{"report_id":"8e1dbac7-5768-4979-a17d-5936e689bd31","version":0,"status":"done","tags":[],"date":"2026-07-21T20:57:06Z","url":{"schema":"http","addr":"arbitragenest.com/","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":0,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"arbitragenest.com/","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"title":"Arbitrage Nest | Trading online with regulated Copy Trader","dom":{"size":41914,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26399)","md5":"f9c80be5efe2f2e7908cbc6464a4baa1","sha1":"7c0e9f1f6a741316015e209aaccd4280bb8140e6","sha256":"3432aeb269181b7717693d00dee9e8cb7c65d8ca5f55cd8f256814ef3c1dfcc8","sha512":"21d456fda273365aef1226c05d8ece08a4ef27ce93be2cef19159c86b92fcf060e436cc20acfb22e4e9b1c3830c864d76efec26873cd4ef89d1a3e7202ec1a98","ssdeep":"768:0yJi2qbCmmWq38FTbfsTO+hDGq3t8UtN2v3k/SR+D/5km58:FJzqbCmmWq38FTbfsTO+hDZ3t8UtAk/C","tlshash":"a513a7276784452c9c53d278f399b54ea32af688ef6259eef7c23410c2d93ff088a455","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"arbitragenest.com/","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":0,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T20:57:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-07-21","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"arbitragenest.com/images/copytrade.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":4,"received_data":362689,"sent_data":2049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-07-20T14:48:05.930258Z","alert_count":0,"request_count":5,"received_data":200606,"sent_data":2947,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-07-20T21:58:05.03314Z","alert_count":0,"request_count":2,"received_data":77723,"sent_data":1092,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arbitragenest.com","ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"domain_registered":"2025-05-14","domain_rank":3775392,"first_seen":"2026-07-21T20:57:10.870223Z","last_seen":"2026-07-21T20:57:10.870223Z","alert_count":157,"request_count":78,"received_data":7768190,"sent_data":45977,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Elementor:3.17.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-19T23:03:44.758639Z","alert_count":0,"request_count":5,"received_data":48620,"sent_data":3085,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.183.178.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-07-17T06:34:30.672753Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":6794,"sent_data":691,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-07-17T06:34:31.91137Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":5,"received_data":99567,"sent_data":2788,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-07-14T21:36:43.073834Z","alert_count":0,"request_count":1,"received_data":32351,"sent_data":573,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-20T00:04:33.448739Z","alert_count":0,"request_count":2,"received_data":104860,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-19T22:48:34.906849Z","alert_count":0,"request_count":1,"received_data":717,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-07-17T15:17:55.017134Z","alert_count":0,"request_count":4,"received_data":329031,"sent_data":1880,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.184.244.27","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-07-17T09:01:10.046119Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":632,"comment":"","tags":null,"fingerprints":null},{"fqdn":"templatekit.jegtheme.com","ip":{"addr":"104.21.28.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-08-04","domain_rank":0,"first_seen":"2020-07-01T09:51:38Z","last_seen":"2026-07-12T20:08:23.180209Z","alert_count":0,"request_count":3,"received_data":367078,"sent_data":1912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-07-17T14:30:21.702168Z","alert_count":0,"request_count":1,"received_data":7732,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"arbitragenest.com/","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb6f184e52ebb839f54431024a2aec97","sha1":"75fcd6eb12bc5ba1d50178962d3521e444add145","sha256":"eedbfd9b1c938e0cad994250ba2baf73fccf1a1aa8187933b41e7b7d303702f7","sha512":"9a1da2b9356ad6b9fadbb3d628e34264fd456a6d7cd7592dddc59949aa71aa096f5885f3df023c730cc1452b766a3f93eba228ee7117022e7ba756dd412c2e77","ssdeep":"","tlshash":"26116d4b30b201a9649bb00bf7db7888b5bd414b00349d54b30ca5861f93a14438e7e6","size":945,"data":"","first_seen":"2026-07-21T20:57:17.267517Z","last_seen":"2026-07-21T20:58:32.059296Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-22T00:18:21.196134Z","times_seen":24438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f27f647d1a706104850f438d60a4c738","sha1":"dcd0048dba91a32464e090c810c45d478d7a200c","sha256":"390815643ba3e79db4c6101c5b8da6753dedfefd140b0a8b8e2f14d6bcc45bff","sha512":"7a7203bed5c2328360d268b91441214cd5b194462f1a83b8278e55994c0b776f52455a9698ed2d515214752d24368b9ed682d5807b146c3a396a5a8d15d07fc9","ssdeep":"","tlshash":"59e0ab3e3c314154479201b581baea29391b30600065c807a896987c58f8fd96e01884","size":416,"data":"","first_seen":"2026-07-21T20:57:17.269056Z","last_seen":"2026-07-21T20:58:32.060362Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"93fbe8e51d5fa25c36f0090d8b605393","sha1":"8b08b9996fb865b30552fbde958eff9610d0fc67","sha256":"c675041d7fbd8cc9cb759659e68de6a02de26d2d842a9e74a92f719f9a62efa0","sha512":"2d178646b677bb11dd633040cdcb1f0058c9eff3ee2ca0fceafa34582f45a36f2402f47f2b36d5cc53cc8047e7b4d579b0fe44bcfce6ab9ec95372eb5ae13797","ssdeep":"","tlshash":"4921970b98a1502300aba13e8f1fe305a36734135a2aac717d8c5a08cf0c56e2bf07f9","size":1345,"data":"","first_seen":"2026-06-26T05:59:32.963946Z","last_seen":"2026-07-21T21:27:48.045246Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-22T00:19:34.40074Z","times_seen":108172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min365c.js?ver=1.0.21","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"749034f2041f637ed40dcd96f4fd9759","sha1":"0a03f9a53a588426d83008046d855089ac4c85de","sha256":"641991d00eeb0d50ac64f69ca705f8bdc72cb725a60c8d7f7ef5191cefd5a455","sha512":"6d0a3ec65f4a640cc8c48795cc5f6e3463c9a09c35cce0206f8c93c6e8ec936cef8a650df36d5ab6fd44c1b35b00acd09f972b7e8850962ca713c3a4c6904411","ssdeep":"","tlshash":"ed400000300c000c00303303c030030030000000000000000000000000000000000000","size":7,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-07-21T23:30:15.132422Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-includes/js/jquery/ui/core.min3f14.js?ver=1.13.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-21T23:40:36.59509Z","times_seen":45372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/testimonials61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb0ea27ac0491d54da68bdcd0e77d673","sha1":"5c419302245b090a4392bb35bbae5d679fa0f7ca","sha256":"ff7ed4a258027bd0434b458606aaf8a69d020d281e6abd3c0eeffd8688b26837","sha512":"8df7cbea669e8c65910c034eabb788e1d2e2eed92a752a9b794138c3c953c340be7129997ed37e32f977c08469ab00472fe04f32a0cc1b89f469c597f2d9311d","ssdeep":"","tlshash":"7351a4827062f483135bb23b266b001eb3374c29d42179d9a3b586635eb5c422336b65","size":2697,"data":"","first_seen":"2023-03-11T19:09:58Z","last_seen":"2026-07-21T21:27:47.858804Z","times_seen":656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-sliderf342.js?ver=2.9.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e38fbdfeae9d7f775eebd579dfcfe06","sha1":"60934e7a1f201a3a486119588fe2bc47ba8a7973","sha256":"725866acc80a6f1986cf4b347b6f664c871fbcdbf486116582c9613b74e50fbc","sha512":"b94d6911d5eb421f6c836f6f985cfebf8cf4ded371ce7f69abff35e8b1f90f3e46cca58b8d7b1a7e8205e1bcec4f4be9741dccb5ca75de70af9dff344f8b7064","ssdeep":"384:Y8IekegWyzWiHjkJ2Yko2mvWCDz82a/kP4SmomkthVeG6iVCzEndkpirBc4uQe97:YjnIe9mKkwSzmktiI4idc4lrQtQat","tlshash":"a7e22cc93155753342d321b901af810a7735a524de038a80e42bfcd87efda79926fe6e","size":32011,"data":"","first_seen":"2023-03-11T19:09:58Z","last_seen":"2026-07-21T21:27:48.035727Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-21T23:30:09.240411Z","times_seen":24632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-22T00:24:56.285613Z","times_seen":984098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/_/translate_http/_/js/k=translate_http.tr.no.EHioRHaY7p8.O/am=BIAABw/d=1/rs=AN8SPfqQFYEncm-BlXuOK9BUCr1lwxh2Cg/m=el_conf","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"88e498efdfbf6ffd5591f9e6e03405a6","sha1":"8632b6c174e7befb69fd4f7b77de98734737c345","sha256":"fcb826167c21c909c3b183cc3ab526ca46e590ebc9b33a4cf4815c1abedc10f6","sha512":"1c03efbd0ba6cf12c3cb5040a97b69f3903fa36830159065fee3f06025cf6521818a117c6db7c993fdaa4ba30696bbffe831a95e58e0eebdc80f5d413848df22","ssdeep":"1536:XWjLpxIZnZzYOwRUSfl26KKZkXtmqR6Y06ECi9wNWFB:XDD4U6KKZgtBgtCijB","tlshash":"0d73b88cb6a5b4658363f4b5412f000eb23b58adf8484cadb288d8e1adf594d453bf7d","size":75427,"data":"","first_seen":"2026-07-21T20:01:36.862544Z","last_seen":"2026-07-21T20:58:32.019658Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min8a54.js?ver=1.0.0","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e846984437ce810e4757bb0d935e67f0","sha1":"0cd5ea1fde5aceba86a2ed59e77e35eff4acd2df","sha256":"7f161501494bc2f199eaf414c3104318a00e2072f272ebce45540eef58cfb08b","sha512":"a6201d4cf19ddf216d69645cea0c1c6be12c22fb60371a20af0f2b67032f6e36e1f5456f0143b285d2834f13522c7806496ea4f9c88ed7f101545f6e24f35733","ssdeep":"","tlshash":"24512349b183a9f5176e81bb6b1b540f709798de6000e4f4b239eace19b4c8073e3b75","size":3164,"data":"","first_seen":"2023-03-07T01:11:35Z","last_seen":"2026-07-21T21:27:47.784987Z","times_seen":2413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-21T23:21:38.508184Z","times_seen":73310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.EHioRHaY7p8.O/am=BIAABw/d=1/exm=el_conf/ed=1/rs=AN8SPfqQFYEncm-BlXuOK9BUCr1lwxh2Cg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae3f6de2286e10d8f837248c88ebcd52","sha1":"504047593ec05eb07e3a58d26ee106c5be362a94","sha256":"bb8238b4e13a73749f3ee7dd958a2b354d7d1dd542abee91894dd821e4bd91da","sha512":"39422d1579218a5727226908eb5d8b751753b881a15a982f5e8ed801627a2d495e6657eab15af5374c146ba228e51b51bec05e12624721311cf959fe5b6f9ca6","ssdeep":"3072:kjGNxt45eITHt28KRu9gKavNuBDHK0QppB0/I:oGb0muBzg","tlshash":"b314e8d9b26270679263f4a5403f004eb53b68a5f9484dacb28de8e26df4d19017bf7c","size":194302,"data":"","first_seen":"2026-07-20T19:59:30.350742Z","last_seen":"2026-07-21T23:29:42.330941Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-t6WxLABA.