{"report_id":"7f50a575-3a4e-4b67-8246-ba833de50117","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-03-28T01:40:11Z","url":{"schema":"https","addr":"pltradingbotres.com/","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"pltradingbotres.com/","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"title":"Crypto AI","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T14:03:25.26362Z","times_seen":17725631,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"pltradingbotres.com/","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T01:40:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-28","alert":"Detects file containing Telegram Bot API","trigger":"pltradingbotres.com/connector.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"pltradingbotres.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-22T22:31:48.48691Z","alert_count":0,"request_count":3,"received_data":309964,"sent_data":1405,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pltradingbotres.com","ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":38,"request_count":6,"received_data":76798,"sent_data":2682,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":1830,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":4,"received_data":560849,"sent_data":1876,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":45336,"sent_data":1085,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-03-25T15:50:32.944467Z","alert_count":0,"request_count":1,"received_data":2508,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"pltradingbotres.com/connector.js","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"md5":"5399be1e41e692f96e698104df2be82b","sha1":"56900b66dc5e5f3159e01df4c25ab1ab07fb4ce7","sha256":"6f4ba8e2e8eba51ae0e36135d721677e52908e13cb244458dddd1db0c677956f","sha512":"6ffc8aae80bd927dc9802b37f86a28fcad113bb23a3253d00825727007577da2d47c0262a6db1e8130f53db554ebe878c16ab4db517b00df7f353c7f05c23595","size":9653,"token":"7843297734:AAE75tpNMBFdKahIULdktOTyLXOAurX-dFQ","is_revoked":false,"bot":{"token":"7843297734:AAE75tpNMBFdKahIULdktOTyLXOAurX-dFQ","user_id":"7843297734","username":"myinvestbg_bot","first_name":"myinvestbg_bot","last_name":"","chat":{"chat_id":"-4607247830","title":"Leads_BG🇧🇬","type":"group","bot_is":"member","total_users":3,"active_members":null,"admins":[{"user_id":1982997540,"username":"Arbitrez","first_name":"K","last_name":"","is_bot":false},{"user_id":333525504,"username":"mr_coobie_stone","first_name":"Kasador","last_name":"","is_bot":false}]},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"pltradingbotres.com/","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a50fa33410798df707a37228bb1120c","sha1":"04d3dc3706543d8080f90c41296613fa025f18e5","sha256":"a30b80afcf2a58f35bea6bf02a891e2a8c9fe9537f2298c62d4aa4e95c6a44a7","sha512":"566b4fb4ca9b4a141fcb62cf10f25e9158cbb445a5db87bc60204c1fa7dedd5d6ee169052d9d5a79b4f93c2127409d720edc8a085ba58eb0274942a63447e487","ssdeep":"","tlshash":"22a00275d32c45c5a67d00b4506c2e945a46989ba5b28c80fde0db094f70dc99d8e318","size":67,"data":"","first_seen":"2025-12-10T03:54:34.597499Z","last_seen":"2026-03-29T07:28:16.987904Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a65d712ff4ab7a09f61bbfe448238a4","sha1":"b467d76dd47b0fdcebca3b0fe7582f4cf90f8b76","sha256":"4d207cb73093f1034ad338e8103d58516f6f5f53492c24cbaa238c9e16105a6d","sha512":"73a86403273e78a0a7479ee71f5dc322b14de54d2b0b873a6d955add77a541fec21d9c62c11d1033c9b36ac20714c6f329d4ce41e389fee53e51dc845f45a6b4","ssdeep":"768:esqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:EfUQWodCjgtmKgNzazCw","tlshash":"ead20