{"report_id":"7bc6a181-8ac1-4b15-9c88-3af6ff9ea1ca","version":0,"status":"done","tags":[],"date":"2026-09-21T14:30:03Z","url":{"schema":"http","addr":"erc20trades.online/","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":0,"asn":399486,"as":"12651980 CANADA INC.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"erc20trades.online/","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"title":"Send USDT","dom":{"size":314120,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48923)","md5":"9ac59e6567a6641fdc3f64fd0b70ba99","sha1":"02d94243696a68943c4170d6b591e4d5ca955b8c","sha256":"a918dafaa8c65a8fe63290e9c1ed8c4be884cf743d98bffebc7ab0c8a6d84240","sha512":"8d1fbc14ecfe036236761d4dd28f76862aa067c5547a477497b10c0b47a66866251f204b488f568644eca87295efd60ffe14f14285f7118d2c0babba34248d1f","ssdeep":"6144:ld2pYJ1LYYJ1HpXPIapbO1VQYv5awrHdNuTE7CwDiqFF4VJGOOA:ld2pYJ1LYYJ1HpXAapinDlhAomwDpz4V","tlshash":"e464d75623c178802307afb73b3bf1e5ed2a5e997594485ff618bc58eba1206d6e0730","dom_hash":"domhashd5335c203a3941b0bd34f31ff29ebf74","first_seen":"2026-09-21T14:30:08.994109Z","last_seen":"2026-09-21T14:30:33.993939Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"erc20trades.online/","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":0,"asn":399486,"as":"12651980 CANADA INC.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T14:30:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-09-17T04:39:10.406055Z","alert_count":0,"request_count":1,"received_data":2530,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"erc20trades.online","ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"domain_registered":"2026-06-03","domain_rank":0,"first_seen":"2026-09-21T14:30:05.51166Z","last_seen":"2026-09-21T14:30:05.51166Z","alert_count":8,"request_count":8,"received_data":8553278,"sent_data":4070,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":1,"received_data":760966,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"erc20trades.online/","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"599038275023924b822915ff87c2ca9a","sha1":"36f11ba29032849d0ce88dd427f7ecad202ee049","sha256":"7dc00009cb60a341ffec9a46dcd51f99dc5da3b1673c3354347ed691bba3b389","sha512":"5bff4313a046e05a1b94a7ba66fff534b185c2f4076d8c1aa9449342265ded17b2445bfc040868df6d77794df10f40207abbfa90d87046c167ffc0d0fa67e30e","ssdeep":"768:DJwmB0d2pYJ1LYYJ1HpXbDIaaHhF91XLtqROpp7EzREPI6IdkkzxNIKaQ8f7KDsw:NwmB0d2pYJ1LYYJ1HpXPIaxlVa0O/JI1","tlshash":"2123b68633c57ca45247affb7b2bb1f1e8295c997689084be310fc58fba1219d6d4630","size":48904,"data":"","first_seen":"2026-09-21T14:30:09.019518Z","last_seen":"2026-09-21T14:30:34.005801Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erc20trades.online/","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9da24b8c7a6ea221ac9ad0a09ec9e8c4","sha1":"4a3c0a560d3ea313f86fba30e9cc73e14070a71e","sha256":"39241753c6198285c6fba09993f4a821ae2ae90cd799bd1376ad7f3f016a44a2","sha512":"0c17cbfcf6626fa4841758a770db467c9d5998a4adfcf3c6d0aaec0d51e9a4672360cefcfc7a19afaa9a35dd2095e4caeef432476202052364d108db7186b0f0","ssdeep":"3072:zFBO7ioezFKsKp+vbUozBV8wzjfDw+a+Gkf6bSFviw0E7tI7dL9xcbY8rCwDiqFU:zVQYv5awrHdNuTE7CwDiqFF4VJGOOY","tlshash":"8334b45663c078802307efb73b3bf1e5ed2a0e9d7594055ff6247d98e6a1206e6e0a31","size":251066,"data":"","first_seen":"2026-09-21T14:30:09.022125Z","last_seen":"2026-09-21T14:30:34.00684Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-09-21T14:30:33.997501Z","times_seen":4078,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"erc20trades.online/","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T14:29:29.949Z","timestamp":1790000969949,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erc20trades.