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9253d4d9d6ea32e484f0be9a0320a7a7","sha1":"762fb8fdf15626507c1c26a66aa7fe399d39e803","sha256":"1fb0b8e426f707feea50785bc24016fe14a76fb763d5eca3bc9b1d265bf77fa2","sha512":"5a1592fc87a402c636315def22f3c60dd7eeda34701b08005a192ae060acbe7ed8ae8aa709cc1664c3d9489c641e1ada60e79c66f13073ab61e6ba5bd86f524d","ssdeep":"384:9rgi5RFMkSjJOE/0BW2rkZZ795P6zrnBOVmPCRkXQbpaIF2K:9EizlSjJOEiWYoR5P6nnBOVmycQbpaId","tlshash":"0272d7742700783f711f489e16ade546b232c29dd693892d9b6fec0976c5cc0a8b37b9","size":16281,"data":"","first_seen":"2026-07-07T11:50:17.711459Z","last_seen":"2026-07-21T23:40:04.187106Z","times_seen":414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/js/frontend-modules.min8864.js?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff4ba8ee22c74fc654915a134c2d42a","sha1":"84e680f86992086fcc7df4994e45338dff2b6761","sha256":"fe2b279e27abcce2aaa29cb64e7424cced3465bd6837490093f8e4d26627b31b","sha512":"9f0fc703c7fef3a1f941d4dd54c5be727b131c00ae90366d41863946891cdf4ed7349a87268e13a1dd53859adecbe89a3c8e084ecab4cfe7e2441a3e52acdf88","ssdeep":"1536:feAjA679C+QRCHXC4WHqMPB8Vx8WXwCDcYNIekHeBHmjkfzRNE4cR8+SxpcxID1/:fdeVW/Czkbx","tlshash":"0c43eb463251b4e70bef40eb602b450af32319e4740eb5987ab8ddf66470d5a237b739","size":60151,"data":"","first_seen":"2023-11-09T00:53:55Z","last_seen":"2026-07-21T21:27:47.866058Z","times_seen":2258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/js/frontend.min8864.js?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3da14c72fb7eb6af16b3dbd5c8cdfb97","sha1":"2999fbc84a3bf8c27eaa9b350522b1ec0e3b53bd","sha256":"658f3a895bca2fee13e440e355fe44511cb4fd3bd72156b268f2950bb1003b30","sha512":"deaa63874b73a2a759916787b9e33fb178ec23a13ec9e1988a8b52af17419af78bebc27d5c795611842161169466e8759cf16a1d1cde200751a95a7a8a2d3090","ssdeep":"768:HRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9vEAzBc5GETSebsvTilauUHTSX5aodG:HRP/LRkRQx1QEa3GfV9JgEAzBc53TSeE","tlshash":"c003081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bd6ce6a4b1e8373b2775","size":40436,"data":"","first_seen":"2023-11-09T00:53:55Z","last_seen":"2026-07-21T21:27:47.920542Z","times_seen":2308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.11.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-07-21T23:37:01.894792Z","times_seen":31408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-21T23:40:04.229834Z","times_seen":4743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-CgMCAfor.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"06c5668b0e6d3383e096c45abdbedf9d","sha1":"8d64309e8ec50da59f799336c11685ca7fd15ecc","sha256":"2724b50edb69a23cc951a77f775727b960c857d18d58cfa9a47fe5c094d9b99a","sha512":"c4a86d25f4e86be36db19539b4e3efc70500a48b9664349043d76a1451f8536c8bed7fe22f8ca790fb3ac7e26fa7efbfc37e0c927687966dc08a02442e15f85c","ssdeep":"6144:mLjnOEIL18ad2jJKaQo+tRkYcuBaay+moJG:iOEIZRd29lqj4n+moY","tlshash":"53443ad53294b035439b51e6906f1106f33e5c58580d812cf269ede678baec8a2f7fb8","size":272133,"data":"","first_seen":"2026-07-07T11:50:17.748529Z","last_seen":"2026-07-21T23:40:04.183968Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min8864.js?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5dea0a705cc2f4cd87dbaaa6666bc6","sha1":"678bc6f750f13adb29bbc158eb0d9cd813b736fa","sha256":"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264","sha512":"7c19d0edc28fe8733075534de6176483416bb3535f37b7607536aea2ddf9c5591d864225049c9a74735c1daf44c72688d91c1133bb018683ade11f16ea596807","ssdeep":"192:bP6Vw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3o:OX8fajqZFwtdykZwRXcoWI2P9o7S3o","tlshash":"0462337b7d000da93cac595852a27d446d4eb32fbb430c6bbdc59de623a23f5719e006","size":15055,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-21T22:03:43.721264Z","times_seen":13052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/allow-webp-image/public/js/allow-webp-image-publicf269.js?ver=1.0.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"49cea0a781874a962879c2caca9bc322","sha1":"72c1650de2b93ef320d2db873fbb473fe360269c","sha256":"57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37","sha512":"7ebf5da4637794cdab0d199e8b0550e9230a1550804a4ce7fc723a8881e16d12327b9c40bceecff54ece29dde71bf41e63e8510adf0827c4cd13c2392e6250a6","ssdeep":"","tlshash":"63011ecefbc22622c0337ab85def739873ba902581d66ec42850013c562193f8067cdc","size":838,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-07-21T21:27:47.837352Z","times_seen":21649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min8864.js?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"09baa6b31355c8aaaf51b8f8b092adab","sha1":"5e0fcc4efa536db3b14575e08bfd9b041623022d","sha256":"263d6264b8a006bde843f733401522760c8a67452cbadfa35a4a69ce6aff7524","sha512":"cd5dcf04f47aeead2f5d88c474cec762549482db6a1f8642550cafad4f70ed36e956bf6fc64bf5caad1c276b194b0585e1bf3f2bfbcdfb93856c7af8375f4f62","ssdeep":"96:BgsNt0jqf9fzgcf8FD0lCjNVobVDPkqflkxwvT8S2:+sNCjw9fsjFDxN4FPkyXgS2","tlshash":"dfa120d41b90fc6735e135c9a11aa731752fc1333d1ab8c1fa22dced98e8a9187a9931","size":4997,"data":"","first_seen":"2023-11-09T00:53:55Z","last_seen":"2026-07-21T21:27:47.99978Z","times_seen":2298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/nav-menu61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d08291c4626243d93a955d51be03851","sha1":"e373a6f906b350db0f07c7638c2fee572031d16b","sha256":"4fbe210dc7f8b2de83f27f9447239de2e393cbaab833704497c37309db8cda91","sha512":"ab9720acd8beb922327c3c100b863d35de847b2672c30ce22edd6a8d9165654f0bf6d5880a77c411206d9f1f2c4417fd03541ba505a380e1e0aeeca8a373c81a","ssdeep":"","tlshash":"8d614517f0e9b0e541af205e207b54297633182aa019b05a72b9d4eb3e76c4433e5f7f","size":3232,"data":"","first_seen":"2023-03-07T12:42:34Z","last_seen":"2026-07-21T21:27:47.81445Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/sweetalert2/sweetalert2.min430c.js?ver=11.6.16","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a20901d82406ffde5dc532383f8e655","sha1":"6dcfaf49ac382b483ae800b020b3b2964031df82","sha256":"f53a04c5c02b9670b31eb9b6c6a23646d779b12c6dbb98f894dcfc70e51d2671","sha512":"85631e1e6c5287e71d4e8ceef9e8abd7511a86b0c9f8a3d44dd3b9a3a8185a1dfc638d0d0925f818a884b88d7da3131b10ae2eb4eb6accd2b5a8be4789662789","ssdeep":"768:zPb1oLseD1xQIIe662Xna96GR88Dy4ewDQaU1qLUp+l6rdxfJ2IxAn1TEe1E2J3x:H6nIjH0VdlPK6ja6zSaXAvg","tlshash":"6e131c621600b1331afb08e5b5f58655fa120478b80a8c60f57ccd965afad8366f3e7f","size":42588,"data":"","first_seen":"2023-03-14T03:55:08Z","last_seen":"2026-07-21T21:27:47.895883Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-21T23:32:43.124571Z","times_seen":29691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-22T00:25:07.542448Z","times_seen":902760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/sticky-element61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"902bca38c03d1626772ab51f9fd4658f","sha1":"db287e6068f218e89815d253c97071e2a655fbe6","sha256":"437d2173a503fefc1557e3ff02150e54dd8f26a8dc76d96a9df520e992e54254","sha512":"c65a66fc3226fc586f7053bce738d85509cd6eef10c90209c182b374107e3f304ff9fed8263468e0e7c65fede04762e06371b0b6056fde112b7ff9827c134a73","ssdeep":"96:j6k/sBO/Sj5cbfsK7mIXN0sK7y8M57FssxMzwofRGkeK2p:j86SjXIXNN8Mfd3yZq","tlshash":"27915265736178b481dfe687003be11a709b492142ff80d1b239c06b27a4c5d33faaee","size":4565,"data":"","first_seen":"2023-09-30T00:55:13Z","last_seen":"2026-07-21T21:27:47.964835Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/video-button61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a0f68ee28b2d38b448c34f9eae67923","sha1":"91b077fdd031ab341ed06c38dd75fa8fb4252566","sha256":"b6d206d5cc03dc0e50b2b768e8cdc0d387b94055091e0aae2e87d28add6bd4e8","sha512":"455a05cf096b79a1305e34e68169c77c7fbfe38a96293bfaf8aedaf0539cabf03dd1775397b903799b63740971fd0207c249c61c27206f8aa026cdd37853dde9","ssdeep":"","tlshash":"306197817172f4a0135f906e618bc30af171287aa6c4bc98d64487e65ff8c09726777f","size":3312,"data":"","first_seen":"2023-03-11T19:03:22Z","last_seen":"2026-07-21T21:27:47.980697Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/post-pagination61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"301df09bc0c928b607e004e85b6ee2de","sha1":"6c14e4ee3404db08f1794abba0c1dcdc6df238f5","sha256":"a2c1c9b57e284e3d5ddacc7531cb4d9c07bc40ef81f3b0fa2686950d87554864","sha512":"6027180687a737d9447a7396a2d1131a5cd2b6d4a7ac8b268be1048723a527d8f35690bd62925c698443a4fa72a02cf9bd08df647822f5ecfd2456d7f29f0e81","ssdeep":"192:0yw+A6O/TcmN1zmK1F3C+brN6Xd2HuTuo:w+AR/gmN9FFS+3N6Xd2HJo","tlshash":"a3d123697070f4d8437b9073253b251b75636d27b05294e2a3d484b92eb8d8a7292f3f","size":6260,"data":"","first_seen":"2023-03-08T00:51:02Z","last_seen":"2026-07-21T21:27:47.950602Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/accordion61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2629313ce1eacdf3dc7c99fa9dc87a7c","sha1":"3f595e1a5809933a2ea40625feaa868e516e4e42","sha256":"25634ab7dd576b2c61ab13f285f5d8ee65b2cf9fa5f795055f1d735df8cdecf3","sha512":"e77949c804f4509deb8d6df3d37162be072aa0cff26dba9bed2a15eb9de443ce06791b4c70dd8e038ef432cbb24040af1d58f29efe2829d339d4956b9dc45c14","ssdeep":"","tlshash":"3141323d30a8f4e5035ea4af101fb40eb2761c75116fb095a3a941b67eb0c49b361bbe","size":1919,"data":"","first_seen":"2023-10-13T23:32:41Z","last_seen":"2026-07-21T21:27:47.98807Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://arbitragenest.com/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.648Z","timestamp":1784667389648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 533\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230121-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3111298\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iX8z3H%2BXgLIh8Q1w5ITCHZXE7z3jEFJNDyBZK3o4PD5bRL9SFICxXhgQSLf3MTI8Xqfh9Q9vSeDOozOgsvSQnXxMBGdj4aBIOeE7YF%2BQTWdtgxaZUTAiMo2ZK3O%2FadoAymw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1ed1cd148a023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1776,"size_decoded":1631,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-22T00:19:34.378381Z","times_seen":71689,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-sliderf342.css?ver=2.9.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.659Z","timestamp":1784667389659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-sliderf342.css?ver=2.9.