2prJo","tlshash":"93a423972d9c97df8f8da151ad48a7d18463a4d05285a18a709ff15f1b3bac42e23fc0","first_seen":"2026-04-13T16:33:31.924959Z","last_seen":"2026-04-13T16:33:31.924959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":606,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon4.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon4.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c991-450\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BgF0dzL4JlUohRev0Zb2FUO8sCHNX38mAMf1Lv20ZE3sq37GOQQ1%2FxmFQPrFGP6T0Ay7SQnCYF9hPEg%2FdYUBo1GvBHIGyYL1HBcJ2ZaGxJTby59732WbI8skOsEHDxG43I%3D\"}]}\r\ncf-ray: 9ebbde6a0e31b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f630510914bfde2a67342d60854decad","sha1":"4a111f1e3c63c8b8720b9ca37eb96a672076fdeb","sha256":"1b9a52731101d62150c6957b1184e27021653be32701db407709a40028f924e8","sha512":"48396c9eb1ad8e75689f1f8d53847e56d06f0142d98315db6016ed6a58dfe73b5c1e83186f10860f44bdf0bd93a41b34c5d5244266f66503becc84cc2ba8d780","ssdeep":"","tlshash":"4811328b9b086d7cb7628b70eb167630752b31338b0e6240c5722a33b92615ce53f9c8","first_seen":"2025-10-21T13:52:00.317914Z","last_seen":"2026-07-28T19:27:44.716844Z","times_seen":51,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/icon5.svg","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:47.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/icon5.svg HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c991-43e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXxlLctraqurqFM0Qt2uI3XEUZ2rjzBQr3ZKVD4g29WwIjrEwC2Vh0ZJyhaIjwFY2QOieeJ4QxJK13r7cfJXN%2BNGGxXDWM0eLV5nnVwKd%2Bx5%2BmA5Q%2BqzHJD7Pk4GhKxaODE%3D\"}]}\r\ncf-ray: 9ebbde6a0e34b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2694870b6edfbd5f34c3f0d8bb4c306b","sha1":"053e4cc8443effe6fc5ee5ec67e5fedae92778a0","sha256":"e76e7ef6a7cb3a9eb7afa7ea01edae6816d143b52ba89463be628d973f33fc61","sha512":"ce482963a56cd2b202ebe8abfe960a37f053a4ca92a0053c0b7d96217d67dfa81b8ef535d8a11acd118ebb0ba9a822faf58780334f006a4242556aafafa057ba","ssdeep":"","tlshash":"911129dd57089d3cba324734f72176b0a12b32435f6d6264c93a28732219a4d797fdd8","first_seen":"2025-06-22T10:40:26.719187Z","last_seen":"2026-08-08T03:31:35.524244Z","times_seen":111,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/index.ed4a2d2b.css","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:45.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/index.ed4a2d2b.css HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c99c-1794e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNzjaWQLLGrTo0yomJrPmvg1F7DrjlcrkzWnWCf30UR%2BHCYHHfyhoZUDKUtTTjm%2BoWSN5%2BiidRBWOCv%2FNZWrMSGiRLWHeaJh1Zw0WEmwQCTNF8scFWIPjDOiQ3T86RxkbxQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde5a0fd1c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-08-07T20:03:32.998814Z","times_seen":1815,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bpi-trading.com/static/h5_logo1.png","fqdn":"bpi-trading.com","domain":"bpi-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bpi-trading.com/#/pages/home/connect","date":"2026-04-13T16:32:46.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpi-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 14:29:03 GMT","end":"Wed, 01 Jul 2026 15:25:34 GMT"},"fingerprint":{"sha1":"C7:3D:C0:6F:93:77:B7:99:6F:F5:82:33:AA:F8:D4:D0:A0:02:BB:9F","sha256":"D8:03:2C:8D:18:21:D4:77:8E:E1:DB:6C:26:6F:7F:84:98:C2:3A:3F:18:BC:12:15:32:70:AC:61:0C:61:25:E9"}}},"request":{"raw":"GET /static/h5_logo1.png HTTP/1.1\r\nHost: bpi-trading.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bpi-trading.com/\r\nCookie: server_name_session=bd1a2df4b99eb3f4284f21ef6f7f90c3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 16:32:46 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 14:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d3c989-19031c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdIREn0EhvtLnMkSTvC%2FaOTkT0H9djIYq%2BS2R4BpvUsGiRuXD%2Fmd10AGspBKhisvBLRFXs6%2Bku8W542MrqZP0RQeFtqcX%2BNiIt3MVMl3AMVkt6NEb9TlbEekYe3pVnsl44I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebbde60eaf4c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1639196,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1648 x 1360, 8-bit/color RGB, non-interlaced","md5":"901642ffcbbc1e16d82990044f808d2f","sha1":"4f6c4db1f1efdfa95a024d9b05b8f1439b147a5f","sha256":"15fe6e9e55704972a94d3d9d2ba31fedfbaa21d41d2c58bc0214a7c46791052e","sha512":"0ed7a8aa2c12629645b9751ac080686aa50c84faf8e3ce261a85cc1c12c82ac7b06922cf8dad3e97a339575bbfa8615b00a195b354f172d92f086c907d6c46af","ssdeep":"24576:EorMhuBw1IW8J2bjrXKs7wIBXJ/ZKjByt/dFVTk:McHv2jrXZ7wIpJ/ZKjGVI","tlshash":"2f25338f6382aed58dc43c7844d8c8a5cf94b6d60590a663638c3e7c46faa61db1dd0b","first_seen":"2026-04-13T16:33:31.916202Z","last_seen":"2026-04-13T16:33:31.916202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"bpi-trading.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}