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 11:37:16 GMT","end":"Sat, 12 Dec 2026 11:37:15 GMT"},"fingerprint":{"sha1":"99:31:C6:C0:87:81:5D:E5:C1:5A:2B:BD:FE:5B:AE:E0:CC:E4:1D:32","sha256":"01:83:7F:07:F1:74:9C:91:B8:69:81:C2:AB:BC:91:5A:2F:C9:A9:D6:C4:75:47:47:8F:83:A2:F4:B3:DE:87:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: erc20trades.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 14:29:30 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nCache-Control: no-store, no-cache, must-revalidate, no-store, no-cache, must-revalidate\r\nPragma: no-cache, no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":314044,"size_decoded":133292,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48923)","md5":"941f709375e47b2866c2bac30851de94","sha1":"94ed0b17e1a181bf1bc886cef55e04b5a9371888","sha256":"2a4ded7fd44136e49e7c761476f55669f14e10a58e580b83010915cc40cfe5a3","sha512":"d333db713afacbc38b8f5872b9e39484c1d8158678cedd6a8a43605609ee64cd12a1bdfa94b33ccf0bc61caa20021645b1e32948a309e6656a9961f907c7511e","ssdeep":"6144:1d2pYJ1LYYJ1HpXPIapbOUVQYv5awrHdNuTE7CwDiqFF4VJGOO2:1d2pYJ1LYYJ1HpXAapiQDlhAomwDpz4b","tlshash":"e864d75623c178802307afb73b3bf1e5ed2a5e997594485ff618bc58eba1206d6e0730","first_seen":"2026-09-21T14:30:08.998637Z","last_seen":"2026-09-21T14:30:34.004055Z","times_seen":2,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":17,"connect":100,"send":0,"wait":203,"receive":202,"ssl":204},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:30.883Z","timestamp":1790000970883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://erc20trades.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 529908\r\ndate: Mon, 21 Sep 2026 14:29:30 GMT\r\nx-served-by: cache-fra-eddf8230076-FRA, cache-bma-essb1270025-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 168432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":169227,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-09-21T14:30:33.997501Z","times_seen":4078,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":20,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erc20trades.online/images/paste-icon.svg","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:30.887Z","timestamp":1790000970887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erc20trades.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 11:37:16 GMT","end":"Sat, 12 Dec 2026 11:37:15 GMT"},"fingerprint":{"sha1":"99:31:C6:C0:87:81:5D:E5:C1:5A:2B:BD:FE:5B:AE:E0:CC:E4:1D:32","sha256":"01:83:7F:07:F1:74:9C:91:B8:69:81:C2:AB:BC:91:5A:2F:C9:A9:D6:C4:75:47:47:8F:83:A2:F4:B3:DE:87:46"}}},"request":{"raw":"GET /images/paste-icon.svg HTTP/1.1\r\nHost: erc20trades.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://erc20trades.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 14:29:30 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2611\r\nLast-Modified: Thu, 10 Sep 2026 23:11:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa33920-a33\"\r\nExpires: Wed, 21 Oct 2026 14:29:30 GMT\r\nCache-Control: max-age=2592000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2611,"size_decoded":2945,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ef3755bf089feea74d375de299b31f2","sha1":"e03416cfa72ba453bf4f752ea95e7194eb580412","sha256":"99ab05b2e4c2ec785e7b8112506148658244005b0d29d5d9a623c09b6b72ad2d","sha512":"db576949212387ba1d2a42fdab2f7093fa7f6772d60cdd80428c063bb665d153fa510c6e8f18013a331b31e1c5d2106415d37cf9c89ab31ccfd39af49b464069","ssdeep":"","tlshash":"db5172a8876883d8f4994be1bd3654646a5f3cf3738d9dc0ea445ca17620ce0850ecab","first_seen":"2026-07-29T06:12:44.657208Z","last_seen":"2026-09-21T14:30:33.998888Z","times_seen":8,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erc20trades.online/images/scan-icon.svg","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:30.890Z","timestamp":1790000970890,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erc20trades.