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 630\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2180,"size_decoded":859,"mime_type":"text/css","magic":"ASCII text, with very long lines (2123)","md5":"c354d4e1a54243a87a60447ad6167fc2","sha1":"ddd6802aa2e093e29c3db1ec43d8335f301881d3","sha256":"3dcbb2c76f27454c5f0827c5f8150844f19db010eaf01eda252696692d704dd5","sha512":"3eb44bb357e8d43d33376cd15ddbbb36b90d6f4f710b75dcf11110d020d899dd69f755bf4e55cfe556cd7a120591d48cd90839def7b695511cc1475e8211c793","ssdeep":"","tlshash":"3141882983603648d5e7d7207af89a298639fd95fe334cde264dbb024342b5a1412ed8","first_seen":"2023-04-06T16:55:42Z","last_seen":"2026-07-22T00:25:19.035004Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min8a54.js?ver=1.0.0","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.664Z","timestamp":1784667389664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min8a54.js?ver=1.0.0 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 953\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3164,"size_decoded":1189,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3164), with no line terminators","md5":"e846984437ce810e4757bb0d935e67f0","sha1":"0cd5ea1fde5aceba86a2ed59e77e35eff4acd2df","sha256":"7f161501494bc2f199eaf414c3104318a00e2072f272ebce45540eef58cfb08b","sha512":"a6201d4cf19ddf216d69645cea0c1c6be12c22fb60371a20af0f2b67032f6e36e1f5456f0143b285d2834f13522c7806496ea4f9c88ed7f101545f6e24f35733","ssdeep":"","tlshash":"24512349b183a9f5176e81bb6b1b540f709798de6000e4f4b239eace19b4c8073e3b75","first_seen":"2023-03-07T01:11:35Z","last_seen":"2026-07-21T21:27:47.784987Z","times_seen":2413,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/traderYou.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.718Z","timestamp":1784667389718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/traderYou.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16805\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16805,"size_decoded":16992,"mime_type":"image/png","magic":"PNG image data, 520 x 290, 8-bit colormap, non-interlaced","md5":"5f18cf9fc79971d4f21d4dee68c372ec","sha1":"b95fd3069378e188567a998f2af6f19a655e0f8e","sha256":"d8f28e6cc9bc3655dd5e91cfc66510083e1ee855a939182489742b3a84e252ba","sha512":"8ab9bba28bdc690fc33fa81c1d4efc77c89b1bcc300bd7778947b2e93ebe9de370094ef0d3e2c2d2dd40f1a4c13b0434a3a88f6a083167adf697b247bc9b9f2f","ssdeep":"384:iio6VCG2LE5zNctmS0gEInMMXwjjA084TJ1ZHgu:YLE5KtV05InM00d1ZAu","tlshash":"3372d0f8ecb49111a5e81b1fb7d0b21a6ce2e8e11016f7f857903765da800e1bb0f218","first_seen":"2025-03-16T05:26:53.223058Z","last_seen":"2026-07-21T21:27:47.848279Z","times_seen":10,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.441Z","timestamp":1784667390441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:08:06 GMT\r\nexpires: Mon, 19 Jul 2027 10:08:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 211704\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-22T00:32:21.530811Z","times_seen":52290,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min8864.js?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.646Z","timestamp":1784667389646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min8864.js?ver=3.17.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4035\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15055,"size_decoded":4272,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14869)","md5":"7a5dea0a705cc2f4cd87dbaaa6666bc6","sha1":"678bc6f750f13adb29bbc158eb0d9cd813b736fa","sha256":"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264","sha512":"7c19d0edc28fe8733075534de6176483416bb3535f37b7607536aea2ddf9c5591d864225049c9a74735c1daf44c72688d91c1133bb018683ade11f16ea596807","ssdeep":"192:bP6Vw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3o:OX8fajqZFwtdykZwRXcoWI2P9o7S3o","tlshash":"0462337b7d000da93cac595852a27d446d4eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-21T22:03:43.721264Z","times_seen":13052,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/sweetalert2/sweetalert2.min430c.css?ver=11.6.16","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.658Z","timestamp":1784667389658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/sweetalert2/sweetalert2.min430c.css?ver=11.6.16 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3824\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20713,"size_decoded":4054,"mime_type":"text/css","magic":"ASCII text, with very long lines (20712)","md5":"53ef696d417d353efbd07c105f694756","sha1":"f37fbcf88f577f3152b8ec113d83b843dc6e2bc8","sha256":"b166631d0898f5fbe179400ea31aeccf0f56a61977cea7d56b3d6464a12fa2df","sha512":"36fb911a53dfe9c1e9c50a811a73deedf3e8002a72ae386548d79755463b059023d67361b8da5106ade8b02e32af6becc1412e1ead87b42b18daf7cb3429dd60","ssdeep":"192:CBh5Cif2IgOmgOua1YldXaugk7OyC7AL2DSYy3epAd/3nsTeUxX:CB72InJaq+ROOyC7AN3Mu/XsTeUxX","tlshash":"c09273618a80240bfa3b873a5a90f64c61d0950bfd720e5ef574e1148f9bfaf29753b4","first_seen":"2023-04-13T09:08:24Z","last_seen":"2026-07-22T00:25:19.064032Z","times_seen":1049,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/copytrade.gif","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.724Z","timestamp":1784667389724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/copytrade.gif HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/gif\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3486186\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3486186,"size_decoded":3486375,"mime_type":"image/gif","magic":"GIF image data, version 89a, 600 x 554","md5":"1cdceccbbb13429cb97ecd1ad8e6ca33","sha1":"391ebd2411085b7e9aff1580efae2e49967fe081","sha256":"506ae26f42117d257ddae51129b568baa5c329d24932b2e4b9c3c5349ecdded8","sha512":"00a549b8bddeb201930acd90a66a326d782aff79d34d204fee7ada7c6517394e03daa96ecba047fbc58b42ae73d48072e16bc87bb2f9d2b3d110d0696d481cd1","ssdeep":"24576:b2Q8NB4F/9Bi5VKkpMKH802BMWGs1F5CyyV2xm:bF8NB4FnQV/pMM1s1TCXQm","tlshash":"012533cd72ac53e5689bbc0324e717f405bbf1e82dab20b83ed9b340d6c982e6465754","first_seen":"2025-10-28T23:11:36.271031Z","last_seen":"2026-07-21T21:27:47.859589Z","times_seen":9,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-07-21","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"arbitragenest.com/images/copytrade.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.678Z","timestamp":1784667390678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 21:36:48 GMT\r\nexpires: Sat, 17 Jul 2027 21:36:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 343182\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":702,"size_decoded":1361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-07-22T00:05:56.637717Z","times_seen":15661,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.855Z","timestamp":1784667390855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:32:09 GMT\r\nexpires: Fri, 16 Jul 2027 02:32:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 498261\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1412,"size_decoded":2072,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-07-21T23:29:42.312647Z","times_seen":13495,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/7750ebdfa432a20b5de4bbff4bb6af6c1f64f638.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.183.178.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:33.582Z","timestamp":1784667393582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/7750ebdfa432a20b5de4bbff4bb6af6c1f64f638.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-B/6NfaaDpZne/g/uc5qfSnm44ZA\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1223,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1623b3b9e850c9c1491c70aef8d248c2","sha1":"07fe8d7da683a599defe0fee739a9f4a79b8e190","sha256":"b5b4d35c58c664f860fdab342e28e4f7337c31f56e8da3582e65972af84deb9e","sha512":"bcfb7323cde3f50f57c38880ba4f962f1f35f106a93074f2f3da73256fe2b54698c6065b11f1bc93d6f74811f6d2543fc6f5aa7afea2e5df1ff45b4f25fcc6d2","ssdeep":"","tlshash":"5321766d4a6822fd5245c7d6c5047a036bacdcb371003e7eea0d0a0e70db2e6223646b","first_seen":"2026-06-06T06:44:39.646667Z","last_seen":"2026-07-21T23:40:04.193159Z","times_seen":678,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":5,"connect":21,"send":0,"wait":28,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min8864.css?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.631Z","timestamp":1784667389631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min8864.css?ver=3.17.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3987\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26702,"size_decoded":4217,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-22T00:25:19.058411Z","times_seen":85405,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/allow-webp-image/public/js/allow-webp-image-publicf269.js?ver=1.0.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.644Z","timestamp":1784667389644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/allow-webp-image/public/js/allow-webp-image-publicf269.js?ver=1.0.1 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 412\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":838,"size_decoded":648,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"49cea0a781874a962879c2caca9bc322","sha1":"72c1650de2b93ef320d2db873fbb473fe360269c","sha256":"57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37","sha512":"7ebf5da4637794cdab0d199e8b0550e9230a1550804a4ce7fc723a8881e16d12327b9c40bceecff54ece29dde71bf41e63e8510adf0827c4cd13c2392e6250a6","ssdeep":"","tlshash":"63011ecefbc22622c0337ab85def739873ba902581d66ec42850013c562193f8067cdc","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-07-21T21:27:47.837352Z","times_seen":21649,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-143c6d.css?ver=1700601175","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.615Z","timestamp":1784667389615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/elementor/css/post-143c6d.css?ver=1700601175 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1829\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20238,"size_decoded":2059,"mime_type":"text/css","magic":"ASCII text, with very long lines (20238), with no line terminators","md5":"098568503cce233879621d606497dab7","sha1":"36a3375a9c3c7751a3d46c3687824f046ad500c2","sha256":"a2890aea870e94c14fd8041811efb91df0b8f3602b5a3b61922bc551e0a4103e","sha512":"ba1d6779ead1170576e320214311411bb9431192deeb8dfab981a1e74976f45559d1dd2a07311f9e8ffa1951c515e9e17a834fefda988954588c7ab689655cec","ssdeep":"192:nHw0OCtrAmSmL95608BunuQuz09BOln3dIOBxnkTBg35pF/nLawUnh0p/LYnOlmz:stigtUh0pBtgFg5geDkIbDM","tlshash":"f39289987e93c025b43f249f6543f1ac643cdcce882da6fae4294213f1b7e6a7794911","first_seen":"2025-10-28T23:11:36.221311Z","last_seen":"2026-07-21T21:27:47.811777Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/elementor/css/globalcc7b.css?ver=1700561045","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.628Z","timestamp":1784667389628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/elementor/css/globalcc7b.css?ver=1700561045 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6531\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":139443,"size_decoded":6761,"mime_type":"text/css","magic":"ASCII text, with very long lines (8859), with CRLF, LF line terminators","md5":"6a5510a23b3365475e0c166137a8e8a6","sha1":"fcb33aa8fb0970dbd377604cda5c1dc82408d0cf","sha256":"a43eb2c34307561a03bb04bcd49d38334ac07f4921a548bb7749a106c5f0d9d3","sha512":"b9638820b7f57a704cbbc7199a7d6b05b4c2718df915c976133c35de6aa228baf1bebe675778591a5e8ceac682051616e73517cf85150fe3c85e32d0738e2f9c","ssdeep":"384:STRDdw9zI2qUL94egkF40Lr0A+EgiEqS+aeF10LhQuS0MvWI9:STRDUfPdPZXI2tqNsvF","tlshash":"43d334487c32d216b86b0bbf658fe51c284858c9dc568fd3f86cc11b49eef42a7791a1","first_seen":"2025-06-13T10:55:04.685719Z","last_seen":"2026-07-21T21:27:47.979387Z","times_seen":26,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d5.css?ver=5.15.