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","size":29481,"data":"","first_seen":"2023-04-07T09:15:38Z","last_seen":"2026-08-05T12:40:14.080797Z","times_seen":2118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","size":208522,"data":"","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-08-05T06:31:45.598261Z","times_seen":5530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/script/app.js","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a5c30494bc994933c6f42ccf1e10d45","sha1":"39355c80e7fd8d727e4609189a8fb4b314191d2a","sha256":"b18ddafa6525a1457097adb0fe72a5c355f9bb2b9e76642b3c84227edcd1e852","sha512":"f05d43dec7dc2b9f7e9d699f0041db2ca243deba6bd92642c103ee17b9025cadc4cfc69f7515980a35eff10901ee5c2470ee8fba5196b196b3d710b1aabf1537","ssdeep":"384:YiV3DAjl6htbBuGAMWSTMPOamfC/Vlm65sufU2XBQpseL:1S1SAT/VN5sufU2PC","tlshash":"4552d771f38c283002e9716adc6d678d283d90713e039d9a7c4d1cac85e7f6881aaed6","size":13379,"data":"","first_seen":"2025-12-10T03:54:34.576812Z","last_seen":"2026-03-29T07:28:16.975968Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/js/utils.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9efa948e4c90fd3b85f6da8b26fea5d1","sha1":"2c9916f0b09ba12e437eeda82364eb53da0508be","sha256":"0efad3f5cc55af8cf3e1d0a7c74213fb285c7f242880873f7f83e1c80ca4aa48","sha512":"5c66703375383cce9a1f4e06fbdb8bdea99adb1bb67de2e9cb9a97ed646516ed938b7b6244fa18f6fb83f5bcfbc224d5275dfd85da2011804566d7af3cf47563","ssdeep":"3072:g5M0c8BAJjFs3OwPss3MwPYQuiCO2x2T3TTqSYGMIpUsE5lkmLmt67QdEN/wTqju:g5M0yBykx2T3TTuQH","tlshash":"9934efebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":252155,"data":"","first_seen":"2023-03-08T06:42:02Z","last_seen":"2026-08-05T12:40:14.088556Z","times_seen":1648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a64a4ab340b3bc2a309a964574b2a14","sha1":"f074550afd5c30cba2a8b417973d112d36c37cb0","sha256":"fdf103af7a6210f473e942dee2576c65feaad2201f42bf512460884788d11142","sha512":"d60bcd715eb5055a1b1b298c9765f1ae694c2367bd5850e61c1c78cea1aa14363714a659333359adb74b3fac33202e9c78cbb1c561afc17b03789ac11a5b9915","ssdeep":"","tlshash":"0a41e2e1eb6c1d6a433a72e768dc52c444fcc23a9d9084d7bd542b5d04d18b193642bc","size":2384,"data":"","first_seen":"2026-03-28T01:40:17.038729Z","last_seen":"2026-03-28T01:40:17.038729Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/connector.js","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5399be1e41e692f96e698104df2be82b","sha1":"56900b66dc5e5f3159e01df4c25ab1ab07fb4ce7","sha256":"6f4ba8e2e8eba51ae0e36135d721677e52908e13cb244458dddd1db0c677956f","sha512":"6ffc8aae80bd927dc9802b37f86a28fcad113bb23a3253d00825727007577da2d47c0262a6db1e8130f53db554ebe878c16ab4db517b00df7f353c7f05c23595","ssdeep":"192:PzFfaWqpk3S1gFBJ+Y8B/f96pCnO79gSO7jJJ/OF2HjrLD:75ipuSavbi/lGCnOpw/QMn","tlshash":"d512644a78a7548402b325f5f247a6003039a21b3514e0e5ba6ccb551f66e2fe7f76cf","size":9653,"data":"","first_seen":"2026-03-28T01:40:17.006229Z","last_seen":"2026-03-28T01:40:17.006229Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-28","alert":"Detects file containing Telegram Bot API","trigger":"pltradingbotres.com/connector.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/js/utils.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.19/js/utils.