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 11:37:16 GMT","end":"Sat, 12 Dec 2026 11:37:15 GMT"},"fingerprint":{"sha1":"99:31:C6:C0:87:81:5D:E5:C1:5A:2B:BD:FE:5B:AE:E0:CC:E4:1D:32","sha256":"01:83:7F:07:F1:74:9C:91:B8:69:81:C2:AB:BC:91:5A:2F:C9:A9:D6:C4:75:47:47:8F:83:A2:F4:B3:DE:87:46"}}},"request":{"raw":"GET /images/scan-icon.svg HTTP/1.1\r\nHost: erc20trades.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://erc20trades.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 14:29:31 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2553\r\nLast-Modified: Thu, 10 Sep 2026 23:11:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa33920-9f9\"\r\nExpires: Wed, 21 Oct 2026 14:29:31 GMT\r\nCache-Control: max-age=2592000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2553,"size_decoded":2887,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57553fba742c04b33f934fa6cced0272","sha1":"b7cca698cded73127185d61a5190ab1de3ea19c7","sha256":"201b97ed9610d1e8c8094d4161f58e7f58ae0ab42c50cae9f161c4b24f63bd51","sha512":"7fa198f2a1b9984e5225d0decc9a645b8064d513fa88786cb8f5d9e797f9cafbbe4451c1ea49067cf197e486420f847deaaab26042d5b696c0b854b1773321de","ssdeep":"","tlshash":"0051b7b9c37982d4f979ab9cd8f71c08379a78b321b0908cf4de5805da776e4a108d9d","first_seen":"2026-07-29T06:12:44.662854Z","last_seen":"2026-09-21T14:30:34.004964Z","times_seen":8,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":100,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erc20trades.online/images/eth.svg","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:30.891Z","timestamp":1790000970891,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erc20trades.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 11:37:16 GMT","end":"Sat, 12 Dec 2026 11:37:15 GMT"},"fingerprint":{"sha1":"99:31:C6:C0:87:81:5D:E5:C1:5A:2B:BD:FE:5B:AE:E0:CC:E4:1D:32","sha256":"01:83:7F:07:F1:74:9C:91:B8:69:81:C2:AB:BC:91:5A:2F:C9:A9:D6:C4:75:47:47:8F:83:A2:F4:B3:DE:87:46"}}},"request":{"raw":"GET /images/eth.svg HTTP/1.1\r\nHost: erc20trades.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://erc20trades.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 14:29:31 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 552\r\nLast-Modified: Thu, 10 Sep 2026 23:11:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa33920-228\"\r\nExpires: Wed, 21 Oct 2026 14:29:31 GMT\r\nCache-Control: max-age=2592000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":552,"size_decoded":885,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9709f9ab6882dd47797909ae7dde371","sha1":"15e212d45efd37691d88879d5ca38f1397c1d101","sha256":"e81b1da77035c3e814c9319a1e28d5b1556e9d6a7e2a7a35ff2ef9cd94bf6afd","sha512":"46ff1b8ae40fca1cf813ef8972a42bccdd13267ab91be941d3c523ad0ee39fb63446ae1616571ee13169804eb2fbba9681860a437769315417b93e25ed1df9ba","ssdeep":"","tlshash":"f0f046e959287454a82b1ffcda6c98e3316771f80b3d08e9b1801602e98995facd2b84","first_seen":"2023-08-27T23:32:58Z","last_seen":"2026-09-21T14:30:33.999831Z","times_seen":162,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":94,"send":0,"wait":94,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erc20trades.online/images/success.svg","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:30.893Z","timestamp":1790000970893,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erc20trades.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 11:37:16 GMT","end":"Sat, 12 Dec 2026 11:37:15 GMT"},"fingerprint":{"sha1":"99:31:C6:C0:87:81:5D:E5:C1:5A:2B:BD:FE:5B:AE:E0:CC:E4:1D:32","sha256":"01:83:7F:07:F1:74:9C:91:B8:69:81:C2:AB:BC:91:5A:2F:C9:A9:D6:C4:75:47:47:8F:83:A2:F4:B3:DE:87:46"}}},"request":{"raw":"GET /images/success.svg HTTP/1.1\r\nHost: erc20trades.