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.638Z","timestamp":1784667389638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d5.css?ver=5.15.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12133\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57912,"size_decoded":12364,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-21T23:21:38.496379Z","times_seen":27433,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/nav-menu61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.673Z","timestamp":1784667389673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/nav-menu61da.js?ver=2.6.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1078\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3232,"size_decoded":1315,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3232), with no line terminators","md5":"9d08291c4626243d93a955d51be03851","sha1":"e373a6f906b350db0f07c7638c2fee572031d16b","sha256":"4fbe210dc7f8b2de83f27f9447239de2e393cbaab833704497c37309db8cda91","sha512":"ab9720acd8beb922327c3c100b863d35de847b2672c30ce22edd6a8d9165654f0bf6d5880a77c411206d9f1f2c4417fd03541ba505a380e1e0aeeca8a373c81a","ssdeep":"","tlshash":"8d614517f0e9b0e541af205e207b54297633182aa019b05a72b9d4eb3e76c4433e5f7f","first_seen":"2023-03-07T12:42:34Z","last_seen":"2026-07-21T21:27:47.81445Z","times_seen":234,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/indices.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.728Z","timestamp":1784667389728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/indices.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5862\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5862,"size_decoded":6048,"mime_type":"image/png","magic":"PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced","md5":"6584667e5a9016b704f202618be6752d","sha1":"3c2835870aa76314a07e176f67b4e9518981187d","sha256":"c0ade9161f553ed44493c47de52bfa240003a7d213235dc685f8741b8936e20c","sha512":"cf2dc6c323c83a819e7e1db4cc4b4187937e67b9cca53ed9949949f71ca32cc7a30ba78f1f8105e8b0f5f65cb0eb7e51cd98c5013304159c881fc94adde89243","ssdeep":"96:nTX1CcrfZ01V8gpwz8EBIBSyIgpm07sX/DFJSvLPX5BNNcPBM6:nTFCp1V8gpwoEBIBSy7pmxDFov7tNcr","tlshash":"3bc1e65bff1a44e665ad6f569cd6722ff43e0006c9a25ccb7518c987cac3a26ef00851","first_seen":"2025-06-13T10:55:04.683026Z","last_seen":"2026-07-21T21:27:47.849847Z","times_seen":39,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/man-smile-portrait-and-fitness-in-gym-for-exercis.jpg","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.732Z","timestamp":1784667389732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/man-smile-portrait-and-fitness-in-gym-for-exercis.jpg HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142426\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142426,"size_decoded":142615,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1460x1460, components 3","md5":"435d9b180466023a1d6b7b589752f881","sha1":"e51f3f2fae57130a8aa785714ebf4018c58f762c","sha256":"2eef5966b3e091ac8e318ccc07b46195021aafd99366e0361db2f33bfe645096","sha512":"27669da37280f74ca1ce6d94d2dabe10a1ab6f57490ee8287042ede611fa3d19251c7a9613ef420fd13c37a99e3d7d11c3e1fff8d5a8956a8ad3fccffb5e5a03","ssdeep":"3072:cuE+KlpbL4APsj3paHxEzfYdQ1ChepGygQfi96szeJGyaeWiLHqaWdDQkweyUpK:cTGj3Oqg6CWGaiYueG7sKTdD9weyUo","tlshash":"dbd3023d46239017d7a892a05a13c30f1336f16de20abe5251b8cdbfeaf88515694ddf","first_seen":"2025-06-13T10:55:04.630131Z","last_seen":"2026-07-21T21:27:47.89335Z","times_seen":31,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon7107.woff2?bv8d8l","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.267Z","timestamp":1784667390267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon7107.woff2?bv8d8l HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon61da.css?ver=2.6.2\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 401140\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":401140,"size_decoded":401329,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 401140, version 1.0","md5":"9b5647fc66c9de00d97646819a0c70c8","sha1":"7eaf3745723fe74418fe448e6e3056a464ec774e","sha256":"986c16d318646b959f5e134927a2fd99c2428e97e152fe873797abb29d62a967","sha512":"25b2abafb93ef9746abda1adf07bcf5c701ad9552ee1a64fc425799fd7aac3a05de0ee302bff73b6bd5be2a87c402b291e748eb78d5c6db4f311e92d27ffbe18","ssdeep":"12288:0oHqGQxoPUCokJNTzr0KNYdctuG9GBPv9:xEoPhXLTzNtuGwBn9","tlshash":"80842301de5546f3d4abc624c7ba038fb3beaba512931e1d538ca584461887433bb7ed","first_seen":"2023-05-03T19:25:45Z","last_seen":"2026-07-21T21:27:47.871399Z","times_seen":4306,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/#","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.643Z","timestamp":1784667390643,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/crypto.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.729Z","timestamp":1784667389729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/crypto.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7665\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7665,"size_decoded":7851,"mime_type":"image/png","magic":"PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced","md5":"98e6e16a374ece4f2954b07b85ca27b6","sha1":"bc4dcc9d2dcef69e09fa5ab8ef3c5d28fd8ecb14","sha256":"149e9060ff0697f3e776ead4918e0b391843fb73d8f8319b237c26178f301f6e","sha512":"3b96b8183929a883096bc7bfacee1118892e27f8929fafdb6d46ec0ccff711c95ea4c55d4baafded82b8c416f3e97d3b4554e868dcd3fff7253ebf3e6d43319d","ssdeep":"96:SffU93+/ZBkoDq0dThjtJL+JGZQbaZ8ZFwU6tEnAQOXweHtyuzC7wI1fGz3:GU9gBkoDq0d1L4blbe6OX/AuzC7BQz3","tlshash":"7bf18ffd7ef7a1078ed00e4c413070612b17190f295bac6a0cb9e6ec7846a62b7192f5","first_seen":"2025-06-13T10:55:04.615901Z","last_seen":"2026-07-21T21:27:47.921396Z","times_seen":36,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.264Z","timestamp":1784667390264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:41:37 GMT\r\nexpires: Mon, 19 Jul 2027 10:41:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209693\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23121,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-21T23:25:46.480844Z","times_seen":24505,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":22,"receive":14,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.675Z","timestamp":1784667390675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:57:34 GMT\r\nexpires: Fri, 16 Jul 2027 02:57:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 496736\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1597,"size_decoded":2271,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-07-22T00:05:56.593186Z","times_seen":16028,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.518Z","timestamp":1784667390518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min8864.css?ver=3.17.3\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":78384,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-22T00:28:05.756014Z","times_seen":161350,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.676Z","timestamp":1784667390676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-07-21T23:29:44.952783Z","times_seen":78340,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":2,"connect":22,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/forex.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.726Z","timestamp":1784667389726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/forex.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8234\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8234,"size_decoded":8420,"mime_type":"image/png","magic":"PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced","md5":"16a0c30bfe4e1945eb2dd9e71cc6d23c","sha1":"693d6a9115faf22bdf3988815e23a51624721ca5","sha256":"2215cf6e8b0564defbe4d2a7ebb70ada6f68727c6c9f05b2aab729f53ba0ce3f","sha512":"755fa62a430d83b03b30cdc446458e60330488246dbbd53787ca07c94fb59739d3bbf8bbc5773ba8523fd0eec61c2880a92d424e520a1ef81ac96ffbf39f0d98","ssdeep":"192:QdF/AgFyWELEiyJLoq55YCDur+XUV0SMIRS3QD7BmOEk:qpkTLEN+qp40YRSA/4k","tlshash":"0e02497fe14592e868516be30a7c23d54d0338bfcfb4291d63b3676a867d8b4a20941d","first_seen":"2025-06-13T10:55:04.643633Z","last_seen":"2026-07-21T21:27:47.798925Z","times_seen":40,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/feature-iphone4-1-1.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.256Z","timestamp":1784667390256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/feature-iphone4-1-1.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 403822\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":403822,"size_decoded":404010,"mime_type":"image/png","magic":"PNG image data, 1170 x 450, 8-bit/color RGBA, non-interlaced","md5":"76fa117d16af1e62b04969f6cf96be83","sha1":"acb70ffa45cc01549a91b451c2b7adc4298e622d","sha256":"3a84f237e5528e39d77e8f7cfb4bde0f6f155b649e9d26ed2e202bab0f14166a","sha512":"f47eab16f62fc087330246069e4ea1245d4854df7c648bd1e00a0397cdef9dcc8b5ac43278074291e662a93b6efb42bb8a5ba369104880da6204061b21ba8071","ssdeep":"12288:utnT1gdvmmC606VNGi3xvM5Lzuc2XFZh5pSAR:uR6dvmmVjX3Zzc2DwAR","tlshash":"988423896d0e84e6c352f4d30b5bb3e61ef84d29d1504c6144e47b5232d93ef0d9ebaa","first_seen":"2025-06-13T10:55:04.670785Z","last_seen":"2026-07-21T21:27:48.004107Z","times_seen":37,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{7222e793-f705-4047-99c2-6c441ad753a2}?https://arbitragenest.com","date":"2026-07-21T20:56:30.553Z","timestamp":1784667390553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=533=BxQTl08cgPJaprRO5PmM46Y3Icjx-FjOqRwkZd4gysqtGizBxJPf9Xd2-7p8jx_mTd1pWQTGbUBcV3y0zrUR2KgfbxHQRWS800B2-qoRZ_JDNrTY06Oa_ohJ0CH4AY5FntOOXOOSmRsxyWhHwQjx85kcTQP5MNdz-XpNE7gaRuboBAVKKP_vm98PT6Mt3QkkWmoGuurkxDqwFEnSsCcS6s0yp9Z2fr5yQg; expires=Wed, 20-Jan-2027 20:56:30 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Tue, 21 Jul 2026 20:56:30 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31482,"size_decoded":3504,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-07-21T23:29:42.249633Z","times_seen":4839,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":3,"connect":10,"send":0,"wait":27,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-CgMCAfor.