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 46833\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63208edf-b6f1\"\r\nlast-modified: Tue, 13 Sep 2022 14:08:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 130419\r\nexpires: Thu, 18 Mar 2027 01:39:50 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNhQx8%2BWMmTCLAtGtjsCZ1mg%2F%2B5mGSQG8nQZ%2B8%2F0EWQC9RwZvWhAAI7agD1ih4dJzZPTLXWSc6z2rY7XRNaYyeVaG7O3ON7AIXa75lImFLL7S8reC0CBNY4Oh37tnR6dt%2F1Ly%2BDE\"}]}\r\ncf-ray: 9e32ec609fe3569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252155,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"9efa948e4c90fd3b85f6da8b26fea5d1","sha1":"2c9916f0b09ba12e437eeda82364eb53da0508be","sha256":"0efad3f5cc55af8cf3e1d0a7c74213fb285c7f242880873f7f83e1c80ca4aa48","sha512":"5c66703375383cce9a1f4e06fbdb8bdea99adb1bb67de2e9cb9a97ed646516ed938b7b6244fa18f6fb83f5bcfbc224d5275dfd85da2011804566d7af3cf47563","ssdeep":"3072:g5M0c8BAJjFs3OwPss3MwPYQuiCO2x2T3TTqSYGMIpUsE5lkmLmt67QdEN/wTqju:g5M0yBykx2T3TTuQH","tlshash":"9934efebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2023-03-08T06:42:02Z","last_seen":"2026-08-05T12:40:14.088556Z","times_seen":1648,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":54,"dns":3,"connect":11,"send":0,"wait":8,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/connector.js","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pltradingbotres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 23:30:10 GMT","end":"Wed, 17 Jun 2026 23:30:09 GMT"},"fingerprint":{"sha1":"67:50:F9:20:83:33:80:9C:3D:B3:F3:11:B8:17:55:F9:F9:6D:04:AA","sha256":"DA:29:C6:79:B5:5F:BF:FC:1A:9C:BB:DF:38:36:02:23:DA:C8:35:93:74:C6:02:AE:AB:82:E2:C6:4E:1E:DC:BC"}}},"request":{"raw":"GET /connector.js HTTP/1.1\r\nHost: pltradingbotres.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 9653\r\nlast-modified: Sun, 25 Jan 2026 22:06:23 GMT\r\netag: \"697693df-25b5\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9653,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"5399be1e41e692f96e698104df2be82b","sha1":"56900b66dc5e5f3159e01df4c25ab1ab07fb4ce7","sha256":"6f4ba8e2e8eba51ae0e36135d721677e52908e13cb244458dddd1db0c677956f","sha512":"6ffc8aae80bd927dc9802b37f86a28fcad113bb23a3253d00825727007577da2d47c0262a6db1e8130f53db554ebe878c16ab4db517b00df7f353c7f05c23595","ssdeep":"192:PzFfaWqpk3S1gFBJ+Y8B/f96pCnO79gSO7jJJ/OF2HjrLD:75ipuSavbi/lGCnOpw/QMn","tlshash":"d512644a78a7548402b325f5f247a6003039a21b3514e0e5ba6ccb551f66e2fe7f76cf","first_seen":"2026-03-28T01:40:17.006229Z","last_seen":"2026-03-28T01:40:17.006229Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-28","alert":"Detects file containing Telegram Bot API","trigger":"pltradingbotres.com/connector.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"pltradingbotres.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Geist:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Geist:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Mar 2026 01:39:50 GMT\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1144,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4aa44e343b69604bf76f989b718a8aa6","sha1":"daca57022a553b512625f2bfd866e64154c21f9a","sha256":"5c01edb14e1034c8c57ec446b07091b47f17aa95ac98513d1444f4f8a43471c0","sha512":"00a2e6a1bea83be9c2467404a23c198b9a576f5ad52da1661be7d62dc32b61b3905c3984db9f9603a60ddda403ffbb4ab644a050249d460224202360cbe2bf3c","ssdeep":"","tlshash":"3a218e810867d404eb935cc127ce7f72af0e61112444a6babbfe08dcbcaac26536675d","first_seen":"2025-09-11T19:57:45.152376Z","last_seen":"2026-05-13T22:17:48.211553Z","times_seen":323,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":292,"dns":1,"connect":15,"send":0,"wait":32,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/chart.