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://erc20trades.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 14:29:31 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 8091856\r\nLast-Modified: Thu, 10 Sep 2026 23:11:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa33920-7b78d0\"\r\nExpires: Wed, 21 Oct 2026 14:29:31 GMT\r\nCache-Control: max-age=2592000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8091856,"size_decoded":8092196,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6de51cc702dab5bd05eba251c84604f","sha1":"fd0cb77d996fee0b590e23d748c013b82ec5c749","sha256":"fe6808edb917ecfd4001771c680d63b1ba15b132cb1539eb7441c834bad3b4a6","sha512":"47a1f5695fa950d2aa7b4f9bbe25d7ed764e0d7f139afbce4666d105d51a9a5be58c7bee17437acd7ee08e2f7d4fc3e0a18c156958a1ec4527d1c91795d18d58","ssdeep":"24576:3wl7Qb9S/wR2xZVGd2dhHxRzwBjA54kwFJiiisB6LavssPzXLdns:y7Qo/lVB/z55s/ia6LsP6","tlshash":"712523706fb3afad56681bb512291d0d7ca00fa765c495c481a5b2cb32e9d80cb0ff6d","first_seen":"2026-05-30T01:35:15.49698Z","last_seen":"2026-09-21T14:30:34.000828Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1847,"timings":{"blocked":-1,"dns":0,"connect":94,"send":0,"wait":188,"receive":1467,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erc20trades.online/api/config","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:31.878Z","timestamp":1790000971878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erc20trades.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 11:37:16 GMT","end":"Sat, 12 Dec 2026 11:37:15 GMT"},"fingerprint":{"sha1":"99:31:C6:C0:87:81:5D:E5:C1:5A:2B:BD:FE:5B:AE:E0:CC:E4:1D:32","sha256":"01:83:7F:07:F1:74:9C:91:B8:69:81:C2:AB:BC:91:5A:2F:C9:A9:D6:C4:75:47:47:8F:83:A2:F4:B3:DE:87:46"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: erc20trades.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://erc20trades.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 14:29:31 GMT\r\nContent-Type: application/json\r\nContent-Length: 238\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":238,"size_decoded":425,"mime_type":"application/json","magic":"JSON text data","md5":"8fc01c2539aef53fadd70c190337416c","sha1":"c1ae6aa7f3351753d542ae2c0852c9789c8a5b34","sha256":"b0411efe8ad27a3da8752104ab7a055267e706fd30266595f50af6d885cfc6a0","sha512":"07f55cc15eb2a974e8f240660c9076d3464b101d20784ed48aa04eea375c586f14dedf19e80d8a538d3a046841f0b8bc5a8acfe8906d17b069c4f4d4a291c39a","ssdeep":"","tlshash":"74d097002304241bcbe0b084f828a4a1b9d3868d0cce6e628bcb8d7b22ea8320042a01","first_seen":"2026-09-21T14:30:09.013494Z","last_seen":"2026-09-21T14:30:34.001995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:33.868Z","timestamp":1790000973868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:56:10 GMT","end":"Wed, 11 Nov 2026 10:56:07 GMT"},"fingerprint":{"sha1":"F3:18:40:3B:2F:29:8F:72:5D:C9:F9:8D:83:FF:1A:13:26:F5:A1:7A","sha256":"17:EB:45:1D:BC:F6:67:CB:CB:85:0A:03:6F:55:93:30:F8:33:F4:78:1A:C0:46:17:64:09:C8:78:62:38:02:5D"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://erc20trades.online/\r\nOrigin: https://erc20trades.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 14:29:34 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: POST, OPTIONS, HEAD, OPTIONS, GET\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://erc20trades.online\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CClEggxOwD3AB7IgdWaJJFbF0uA2a0TR0gtS3x38XBCq%2FwJQ9bo%2B3P662wF6ZD5oT2JMeT5pPBT5Oul8l7XFO14QTh8z2M3nXuUQHrLpOPLFfOJsGx0eSDCY\"}]}\r\ncontent-encoding: br\r\ncf-ray: a3e9c346c99a5697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2138,"mime_type":"application/json","magic":"JSON text