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:33.795Z","timestamp":1784667393795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/shared-CgMCAfor.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-42705\"\r\nexpires: Wed, 07 Jul 2027 08:30:00 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k84ONwDR70B/6ethl7N/XP72ig3DrMlOVD1mUXwvsHPPHo3+z4/HnqhjTt7/E596C4iM6dg\r\nx-77-nzt-ray: fdb54123843b6f4701dd5f6a6627522f\r\nx-77-cache: HIT\r\nx-77-age: 1254350\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":272133,"size_decoded":92592,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"06c5668b0e6d3383e096c45abdbedf9d","sha1":"8d64309e8ec50da59f799336c11685ca7fd15ecc","sha256":"2724b50edb69a23cc951a77f775727b960c857d18d58cfa9a47fe5c094d9b99a","sha512":"c4a86d25f4e86be36db19539b4e3efc70500a48b9664349043d76a1451f8536c8bed7fe22f8ca790fb3ac7e26fa7efbfc37e0c927687966dc08a02442e15f85c","ssdeep":"6144:mLjnOEIL18ad2jJKaQo+tRkYcuBaay+moJG:iOEIZRd29lqj4n+moY","tlshash":"53443ad53294b035439b51e6906f1106f33e5c58580d812cf269ede678baec8a2f7fb8","first_seen":"2026-07-07T11:50:17.748529Z","last_seen":"2026-07-21T23:40:04.183968Z","times_seen":409,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:40.441Z","timestamp":1784667400441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://arbitragenest.com/\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://arbitragenest.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 21 Jul 2026 20:56:40 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":525,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.608Z","timestamp":1784667389608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33206\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220150-FRA, cache-ber1080024-BER\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 3270292\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQowNyqTRETeYLu5MrHgQeHjeGJxj3dH7kSvAbkuu0qbkDUmbid6%2BZg5DeqKUeFHsdDF%2FrNa6R2XP7W828RM03sdV8IqAQASuthJ5gc3jPJYmew3xgEmtQxFoTvqNmPJzw8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1ed1cd26e3756c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232803,"size_decoded":34359,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-21T22:18:15.987956Z","times_seen":25295,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":8,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/post-pagination61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.679Z","timestamp":1784667389679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/post-pagination61da.js?ver=2.6.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1849\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6260,"size_decoded":2086,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6260), with no line terminators","md5":"301df09bc0c928b607e004e85b6ee2de","sha1":"6c14e4ee3404db08f1794abba0c1dcdc6df238f5","sha256":"a2c1c9b57e284e3d5ddacc7531cb4d9c07bc40ef81f3b0fa2686950d87554864","sha512":"6027180687a737d9447a7396a2d1131a5cd2b6d4a7ac8b268be1048723a527d8f35690bd62925c698443a4fa72a02cf9bd08df647822f5ecfd2456d7f29f0e81","ssdeep":"192:0yw+A6O/TcmN1zmK1F3C+brN6Xd2HuTuo:w+AR/gmN9FFS+3N6Xd2HJo","tlshash":"a3d123697070f4d8437b9073253b251b75636d27b05294e2a3d484b92eb8d8a7292f3f","first_seen":"2023-03-08T00:51:02Z","last_seen":"2026-07-21T21:27:47.950602Z","times_seen":476,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/portrait-of-happy-mature-man-using-cell-phone-at-home.jpg","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.257Z","timestamp":1784667390257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/portrait-of-happy-mature-man-using-cell-phone-at-home.jpg HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 230885\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":230885,"size_decoded":231074,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2000x1335, components 3","md5":"62cfec81536c5b355c48984c9123c20c","sha1":"e3b005f25497474b071da1a581e07cafca775807","sha256":"04a60c645f125b0955a0053d2bc334fd03be3feaf9931aae33494137b7c14b0d","sha512":"8e5f2ada7dbe71cc9f4b39935aef49e398cfb6d0d93ec0b82c83def772b9e5b5743820763c0a8a079fb3e71dd4e4af2f8e5d0fc173d11529529c8db80eb4e6ec","ssdeep":"6144:rh4WkSkqc7ZXOfoQDptnW/CaNBBLQS+uXum2uAt177Ssq0:NJkS5cUfomzaNTL4OrlAnvSs/","tlshash":"c23423e4f59f1e97eec001315b04194ed352f4169a0d23817621ca4e6bbaeff7e8c45a","first_seen":"2025-06-13T10:55:04.618571Z","last_seen":"2026-07-21T21:27:47.916751Z","times_seen":32,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.444Z","timestamp":1784667390444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIAABw/d=0/rs=AN8SPfpC04vrrzQXgs_TCM5EtruwfPzNtQ/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 14:28:07 GMT\r\nexpires: Mon, 19 Jul 2027 14:28:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 196103\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-21T23:29:42.284539Z","times_seen":69415,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.11.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.682Z","timestamp":1784667389682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-1.11.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1787d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nage: 2196458\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270062-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 40631, 46138\r\nx-timer: S1784667390.935716,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33357\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96381,"size_decoded":33998,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-07-21T23:37:01.894792Z","times_seen":31408,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":9,"receive":4,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.853Z","timestamp":1784667390853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 10:11:01 GMT\r\nexpires: Fri, 16 Jul 2027 10:11:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470729\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":848,"size_decoded":1507,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-07-21T22:28:27.5015Z","times_seen":8146,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-10782cfd.css?ver=1700561046","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.660Z","timestamp":1784667389660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/elementor/css/post-10782cfd.css?ver=1700561046 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1668\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17309,"size_decoded":1898,"mime_type":"text/css","magic":"ASCII text, with very long lines (17309), with no line terminators","md5":"3642aed23fa1145c3226ceb32aa20f45","sha1":"ddb3068586ccf13c1a69d8ce528e97606b060c73","sha256":"3a65f44670e704fc277bc84d52cc85e4171bed4dd6d3690e69551be72b69dbd4","sha512":"5025808ab3fa41bdf264f2c92e2f0e981506f6de895717cb5171d7162a80902261b5f1b341c8de81cef21b584a7c772ef57cdc09dde1a89fe1bf2b36e4f894fe","ssdeep":"192:i+0OnTV/RQ9LfUruwuxQRw8SPSM/mE+QRw8SdNDOw1v/bRQdmBgXAdMLI0+TK+xf:rgzAgggwM8gBguxgugD","tlshash":"42722694be938429b17f241f5553a99c20788cced97da7e6f4206233f075ee637e09a0","first_seen":"2025-06-13T10:55:04.668558Z","last_seen":"2026-07-21T21:27:48.038761Z","times_seen":29,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/video-button61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.674Z","timestamp":1784667389674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/video-button61da.js?ver=2.6.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1356\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3312,"size_decoded":1593,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3312), with no line terminators","md5":"4a0f68ee28b2d38b448c34f9eae67923","sha1":"91b077fdd031ab341ed06c38dd75fa8fb4252566","sha256":"b6d206d5cc03dc0e50b2b768e8cdc0d387b94055091e0aae2e87d28add6bd4e8","sha512":"455a05cf096b79a1305e34e68169c77c7fbfe38a96293bfaf8aedaf0539cabf03dd1775397b903799b63740971fd0207c249c61c27206f8aa026cdd37853dde9","ssdeep":"","tlshash":"306197817172f4a0135f906e618bc30af171287aa6c4bc98d64487e65ff8c09726777f","first_seen":"2023-03-11T19:03:22Z","last_seen":"2026-07-21T21:27:47.980697Z","times_seen":135,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-sliderf342.js?ver=2.9.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.678Z","timestamp":1784667389678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-sliderf342.js?ver=2.9.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12401\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32011,"size_decoded":12639,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32011), with no line terminators","md5":"7e38fbdfeae9d7f775eebd579dfcfe06","sha1":"60934e7a1f201a3a486119588fe2bc47ba8a7973","sha256":"725866acc80a6f1986cf4b347b6f664c871fbcdbf486116582c9613b74e50fbc","sha512":"b94d6911d5eb421f6c836f6f985cfebf8cf4ded371ce7f69abff35e8b1f90f3e46cca58b8d7b1a7e8205e1bcec4f4be9741dccb5ca75de70af9dff344f8b7064","ssdeep":"384:Y8IekegWyzWiHjkJ2Yko2mvWCDz82a/kP4SmomkthVeG6iVCzEndkpirBc4uQe97:YjnIe9mKkwSzmktiI4idc4lrQtQat","tlshash":"a7e22cc93155753342d321b901af810a7735a524de038a80e42bfcd87efda79926fe6e","first_seen":"2023-03-11T19:09:58Z","last_seen":"2026-07-21T21:27:48.035727Z","times_seen":287,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:33.712Z","timestamp":1784667393712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:33 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a4cb803-891\"\r\nexpires: Tue, 07 Jul 2026 08:35:15 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k0vIvkJr4UybS4m/kY7fAf4RXR1rwOLa1xinLFngdVqMkk+/eXT9/F2CYU7FNP7rYpj6oHI\r\nx-77-nzt-ray: fdb54123843b6f4701dd5f6a46dfbf2d\r\nx-77-cache: HIT\r\nx-77-age: 51\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1034,"mime_type":"application/json","magic":"JSON text data","md5":"88bd6816d4679ef7a63e1e6b61490804","sha1":"a592c82f8688d81c4ff12ddda0f42d842dbcf079","sha256":"1147d96bffe9abe8aa663c63cca281edbff049e2211f810da089a1dd90051df8","sha512":"e583bebb86335657d7cca5065967a4e281280f0b4ab1fe0457de1dee47f12f84922daf5fe938c39bfb8f03e086d706f2b0fd1d86a6e79c4cce053f0943dcb762","ssdeep":"","tlshash":"d9414593c0b80e5317cc262bb89545515d5083c7e88a3d0d366d9a7f2f4cea920e6b7e","first_seen":"2026-07-07T11:50:17.724469Z","last_seen":"2026-07-21T23:40:04.186327Z","times_seen":398,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.184.244.27","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:37.303Z","timestamp":1784667397303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://arbitragenest.