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 71722\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.5.1\r\nx-jsd-version-type: version\r\netag: W/\"32e8a-y1VYFBBM+4v4jk0bIQM7SVw8Wnc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230181-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 31652\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzBvZzirdb1f2fmm%2FcIJSX871cm%2FTxvxnFeuNdKpIflFP2%2FEY04SP9%2FTcgYTduLGAY2ZWCSwv20D%2FtjV40PYWuuPy%2Bx4IS0zxGmFiY4TipnNBFBqZ06c%2BH6D3c5OhWWXGHQ%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e32ec608fd5b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56990)","md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-08-05T06:31:45.598261Z","times_seen":5530,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":48,"dns":4,"connect":1,"send":0,"wait":5,"receive":4,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/geist/v4/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pltradingbotres.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:38:13 GMT\r\nexpires: Sat, 27 Mar 2027 21:38:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:49:32 GMT\r\ncontent-type: font/woff2\r\nage: 14497\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28412, version 1.0","md5":"a0f13f916a5805019879dd56b29bc098","sha1":"90af3a05ac9d34850f01f503e1a2582306d9245b","sha256":"04f13c87d9e172ebee6a520fe0d8cb187d1ed1f1eef505d47dd041467e36c6ec","sha512":"15993875861a0b439c76848f3bd7200a8296f917af470a53c0c058880090eb6ce325b2c12295d504b2b6fabe7a5647bfa4804c103b4c41bff4b1741bb27924db","ssdeep":"384:vOg2tlly1HTH0ZTk9hbQe3O4KGVTtRgKJMgJnynWeWkBuNyg3Bv0I5Y4hf/CGYEY:vLQlwH05kbQ+Ttvi+yskBuNFxRPHC2+","tlshash":"30d2e1a67a98b5976d61a4bb6150b00881cf7cb6230d03f21a24d561fd69fe603d373b","first_seen":"2025-09-11T19:57:45.123641Z","last_seen":"2026-06-05T16:17:46.219817Z","times_seen":1396,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":81,"dns":4,"connect":7,"send":0,"wait":8,"receive":7,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v4/gyByhwUxId8gMEwSGFWNPoTcZY7pVQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/geist/v4/gyByhwUxId8gMEwSGFWNPoTcZY7pVQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pltradingbotres.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 18:54:05 GMT\r\nexpires: Sat, 27 Mar 2027 18:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:50:41 GMT\r\ncontent-type: font/woff2\r\nage: 24345\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15256, version 1.0","md5":"4e422e78ed00ed82b260a579e27aa95b","sha1":"8bc665cafc865c286f20024bdc0eff40d12fa5fb","sha256":"559515e82e9b2f2d88d5e5d5673d003806fc90e9ef561a3e5588def1fec8c09c","sha512":"271b922e920053b5148349decab587d77474206bea2ef184bc0335874191b1c6acec9d973c06a35b8eaafaaf5a9203b8a569bfeae322c32d59b54ecc6f701516","ssdeep":"192:MkGokxGJlmfRdfM/P0VuXQ5Pq7DfeJjluqKjI1jO4YWcNn3eZArDME5/vLfBBuVt:ElxGD6R1M0EXQc7VjIdOrWc5Fvvw9z","tlshash":"1e62d02daa1823c2a3315bfb0c56f1fa1abe5f4088751219fdc4734839e227b7316574","first_seen":"2025-10-05T10:54:35.706185Z","last_seen":"2026-05-08T09:40:29.01451Z","times_seen":67,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon/fonts/remixicon.woff2?t=1769685282643","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/remixicon/fonts/remixicon.woff2?t=1769685282643 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pltradingbotres.