data","md5":"020bfafb87460d08027c8fdc7a9fff05","sha1":"91bf2d0ab460258da2c778a8f8d56d7bbad31675","sha256":"b32fbc263596baddc9ef4c9c2ad55b022a6a98bc911fb369f8512e3aa333c28a","sha512":"9529e9925207a8dd153fa824bc83b4dbd56d65f241cbbdbdbc37e77bc6de925d4a79c6ee042f885697d3ee4c592217e376f206850410284d236febd0f8ec37bc","ssdeep":"","tlshash":"1601df68e4781e7b9cb813587078691b113422176e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-09-15T07:23:19.849615Z","last_seen":"2026-09-21T17:16:55.051218Z","times_seen":304,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":2,"connect":2,"send":0,"wait":207,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erc20trades.online/images/favicon.png","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:33.309Z","timestamp":1790000973309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erc20trades.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 11:37:16 GMT","end":"Sat, 12 Dec 2026 11:37:15 GMT"},"fingerprint":{"sha1":"99:31:C6:C0:87:81:5D:E5:C1:5A:2B:BD:FE:5B:AE:E0:CC:E4:1D:32","sha256":"01:83:7F:07:F1:74:9C:91:B8:69:81:C2:AB:BC:91:5A:2F:C9:A9:D6:C4:75:47:47:8F:83:A2:F4:B3:DE:87:46"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: erc20trades.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://erc20trades.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 14:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 138984\r\nLast-Modified: Thu, 10 Sep 2026 23:11:28 GMT\r\nConnection: keep-alive\r\nETag: \"6aa33920-21ee8\"\r\nExpires: Wed, 21 Oct 2026 14:29:33 GMT\r\nCache-Control: max-age=2592000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138984,"size_decoded":139318,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit/color RGBA, non-interlaced","md5":"e07f31545b76ce248776d930d696965a","sha1":"678c66416603817d2108752c8c2bae5aeef42e5c","sha256":"20b8c048c7f0485b6cf9d66b25d0eaa58181550a61015f9823c6fc324ae37aba","sha512":"ee99630bbca305ace4c52b4d86df6bac7ab517bef13a68e768dddc3f43a2639705dc7348a20b0f34c9bf1c6131e3ff79e5265cc7a9ae7831e3c48f66c86f30e6","ssdeep":"3072:KGPEKiFP1phQTmxvIzB/TOlO+apOXeMz+n+Sbl3HMtKV1P1:KuwphvAztTCOtpOX7VCMMP1","tlshash":"0bd31284f9c36132d59bdd3c5d200aa9a7ae101fecbd47e4da4b65dc708f1f919a3188","first_seen":"2025-11-14T15:55:17.401741Z","last_seen":"2026-09-21T14:30:34.003111Z","times_seen":9,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erc20trades.online/api/visitor","fqdn":"erc20trades.online","domain":"erc20trades.online","tld":"online"},"ip":{"addr":"45.88.91.141","port":443,"asn":399486,"as":"VIRTUO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://erc20trades.online/","date":"2026-09-21T14:29:34.110Z","timestamp":1790000974110,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erc20trades.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 11:37:16 GMT","end":"Sat, 12 Dec 2026 11:37:15 GMT"},"fingerprint":{"sha1":"99:31:C6:C0:87:81:5D:E5:C1:5A:2B:BD:FE:5B:AE:E0:CC:E4:1D:32","sha256":"01:83:7F:07:F1:74:9C:91:B8:69:81:C2:AB:BC:91:5A:2F:C9:A9:D6:C4:75:47:47:8F:83:A2:F4:B3:DE:87:46"}}},"request":{"raw":"POST /api/visitor HTTP/1.1\r\nHost: erc20trades.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://erc20trades.online/\r\nContent-Type: application/json\r\nContent-Length: 142\r\nOrigin: https://erc20trades.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":142,"data":"{\"ip\":\"195.64.118.152\",\"location\":\"Oslo, Oslo, Norway\",\"timezone\":\"Europe/Oslo\",\"url\":\"https://erc20trades.online/\",\"country_flag\":\"🇳🇴\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 14:29:34 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://erc20trades.online\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":234,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-21T16:49:09.075588Z","times_seen":472868,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"erc20trades.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}