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Pmb2GWhO2om3zphw+ELzjw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 21 Jul 2026 20:56:37 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: VcqlPVw+rlx07rdnyafoPt7v4Rc=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":100,"connect":117,"send":0,"wait":23,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/css/elements/main61da.css?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.611Z","timestamp":1784667389611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/css/elements/main61da.css?ver=2.6.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20212\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":197048,"size_decoded":20621,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"86e88bf7598d53afdc5a8233077ba6e4","sha1":"fe65c2e65e49fa2d1ce00fdcf7ce76cf2713f1b5","sha256":"a92cd845b0439455ce0d0b33f29b30a4787c42c9224c38a1ce2bf0482f1b05c5","sha512":"036b8a560aae1f780239273e249daee6133426df304585c396dbdfe3ae21bde6b91ba4759d2f1b63a6cb8c40bd3d611b51adfe29660a2a74d9c06e8a1f7e265b","ssdeep":"1536:pKUQb2U36Y6m5ApdSCbvMEFx+mXD44d1Ob8ejJO8FHw63VyY5jAGXoRlSKnXIMlA:QfumyM8jMb5GbKz3i3bnhn5nSnAno","tlshash":"01148666b4a77109602bc73582cd916b4b34dc828952d9ebe5217507cfb3dc833ea72b","first_seen":"2023-09-30T00:55:13Z","last_seen":"2026-07-21T21:27:48.003337Z","times_seen":213,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/themes/hello-elementor/theme.minc141.css?ver=2.6.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.635Z","timestamp":1784667389635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/theme.minc141.css?ver=2.6.1 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2418\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15672,"size_decoded":2648,"mime_type":"text/css","magic":"ASCII text, with very long lines (15672), with no line terminators","md5":"ae085723cb5effbc73d92251f60aaa30","sha1":"9c3f510afd2bf1ac508cc22e4f071697ec1f3290","sha256":"eee1ce2620eaf7f585a69794864001be0bde74b874d6a18b9f2d11f074229f2b","sha512":"c47ebdc72dd2be23f3410931269df9ea49a39f136f5a8600d0c7a29087dc69248c6511812633c8894c1fbfd0e29317d2e860e98cb8bb2d8ac66160628a1ede0b","ssdeep":"192:yrG5vgHJxU2Iyoo5zpbmI0iUEze434nui:Mk45hoo5z5asKggh","tlshash":"0562412bf8e2323c01378a12a7d4079e5079c11ed50757fa6aead30a87c7a415ba374f","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-21T21:27:47.94553Z","times_seen":3162,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.654Z","timestamp":1784667389654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 859\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9921,"size_decoded":1088,"mime_type":"text/css","magic":"ASCII text, with very long lines (9881)","md5":"007e485ce6b7b2b831c00aadede13e7b","sha1":"7d372422fa8bdd6e3f017583e9a62445749970d4","sha256":"31e3c978a84bf4df91359fba5efa219633808f3859fc5f831bb62ebf5c7325ad","sha512":"f558f57b7ec51f69d758e71bcc0a66b6a79154b175978d96570b2d4c4b0e0c121f2438ca67b75e80d0aac19776dcc173c98fc2c72c11d4b2cc2b8a1a5306f728","ssdeep":"96:BxW9CszCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:vW9CsCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"4722d3817d63814e1aff641b501b184ca1d9d4cde9bbecd5e8a66203c6fbec43b71928","first_seen":"2023-11-09T00:53:55Z","last_seen":"2026-07-21T21:27:48.037596Z","times_seen":502,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min8864.js?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.666Z","timestamp":1784667389666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min8864.js?ver=3.17.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2073\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4997,"size_decoded":2310,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4957)","md5":"09baa6b31355c8aaaf51b8f8b092adab","sha1":"5e0fcc4efa536db3b14575e08bfd9b041623022d","sha256":"263d6264b8a006bde843f733401522760c8a67452cbadfa35a4a69ce6aff7524","sha512":"cd5dcf04f47aeead2f5d88c474cec762549482db6a1f8642550cafad4f70ed36e956bf6fc64bf5caad1c276b194b0585e1bf3f2bfbcdfb93856c7af8375f4f62","ssdeep":"96:BgsNt0jqf9fzgcf8FD0lCjNVobVDPkqflkxwvT8S2:+sNCjw9fsjFDxN4FPkyXgS2","tlshash":"dfa120d41b90fc6735e135c9a11aa731752fc1333d1ab8c1fa22dced98e8a9187a9931","first_seen":"2023-11-09T00:53:55Z","last_seen":"2026-07-21T21:27:47.99978Z","times_seen":2298,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/js/frontend.min8864.js?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.670Z","timestamp":1784667389670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min8864.js?ver=3.17.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11900\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40436,"size_decoded":12138,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40396)","md5":"3da14c72fb7eb6af16b3dbd5c8cdfb97","sha1":"2999fbc84a3bf8c27eaa9b350522b1ec0e3b53bd","sha256":"658f3a895bca2fee13e440e355fe44511cb4fd3bd72156b268f2950bb1003b30","sha512":"deaa63874b73a2a759916787b9e33fb178ec23a13ec9e1988a8b52af17419af78bebc27d5c795611842161169466e8759cf16a1d1cde200751a95a7a8a2d3090","ssdeep":"768:HRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9vEAzBc5GETSebsvTilauUHTSX5aodG:HRP/LRkRQx1QEa3GfV9JgEAzBc53TSeE","tlshash":"c003081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bd6ce6a4b1e8373b2775","first_seen":"2023-11-09T00:53:55Z","last_seen":"2026-07-21T21:27:47.920542Z","times_seen":2308,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"templatekit.jegtheme.com/tradiz/wp-content/uploads/sites/398/2023/07/man-smile-portrait-and-fitness-in-gym-for-exercis.jpg","fqdn":"templatekit.jegtheme.com","domain":"jegtheme.com","tld":"com"},"ip":{"addr":"104.21.28.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.716Z","timestamp":1784667389716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jegtheme.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 08:32:11 GMT","end":"Sun, 04 Oct 2026 09:30:30 GMT"},"fingerprint":{"sha1":"90:D3:D8:43:68:0B:04:9E:57:A3:F4:B6:8D:07:8B:50:E6:CA:98:38","sha256":"41:2F:4A:49:7A:CC:2A:CD:CC:0E:EA:E5:2C:7A:8E:E7:3B:EE:22:E1:66:6A:7F:B1:33:ED:A3:49:5E:A8:F8:33"}}},"request":{"raw":"GET /tradiz/wp-content/uploads/sites/398/2023/07/man-smile-portrait-and-fitness-in-gym-for-exercis.jpg HTTP/1.1\r\nHost: templatekit.jegtheme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Jul 2023 09:17:23 GMT\r\netag: \"22c5a-601746e8f8ec0;61f39880b9910\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2419200\r\nexpires: Thu, 20 Aug 2026 20:56:30 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bb7NtpucbHA1r6bIUOn6GichsemvrZ1Neo97rxM71KsSwzYtKTOfve7WYaUhX7B%2BN%2BOjH6Sm9pqXWJCJW3toQ46%2BcFowJAeajIlqBxLTxZETdWesDcCsufIZE2zVpbUef6KvFath9q7QhP8%3D\"}]}\r\npriority: u=5,i\r\ncontent-type: image/jpeg\r\ncf-cache-status: MISS\r\ncf-ray: a1ed1cd28c2c5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142426,"size_decoded":140435,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1460x1460, components 3","md5":"435d9b180466023a1d6b7b589752f881","sha1":"e51f3f2fae57130a8aa785714ebf4018c58f762c","sha256":"2eef5966b3e091ac8e318ccc07b46195021aafd99366e0361db2f33bfe645096","sha512":"27669da37280f74ca1ce6d94d2dabe10a1ab6f57490ee8287042ede611fa3d19251c7a9613ef420fd13c37a99e3d7d11c3e1fff8d5a8956a8ad3fccffb5e5a03","ssdeep":"3072:cuE+KlpbL4APsj3paHxEzfYdQ1ChepGygQfi96szeJGyaeWiLHqaWdDQkweyUpK:cTGj3Oqg6CWGaiYueG7sKTdD9weyUo","tlshash":"dbd3023d46239017d7a892a05a13c30f1336f16de20abe5251b8cdbfeaf88515694ddf","first_seen":"2025-06-13T10:55:04.630131Z","last_seen":"2026-07-21T21:27:47.89335Z","times_seen":31,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":351,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/instant.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.719Z","timestamp":1784667389719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/instant.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6777\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6777,"size_decoded":6963,"mime_type":"image/png","magic":"PNG image data, 520 x 290, 8-bit colormap, non-interlaced","md5":"f7f568007141e70418d30a470318d89f","sha1":"97980247d1e2aa882ebba602e3864dc0d22d9caf","sha256":"0ccb437b2f5ca67de8b701d600e36f36621ee3ef4307efe171dd28842cc33e70","sha512":"9f956c7423d80fd7ec66f27de0ef54d2f807ef04f6fda65e9d9f18bd6d6719ff41da61ad5b96604b7b597b371bb6830c4bdb6541ddab6aa4e919ca6f8f4d9beb","ssdeep":"192:hjsh22tEnYj7B4dCXXCuBR71nTyZAza5nTzIc36dss:G22tpj7BX1n5nuZAzMah","tlshash":"d6e18ea93278551eda64bef9b49e132055208843b0c8a2607b8cfda39ad538ed4a118d","first_seen":"2025-03-16T05:26:53.209812Z","last_seen":"2026-07-21T21:27:47.941111Z","times_seen":10,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/Group-420.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.730Z","timestamp":1784667389730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/Group-420.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5237\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5237,"size_decoded":5423,"mime_type":"image/png","magic":"PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced","md5":"9d107d8d63d29cc45cb29ef3533dafa7","sha1":"8ec53e5b2aa1cbbfe1ba1cf0d8e5c3b1652ba6d6","sha256":"921e3a536a9bedbadba2196d936f8257a87fc88205ede2cd576f6a009bc1015a","sha512":"58df0a43d0cad219234b1814337a0b3e489cf2147f1f1d9dc77c447a68ce83cefe1f5a5bab036f690d4c1d5c59cf74e91d902c6f8f6528003bc987ac0f958dcf","ssdeep":"96:WzQVVVVVVAlK0H68LyHRIOQYfwBxgDNIvX/+ANXcFG4E/dNUKYOcIebzLUmnpNV7:ov6/L3cE0tNsFQmKYOJebzL7pT","tlshash":"c5b1295c0327a1ae9176ba484fcb90313acedf42315bba28f97ce7990e77cd844246d5","first_seen":"2025-06-13T10:55:04.621116Z","last_seen":"2026-07-21T21:27:47.994165Z","times_seen":39,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIAABw/d=0/rs=AN8SPfpC04vrrzQXgs_TCM5EtruwfPzNtQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.669Z","timestamp":1784667390669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIAABw/d=0/rs=AN8SPfpC04vrrzQXgs_TCM5EtruwfPzNtQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Jul 2026 19:05:06 GMT\r\nexpires: Tue, 20 Jul 2027 19:05:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 93084\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20284,"size_decoded":4798,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-07-21T23:29:42.241615Z","times_seen":15547,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/themes/hello-elementor/style.minc141.css?ver=2.6.