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 189216\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.9.1\r\nx-jsd-version-type: version\r\netag: W/\"2e320-0TF83qIe50JFhshd74F+2KaTRT4\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230079-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 38390\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLSJbHStKta9lsz7kvxAT0ENStOrt0WhdSy29lWM0ScMgDh6mSC8gJs7%2BKqjUzBQYfagNXpfrkCASuSnwUdM5v2H79cm%2BPg1G%2B%2F030tm7ES7R1%2BonNP2JaXeYO%2BgV7vL%2Fvg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e32ec62ed94c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 189216, version 1.0","md5":"8f6721754cff9caf995e7a594e29a271","sha1":"d1317cdea21ee7424586c85def817ed8a693453e","sha256":"e92dc38bfb1d15dbb9d9ca9e645754f68e7c5b224e33c45a17048bd0cf2407a6","sha512":"dc2a6fd6172b7cf2b0db9d0a53e2bd6af6b895da494c4fa65f387ff75a42d0f5b27c063f73c90a4ddeb55f76163e0a0edf9923557111b3d666e64275171aa250","ssdeep":"3072:sfregdC66/TmYghUr9FQanZkx7eTpbDDesGryFBxLWz3s:o7dC7TmWrMoeQTNP","tlshash":"5f0423725207247a369b05c734b0afa9ee8670cd82edd1a82d77d53ba1b3e2d5f07520","first_seen":"2026-02-01T14:44:13.341674Z","last_seen":"2026-08-05T10:48:42.713002Z","times_seen":193,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":8,"dns":1,"connect":0,"send":0,"wait":6,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:51.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pltradingbotres.com/\r\nOrigin: https://pltradingbotres.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:39:51 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: POST, OPTIONS, GET, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://pltradingbotres.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omKxZatpKK0oqaVZy%2FMCFY18IaysQ%2Fpp4Mjhn%2BFzqbw0qoEYXqY9giD9yVvzZDmAz6cI%2BJsO3Qs3RwH9aR%2Fk4r%2FfoHUsF0F0v7QaxY6zxabFLlGOMgfGOCd0\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e32ec656d185693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":744,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5d3efea6ca5c6c08e57dc476b5ffbea0","sha1":"037821c75e45eb29ce42f67b6a61deadbb3a39b1","sha256":"9ec49b3ca65ee4a49a22ad48c275851cdffe49f1eccb6df6dcb7dfcb147f6ee8","sha512":"ad293be23df970c774459940f6c07d057372e21e20defa992014b700fa2737a8c2258009a523e047106593f9a78f474c42918e5fa753d73def65a12fb157a7e1","ssdeep":"","tlshash":"7401df68e4680e7bacb9135cb42869071274220b5e56758e7bd49b8d0f8e9bf30b534e","first_seen":"2026-03-25T11:30:19.658755Z","last_seen":"2026-03-28T22:27:04.671556Z","times_seen":222,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":41,"dns":21,"connect":1,"send":0,"wait":220,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/script/app.js","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pltradingbotres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 23:30:10 GMT","end":"Wed, 17 Jun 2026 23:30:09 GMT"},"fingerprint":{"sha1":"67:50:F9:20:83:33:80:9C:3D:B3:F3:11:B8:17:55:F9:F9:6D:04:AA","sha256":"DA:29:C6:79:B5:5F:BF:FC:1A:9C:BB:DF:38:36:02:23:DA:C8:35:93:74:C6:02:AE:AB:82:E2:C6:4E:1E:DC:BC"}}},"request":{"raw":"GET /script/app.js HTTP/1.1\r\nHost: pltradingbotres.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 13551\r\nlast-modified: Sun, 18 Jan 2026 21:42:21 GMT\r\netag: \"696d53bd-34ef\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13551,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1a5c30494bc994933c6f42ccf1e10d45","sha1":"39355c80e7fd8d727e4609189a8fb4b314191d2a","sha256":"b18ddafa6525a1457097adb0fe72a5c355f9bb2b9e76642b3c84227edcd1e852","sha512":"f05d43dec7dc2b9f7e9d699f0041db2ca243deba6bd92642c103ee17b9025cadc4cfc69f7515980a35eff10901ee5c2470ee8fba5196b196b3d710b1aabf1537","ssdeep":"384:YiV3DAjl6htbBuGAMWSTMPOamfC/Vlm65sufU2XBQpseL:1S1SAT/VN5sufU2PC","tlshash":"4552d771f38c283002e9716adc6d678d283d90713e039d9a7c4d1cac85e7f6881aaed6","first_seen":"2025-12-10T03:54:34.576812Z","last_seen":"2026-03-29T07:28:16.975968Z","times_seen":8,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"pltradingbotres.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/favicon.ico","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:51.