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.634Z","timestamp":1784667389634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/style.minc141.css?ver=2.6.1 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1711\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6051,"size_decoded":1941,"mime_type":"text/css","magic":"ASCII text, with very long lines (6051), with no line terminators","md5":"1787ccb3d1d8e93d42790b792e0424fd","sha1":"0aa761f70bbbfe08229c469bcb394269530c537a","sha256":"bbdb1eb69c6b5cbffaf1be2df2bcbd4a97d2823de9f4b856aae722900a5e27c7","sha512":"e4ab79c14df094872286f749f648796b2f94dbf5ce50c475843a05c7fdf2334191b01a3fb9f851464fd8ddf00a956c3d2d9a1eb9ebe0027a8e5d094f5a236add","ssdeep":"96:SpcpovXYXqXXXhjhqP1/4pIGwPCZBG9HzkoeUXuFucQWeAcO4vCaZmmW2t8Yj:SkofoyHh9D6VKZBG9HOUXEtOfVhj","tlshash":"d0c16663930031557633c83537c17e9879216221c4336bb5f522adfccbca8575a29f9e","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-21T21:27:47.940355Z","times_seen":2836,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"templatekit.jegtheme.com/tradiz/wp-content/uploads/sites/398/2023/07/confident-smiling-young-asian-business-woman-stand.jpg","fqdn":"templatekit.jegtheme.com","domain":"jegtheme.com","tld":"com"},"ip":{"addr":"104.21.28.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.717Z","timestamp":1784667389717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jegtheme.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 08:32:11 GMT","end":"Sun, 04 Oct 2026 09:30:30 GMT"},"fingerprint":{"sha1":"90:D3:D8:43:68:0B:04:9E:57:A3:F4:B6:8D:07:8B:50:E6:CA:98:38","sha256":"41:2F:4A:49:7A:CC:2A:CD:CC:0E:EA:E5:2C:7A:8E:E7:3B:EE:22:E1:66:6A:7F:B1:33:ED:A3:49:5E:A8:F8:33"}}},"request":{"raw":"GET /tradiz/wp-content/uploads/sites/398/2023/07/confident-smiling-young-asian-business-woman-stand.jpg HTTP/1.1\r\nHost: templatekit.jegtheme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Jul 2023 07:05:21 GMT\r\netag: \"2415b-600a96bf5ae40;61f39880b9910\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2419200\r\nexpires: Thu, 20 Aug 2026 20:56:30 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xlSaRfhMP2zbC%2Bmnyugei5%2FcVpQvdWxQ3i%2Fx%2BVhfdHbJKaLWqysd4Y2oLfJbzkaK3czSen%2BkukxMtHrRLUA208k2GcBklyjrAV7UPQUMagvCGcGvwldC6Fl4YBjRr%2FhbbLwX8WxrKHPmrLk%3D\"}]}\r\npriority: u=5,i\r\ncontent-type: image/jpeg\r\ncf-cache-status: MISS\r\ncf-ray: a1ed1cd28c2b5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147803,"size_decoded":147467,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x1440, components 3","md5":"635e214712c98dc53f0829f857bc7042","sha1":"9a7e15965805a6a29d23539de9ad3d797e69b9b1","sha256":"34cbfb008f814fb9ac9091590e834c241b2d9fa005d72952545cd5e378219843","sha512":"e588801bbda0131fae7f444532c17d99dae781d56363de4b67709e43bded826902b80e6f1de3b19caf93fdf48d7da3b5ff1468b5810f99f880f35923bb3fcb9a","ssdeep":"3072:I2HtwKI/ASHhBNmonppk2I6ehWL5UK1BQd8IIl7j0Ihdz:MKEAU7NxnlU8BQdzIlcIhdz","tlshash":"00e3122ba34e56dd65d082aec4b4d3a14b150d7d59bfb81c12b98380de489beec23f4d","first_seen":"2025-06-13T10:55:04.645607Z","last_seen":"2026-07-21T21:27:47.827181Z","times_seen":31,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":48,"dns":1,"connect":13,"send":0,"wait":408,"receive":420,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIAABw/d=0/rs=AN8SPfpC04vrrzQXgs_TCM5EtruwfPzNtQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.152Z","timestamp":1784667390152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIAABw/d=0/rs=AN8SPfpC04vrrzQXgs_TCM5EtruwfPzNtQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Jul 2026 19:05:06 GMT\r\nexpires: Tue, 20 Jul 2027 19:05:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 93084\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20284,"size_decoded":4818,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-07-21T23:29:42.241615Z","times_seen":15547,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":25,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.EHioRHaY7p8.O/am=BIAABw/d=1/exm=el_conf/ed=1/rs=AN8SPfqQFYEncm-BlXuOK9BUCr1lwxh2Cg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.154Z","timestamp":1784667390154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.EHioRHaY7p8.O/am=BIAABw/d=1/exm=el_conf/ed=1/rs=AN8SPfqQFYEncm-BlXuOK9BUCr1lwxh2Cg/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 67939\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Jul 2026 17:57:32 GMT\r\nexpires: Tue, 20 Jul 2027 17:57:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 18 Jul 2026 04:29:58 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 97138\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":194302,"size_decoded":68778,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2519)","md5":"ae3f6de2286e10d8f837248c88ebcd52","sha1":"504047593ec05eb07e3a58d26ee106c5be362a94","sha256":"bb8238b4e13a73749f3ee7dd958a2b354d7d1dd542abee91894dd821e4bd91da","sha512":"39422d1579218a5727226908eb5d8b751753b881a15a982f5e8ed801627a2d495e6657eab15af5374c146ba228e51b51bec05e12624721311cf959fe5b6f9ca6","ssdeep":"3072:kjGNxt45eITHt28KRu9gKavNuBDHK0QppB0/I:oGb0muBzg","tlshash":"b314e8d9b26270679263f4a5403f004eb53b68a5f9484dacb28de8e26df4d19017bf7c","first_seen":"2026-07-20T19:59:30.350742Z","last_seen":"2026-07-21T23:29:42.330941Z","times_seen":157,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":17,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/stock-market-graph-chart-on-digital-led-display.jpg","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.252Z","timestamp":1784667390252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/stock-market-graph-chart-on-digital-led-display.jpg HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 136170\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":136170,"size_decoded":136359,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2000x1282, components 3","md5":"05178c3cee57852b18577a659031d30d","sha1":"ef5228086fe67b7b1f7bf07dad98039661b7fd12","sha256":"ae8609d2302e8f2816486f1140762b4a0867554f0b63cf5a563a38bc95cd17a2","sha512":"242af87d2bafc18880fb16158a291775733ea09ac16afcc6bda98f7ac0d474dc4d9458cf5985f5edf9596544bb310558aa6c0b4eedafc696bc1f465d6e5da4cb","ssdeep":"3072:hBb/LGDVGQVNWV4qQF2Now1F9wsNuKctnXbB9tCpSDIu1a+4qfh+Wr:7jGDcV4YH1zvuKctnXFCpk1a/qfTr","tlshash":"72d302a9fb8d71b3d8299e7000bbcb166211cc11462065dd329a3b7686de6fca38f155","first_seen":"2025-09-18T04:39:52.716247Z","last_seen":"2026-07-21T21:27:47.828133Z","times_seen":29,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T20:56:28.895Z","timestamp":1784667388895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=79c0529070f52d14db66897c94398741; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Elementor:3.17.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":250669,"size_decoded":28779,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (319), with CRLF, LF line terminators","md5":"195d2bcd1608f0d1c44bab2038e39a24","sha1":"40d56cfa3955a6096e69db165da56f64ec2fd74f","sha256":"ff2523bf7c6611d40b8ce0dd70a841d14702305ca01be9af638bd921cf8d8fee","sha512":"09dba3b5805de39ea7333e5471ce14d6e571b039a26a798dd2fd707d7a808685f41890241e658c881d710efbff70b536fea50b446f513b23ffe4a210613df9ec","ssdeep":"1536:bXOmwqjDK0xgXgnWnxIz6H4yBQAVfZgBimRPnUf4klU7QOJbT/Ol95:uqF0h2C","tlshash":"5c3470017df31022306f609f1247160d6ae0dacbd61aeac4f5bc62a5efb5d917be3258","first_seen":"2026-07-21T20:57:17.204596Z","last_seen":"2026-07-21T20:58:31.988611Z","times_seen":2,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":202,"connect":45,"send":0,"wait":99,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/metform/public/assets/css/text-editor9e95.css?ver=3.8.0","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.633Z","timestamp":1784667389633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/metform/public/assets/css/text-editor9e95.css?ver=3.8.0 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3261\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22474,"size_decoded":3491,"mime_type":"text/css","magic":"ASCII text, with very long lines (22351)","md5":"51c3a61609244c0b628c20d87c96d59e","sha1":"6a52aab14398a1399b28babc97a9b8774fbf8751","sha256":"67f4ca9d4ea4fcf15d968412f1dbb29db656c75112dd3f8b5bad5a635e1d2730","sha512":"6f7eadf9f541f83b9c82c8201df2443d060d63e44c24455e4a86ebe79c5dcccd57436a8fc04eec6c15ee44c2d22495f825314a5bd38f60837301f43997b6d236","ssdeep":"384:MnOcPYvHvFxDn3lXzfHHfhBN0QMlLbmSqld6GOWeX:J5bBNHMlLbmSqld6GOWeX","tlshash":"2ca2c01efd4728ff427a643ed14512d41fcafb73b0e3529af491e98516ee0680369a2c","first_seen":"2023-09-22T20:29:10Z","last_seen":"2026-07-21T23:30:09.163462Z","times_seen":8462,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-10752cfd.css?ver=1700561046","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.657Z","timestamp":1784667389657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/elementor/css/post-10752cfd.css?ver=1700561046 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1774\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18104,"size_decoded":2004,"mime_type":"text/css","magic":"ASCII text, with very long lines (18104), with no line terminators","md5":"4c6ba6e16c742b2dd7776257ba98a700","sha1":"6653b3d2ae1580999691b2edbc5a221e1588175e","sha256":"d9f888a9f21d46a0072d2040392aebb43beed63b015f816189bd03a480b59b36","sha512":"f1a9db5f136c1d94d2f6c85323ddccbb6f14d45a7f8e60b07e6726eacb33e83068e71746c830818f3d1257e9299b76ae19c8105a123c208e34a2334dadc5dae0","ssdeep":"192:WYsyu0+IOuugzJu9l3fQRw8ScZ3kJv5kWzhSYMu1QRw8SPT/aGf/5T8S2Rsg9QTd:pPu2OBt","tlshash":"0e824581bcd3f020757f915f919fe15e5b2808d9872db2c6e464a127ef3ae9433e4812","first_seen":"2025-06-13T10:55:04.676652Z","last_seen":"2026-07-21T21:27:47.935188Z","times_seen":29,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/accordion61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.681Z","timestamp":1784667389681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/accordion61da.js?ver=2.6.