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pltradingbotres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 23:30:10 GMT","end":"Wed, 17 Jun 2026 23:30:09 GMT"},"fingerprint":{"sha1":"67:50:F9:20:83:33:80:9C:3D:B3:F3:11:B8:17:55:F9:F9:6D:04:AA","sha256":"DA:29:C6:79:B5:5F:BF:FC:1A:9C:BB:DF:38:36:02:23:DA:C8:35:93:74:C6:02:AE:AB:82:E2:C6:4E:1E:DC:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pltradingbotres.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 01:39:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-08-05T13:56:24.698641Z","times_seen":111263,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"pltradingbotres.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/reset-css@5.0.2/reset.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/reset-css@5.0.2/reset.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 677\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.0.2\r\nx-jsd-version-type: version\r\netag: W/\"473-+CgoQLLAAytZ6pILxv/3us8ifTU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220072-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 767083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zynrjWEk0MSawdcOJ6vYy%2FMDfFobWq%2FBFU5D4BafjhRTuhed2UBDZJyZeeromLbxz%2FMGmMhUMr%2B1ZYOXS9o1m4UtSIW8gKELm3pp%2B0DdOhB%2FhqF%2FJ1Va3f3AdwZK0FcV1VY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e32ec606fcab50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1139,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (810)","md5":"af1635e0d5c9193a81fe83b76316335c","sha1":"f8282840b2c0032b59ea920bc6fff7bacf227d35","sha256":"c3c161423e7e7e445829f0e828d0ef6d07b771dad32351a3403e3b263c2dbe24","sha512":"ee9914b4c2cab0f841cc97058c0f9b7122221e82587786e7c1ebb0604299998d41c3fb16f230f36666fbda0316862585e849be423d656afcfcb3fbdcc35f70b8","ssdeep":"","tlshash":"392193b8932514d47f3787b12209e694e1300302908048e8fc77c21e9dbd47a64b2eea","first_seen":"2025-10-23T07:21:14.973399Z","last_seen":"2026-07-26T20:10:36.130058Z","times_seen":21,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":45,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/remixicon/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 20322\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.9.1\r\nx-jsd-version-type: version\r\netag: W/\"26772-pECNePLN5nIDdBndpv4iyRapghY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230185-FRA, cache-bma-essb1270073-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 30837\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aw6a0npfCpfdVhFtnwiiYAoSPbyuTAXsa8TOYVgTohRaH0xRbttdVn6rcb0HlrmZVyr9KDizBdieprXsyZkFu7RBbgPDcsvsOv%2Bz4EgHDVByzLj044%2FyLdVhuTa2xJ82qnU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e32ec609fddb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157554,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b44bde953ee968ea6dffeedc3259329a","sha1":"a4408d78f2cde672037419dda6fe22c916a98216","sha256":"50be2f9339fa2de9ad9a0832100219a909fd5401c6c07612c02c937827f9319c","sha512":"15d015e21a6188d427495dc2a29c99439198f19362c26234a46a3c99e2ad9a62a3b62ae8f1336e441eada9a9db428fad30645c6316099014f99504deff7a1395","ssdeep":"1536:zcv38vn4UYzgKvP1IqRCwNd1l3JclUaqM2GSsRt2IJb/ufwgP:g8v4UYcKZ7clA","tlshash":"95f3dbbeea4f04941702e8d26367274163b9b6bddd817c7ad403688df3c666883c62dc","first_seen":"2026-02-03T21:21:05.6792Z","last_seen":"2026-08-03T17:58:34.254952Z","times_seen":337,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":61,"dns":4,"connect":1,"send":0,"wait":5,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/css/intlTelInput.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.19/css/intlTelInput.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1970\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63208edf-7b2\"\r\nlast-modified: Tue, 13 Sep 2022 14:08:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 132777\r\nexpires: Thu, 18 Mar 2027 01:39:50 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZP9Hr8qp3RdotXYQtWkLTAIIc77wWZNHO%2BzT2zZXR2B2mpK4onSZRm9lpp8VEDSrCmsInYiBflA6AfMm5UJHQKxpgrro%2F46%2BFLhz7EDPY1TNXaJsFR50fc6%2FRYvD%2BYC9W7obwHw\"}]}\r\ncf-ray: 9e32ec609fe4569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25254,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a69aa970266649e0b08c2cb4bc166568","sha1":"d9314a52085a2bb6d284421bb18a4c546ecb73d4","sha256":"ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491","sha512":"8315a8c3c328eaaea92dad571ff09c1fc2728920c4b62c0957bf04f83f903f41156ac16cf30297ab5e86f022c3e022764a7a271ebe0b9bfc98d9f488dbe71b9b","ssdeep":"384:HzITF7FWhTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWh/Hib","tlshash":"a4b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-08-05T11:57:50.439443Z","times_seen":29649,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":58,"dns":19,"connect":3,"send":0,"wait":11,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/sass/normalize.css","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pltradingbotres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 23:30:10 GMT","end":"Wed, 17 Jun 2026 23:30:09 GMT"},"fingerprint":{"sha1":"67:50:F9:20:83:33:80:9C:3D:B3:F3:11:B8:17:55:F9:F9:6D:04:AA","sha256":"DA:29:C6:79:B5:5F:BF:FC:1A:9C:BB:DF:38:36:02:23:DA:C8:35:93:74:C6:02:AE:AB:82:E2:C6:4E:1E:DC:BC"}}},"request":{"raw":"GET /sass/normalize.css HTTP/1.1\r\nHost: pltradingbotres.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/sass/main.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 6137\r\nlast-modified: Sun, 18 Jan 2026 21:42:21 GMT\r\netag: \"696d53bd-17f9\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"144638bbecf2df0104777b82dbd32ddf","sha1":"8b6cd89a691833ec86f6bee54c825ce32964b15a","sha256":"5838f522446a1e7c42bb250c02ea2b683a2d3aaf4e222afff98316fdb592e1de","sha512":"3b763e7faa892e463ed782f3de16dd303b4c2064aa2db481df7121590be918500c08a29d75af3617e708b93b807b8b4cd6ae5d60b74c36ee2b2d77906584791a","ssdeep":"96:FIrs38+a1Dy8lDOhEg3p27oS5tdnCC5wBGeJxmnJnWHO1l:FL38UEg527ogCdBRKRWHA","tlshash":"79c141a117206f2282a60d38776f978a73040127867c3cddb4a262e9cf45b5dd769bce","first_seen":"2023-05-18T05:47:58Z","last_seen":"2026-08-02T10:56:32.00322Z","times_seen":260,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"pltradingbotres.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T01:39:49.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pltradingbotres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 23:30:10 GMT","end":"Wed, 17 Jun 2026 23:30:09 GMT"},"fingerprint":{"sha1":"67:50:F9:20:83:33:80:9C:3D:B3:F3:11:B8:17:55:F9:F9:6D:04:AA","sha256":"DA:29:C6:79:B5:5F:BF:FC:1A:9C:BB:DF:38:36:02:23:DA:C8:35:93:74:C6:02:AE:AB:82:E2:C6:4E:1E:DC:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pltradingbotres.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22624,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"de3a1452f3d0cf66930f8b045d143f5c","sha1":"7a7d4b5b991b44be39162f6faa7dde6c89e6dca6","sha256":"98fd2848600b8fb995e506e29dfabab5d5cd3e044a9d81c10ad3f1cc23ebf41d","sha512":"341f4a8e4f39970aeaa52f21b57c9f6f47ce5e502b3d5adf17b9717259304d3c144519d17d6dd785bd536e7131e609f8ebef92a2b93b28bac95328a09778e500","ssdeep":"384:4oSaQ6TOXsQ2ugNwUWHRJtNUNSSOR8zs3jWO6FIVuZcyNJMOBdZtUtAt6KtO55wF:4oSajzWex20LT6rkt62","tlshash":"81a2e260958c2c7f581399d7b860a36b61ef8e39ea6284d7f6f7425803f2c41e613277","first_seen":"2026-03-28T01:40:17.025146Z","last_seen":"2026-03-28T01:40:17.025146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":258,"dns":216,"connect":19,"send":0,"wait":41,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"pltradingbotres.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.19/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8933\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63208edf-22e5\"\r\nlast-modified: Tue, 13 Sep 2022 14:08:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 174387\r\nexpires: Thu, 18 Mar 2027 01:39:50 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQnw2MxPPievQ4udWjyMma6NxoovH%2B5PVVCSMG1L%2BzDiTNkzZ0COIRrGkc3RMc6BjCg3qvGmWhQgndCTu8Fv2%2FXOTggphTGlyVL3d9Nm4uP7w7K6CJwCyEgOIOys%2FUAdixDCt8ZO\"}]}\r\ncf-ray: 9e32ec607fd9569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29519,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26956)","md5":"1a65d712ff4ab7a09f61bbfe448238a4","sha1":"b467d76dd47b0fdcebca3b0fe7582f4cf90f8b76","sha256":"4d207cb73093f1034ad338e8103d58516f6f5f53492c24cbaa238c9e16105a6d","sha512":"73a86403273e78a0a7479ee71f5dc322b14de54d2b0b873a6d955add77a541fec21d9c62c11d1033c9b36ac20714c6f329d4ce41e389fee53e51dc845f45a6b4","ssdeep":"768:esqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:EfUQWodCjgtmKgNzazCw","tlshash":"ead20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","first_seen":"2023-04-07T09:15:38Z","last_seen":"2026-08-05T12:40:14.080797Z","times_seen":2118,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":48,"dns":1,"connect":5,"send":0,"wait":12,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pltradingbotres.com/sass/main.css","fqdn":"pltradingbotres.com","domain":"pltradingbotres.com","tld":"com"},"ip":{"addr":"152.232.8.190","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pltradingbotres.com/","date":"2026-03-28T01:39:50.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pltradingbotres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 23:30:10 GMT","end":"Wed, 17 Jun 2026 23:30:09 GMT"},"fingerprint":{"sha1":"67:50:F9:20:83:33:80:9C:3D:B3:F3:11:B8:17:55:F9:F9:6D:04:AA","sha256":"DA:29:C6:79:B5:5F:BF:FC:1A:9C:BB:DF:38:36:02:23:DA:C8:35:93:74:C6:02:AE:AB:82:E2:C6:4E:1E:DC:BC"}}},"request":{"raw":"GET /sass/main.css HTTP/1.1\r\nHost: pltradingbotres.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pltradingbotres.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 01:39:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 23173\r\nlast-modified: Sun, 18 Jan 2026 21:42:21 GMT\r\netag: \"696d53bd-5a85\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23173,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6dba8e11dec58be773c04c29642a2e9b","sha1":"71ba906fe0be786d2936632d0dcffcb0f80d1d56","sha256":"fe7b45f315ed281f992eaf18330d61b0edeb51049f6d5c2fd6a3d9eefb6fa48d","sha512":"e3ac53fd6421f7bf47f3b6a3e8935ade58e6cf45b18477037c28d1092d2240eca933bfe8093d7630d61c94accc000360d14a8cbcfbb2acfe14f3fa05e4725ee2","ssdeep":"384:+GsM1sfvrFr3RX0sQCz+imhfJbSniIsYvMEcDSIXw:nr1sfvrFr3RX0sQCz+imhfJbSliDSIA","tlshash":"35a2ef896f951528b517946c7947ae8eb35cd003d10eddbc7af1a06ccfc82b4a6a338d","first_seen":"2025-12-10T03:54:34.59383Z","last_seen":"2026-03-29T07:28:16.986948Z","times_seen":10,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"pltradingbotres.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"pltradingbotres.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}