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 769\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1919,"size_decoded":1005,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1919), with no line terminators","md5":"2629313ce1eacdf3dc7c99fa9dc87a7c","sha1":"3f595e1a5809933a2ea40625feaa868e516e4e42","sha256":"25634ab7dd576b2c61ab13f285f5d8ee65b2cf9fa5f795055f1d735df8cdecf3","sha512":"e77949c804f4509deb8d6df3d37162be072aa0cff26dba9bed2a15eb9de443ce06791b4c70dd8e038ef432cbb24040af1d58f29efe2829d339d4956b9dc45c14","ssdeep":"","tlshash":"3141323d30a8f4e5035ea4af101fb40eb2761c75116fb095a3a941b67eb0c49b361bbe","first_seen":"2023-10-13T23:32:41Z","last_seen":"2026-07-21T21:27:47.98807Z","times_seen":224,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.261Z","timestamp":1784667390261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:41:37 GMT\r\nexpires: Mon, 19 Jul 2027 10:41:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209693\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23121,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-21T23:25:46.480844Z","times_seen":24505,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":17,"receive":6,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-3776c.css?ver=1700561044","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.627Z","timestamp":1784667389627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/elementor/css/post-3776c.css?ver=1700561044 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1336\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14111,"size_decoded":1566,"mime_type":"text/css","magic":"ASCII text, with very long lines (14111), with no line terminators","md5":"17dcc73b7e53d8cb032c69a6e6f511b8","sha1":"c50cfe017757fc217dbf4757fb298796dc4baa0c","sha256":"4e2b8f4198da9506b1b452089fadf80b23355fd680aebb51ba977ebcf12c471f","sha512":"f2df4a0c2f7943d985bd506f2193080e64d1f7ac5d1cd7df7b552c91192f1250e240829fdb460a0ceecc432e2f67b9df67dc329572f28d9561609284fd2cb9e9","ssdeep":"192:E1h8LKv6moIz+FfHUIvrDHnjUbxexDjKQ3QRw8SmwSorKR4zxnJml4T8SXC4T8Sr:aIvrDHLJmu","tlshash":"6652c3997b62d025f4b7486eaa87f57c182ce46f084ec5ffe50c8701a5abb6f920c251","first_seen":"2025-06-13T10:55:04.641153Z","last_seen":"2026-07-21T21:27:47.886353Z","times_seen":27,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.030Z","timestamp":1784667390030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":29982,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-22T00:24:56.285613Z","times_seen":984098,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.263Z","timestamp":1784667390263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:41:37 GMT\r\nexpires: Mon, 19 Jul 2027 10:41:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209693\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23121,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-21T23:25:46.480844Z","times_seen":24505,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":6,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min8864.css?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.630Z","timestamp":1784667389630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min8864.css?ver=3.17.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12384\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59356,"size_decoded":12615,"mime_type":"text/css","magic":"ASCII text, with very long lines (59170)","md5":"302f6f5e9bd20da6e993cdd3b21d3ff9","sha1":"b18e7b53115d3c52e3c16aaff2cfc4bf173fe230","sha256":"eb0d325954f3d0a0e40377cf99d4e56e452cfe155d8153d8df1aaee611f4e1b4","sha512":"fd02fea233e1beb090c181524433a3c047d1765af069e9e1b45db737a02b5da1dc7a723b9df4037eb8f9b0e754443bec49ee7f98c9c5b221339c36d0dca3830e","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzi:0E0PxXE4YXJgndFTfy9lt52","tlshash":"9943fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-13T21:51:28Z","last_seen":"2026-07-21T21:27:47.964198Z","times_seen":269,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.265Z","timestamp":1784667390265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d5.css?ver=5.15.3\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":78384,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-22T00:28:05.756014Z","times_seen":161350,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-t6WxLABA.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:33.793Z","timestamp":1784667393793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/main-t6WxLABA.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-3f99\"\r\nexpires: Wed, 07 Jul 2027 08:30:00 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k1bXPv4bKH82IOYaZMOENkM4ehcINKOXCp6RNHX52IPhUGbGv8K8Uz22PilTaQZw3jp6s5A\r\nx-77-nzt-ray: fdb54123843b6f4701dd5f6a695d412f\r\nx-77-cache: HIT\r\nx-77-age: 1254350\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16281,"size_decoded":6837,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (15873)","md5":"9253d4d9d6ea32e484f0be9a0320a7a7","sha1":"762fb8fdf15626507c1c26a66aa7fe399d39e803","sha256":"1fb0b8e426f707feea50785bc24016fe14a76fb763d5eca3bc9b1d265bf77fa2","sha512":"5a1592fc87a402c636315def22f3c60dd7eeda34701b08005a192ae060acbe7ed8ae8aa709cc1664c3d9489c641e1ada60e79c66f13073ab61e6ba5bd86f524d","ssdeep":"384:9rgi5RFMkSjJOE/0BW2rkZZ795P6zrnBOVmPCRkXQbpaIF2K:9EizlSjJOEiWYoR5P6nnBOVmycQbpaId","tlshash":"0272d7742700783f711f489e16ade546b232c29dd693892d9b6fec0976c5cc0a8b37b9","first_seen":"2026-07-07T11:50:17.711459Z","last_seen":"2026-07-21T23:40:04.187106Z","times_seen":414,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min94a4.css?ver=8.4.5","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.625Z","timestamp":1784667389625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min94a4.css?ver=8.4.5 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4248\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":4478,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-07-22T00:25:19.088752Z","times_seen":137118,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.668Z","timestamp":1784667389668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2867\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12198,"size_decoded":3104,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-21T23:21:38.508184Z","times_seen":73310,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/js/frontend-modules.min8864.js?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.667Z","timestamp":1784667389667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min8864.js?ver=3.17.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16453\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60151,"size_decoded":16691,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60110)","md5":"1ff4ba8ee22c74fc654915a134c2d42a","sha1":"84e680f86992086fcc7df4994e45338dff2b6761","sha256":"fe2b279e27abcce2aaa29cb64e7424cced3465bd6837490093f8e4d26627b31b","sha512":"9f0fc703c7fef3a1f941d4dd54c5be727b131c00ae90366d41863946891cdf4ed7349a87268e13a1dd53859adecbe89a3c8e084ecab4cfe7e2441a3e52acdf88","ssdeep":"1536:feAjA679C+QRCHXC4WHqMPB8Vx8WXwCDcYNIekHeBHmjkfzRNE4cR8+SxpcxID1/:fdeVW/Czkbx","tlshash":"0c43eb463251b4e70bef40eb602b450af32319e4740eb5987ab8ddf66470d5a237b739","first_seen":"2023-11-09T00:53:55Z","last_seen":"2026-07-21T21:27:47.866058Z","times_seen":2258,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260720","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.675Z","timestamp":1784667390675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:35 GMT","end":"Mon, 21 Sep 2026 08:37:34 GMT"},"fingerprint":{"sha1":"2F:20:3B:91:88:65:20:CD:06:9D:0C:58:4D:17:6F:FC:9D:EC:41:83","sha256":"0C:7B:D3:23:E9:5B:D6:6B:F2:5C:71:91:4D:41:CE:E6:D7:1F:A2:F2:63:BA:25:70:1D:00:F3:C0:72:21:51:6D"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260720 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: script-src 'nonce-jcyLeptQtTxluLqHbnVOAQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmII0pBiEOLh-Lfz_yU2gYZPJ88zKykl5RfGlxQl5hXnJJakFqcWlaUWxRsZGJkZmBsZ6BmYxBcYAABFMBOT\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=35.SE=P5FNJOvWzonTQbdc8tWUWcN5JONQp42KXzJPwoBgZH5ClC0NZG_bdln-I8qisFArd1DH7G91DRZSzvV9afUNh_aDolJAj34Wh-eFs4hUcaiIzgTj_Kvmpt5b87b3ZHnA2x2FYwaLVMWKMNLZ-nPjv4KaWbeua7gPboyMlrwXWPqNVWMQZc8ge6NCvqiTmjTXYVrrRv0i4MrEEfDk6kYM5PSeA6M6ZmJUofxbq90-wuFP; expires=Sat, 21-Aug-2027 13:14:48 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon61da.css?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.640Z","timestamp":1784667389640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon61da.css?ver=2.6.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19751\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143332,"size_decoded":19982,"mime_type":"text/css","magic":"ASCII text","md5":"30095187e76fe7f01405fe2203c2d3e9","sha1":"c8697f641d02fc1186b44593bd4b50b612187183","sha256":"35c1141f36b39768bf2dc8bbf86467c5a833fd44244b42d539228987cf45a460","sha512":"eafb10be4c4ca5bc3ee629958a74fc9b1bb6dad2824389f4f9c7697e0f740e20b82b13ad1a7e915735f4fdc2075ca7bcfddb671b0fa2722471c1f9b2cb53b97b","ssdeep":"1536:aGC8RVOtfxrk+WhrxUm30SDkoZ42o7udB/2qcL6D4HlJQ4EoyVqfToUvEdVmA6Sx:aGCGO+hD6LlYWc","tlshash":"1ee309a2e95fbdc65bdde4d52e40af40db49b2bc8c09085ad193fc3ce2d22353591ad8","first_seen":"2023-09-04T12:57:27Z","last_seen":"2026-07-21T21:27:47.875797Z","times_seen":22,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min52d5.css?ver=5.15.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.662Z","timestamp":1784667389662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min52d5.css?ver=5.15.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 290\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":679,"size_decoded":519,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"efa88cfc042384d91e95914e69345b33","sha1":"82c415139d88242f163874366d879fe636385091","sha256":"1e335f8b9a948eedbf189b98fdb5584d1896a4eaa7f17aa064e2e3a2c41e0844","sha512":"1a2a2a5f437155491a2a15fd1b0183000b8fea16e4d82444fbf11dfbd7d81165569007c64c45abb63e856695587e2f5d0ea075b5a7a9d1fd55ee9ec431204b7b","ssdeep":"","tlshash":"62012ba506110045c2820b063adaba1dad06d2587c196e53a12fdd190cf9e5f11f6f49","first_seen":"2023-04-10T13:47:12Z","last_seen":"2026-07-21T21:27:47.892604Z","times_seen":183,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/5_star.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.745Z","timestamp":1784667389745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/5_star.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5437\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5437,"size_decoded":5623,"mime_type":"image/png","magic":"PNG image data, 135 x 38, 8-bit/color RGBA, non-interlaced","md5":"48582fdb7fa14538f8eb0d608480feef","sha1":"5e251cf61d8c05f4e984c6dab3d0e978995bded5","sha256":"b83f97b92249a16b4df5a796462d8b0e8124f94ee33df74bfa939908181a41de","sha512":"24e2cc739610032b80057bdbc018b5cc69dee48e7fb65d226bb860f88ea8385f5b7a1ab9a9bb17b6b782a973aa2c7314afd2be0ee81fed90edce44c2e3c881ab","ssdeep":"96:WSLknmWICo/sHdWXHhHyo0zP1dDY5kpMemz3xBv74fWwa9ZzgCzqbAOU:WSLknvUBZ0r1AkOeq3Xv74f/a9ZzgCz1","tlshash":"1db15c8af47156455909ee092ce0e06f8b7b1f808b51a9607ed2cc33b410df79a5d6cb","first_seen":"2025-10-28T23:11:36.269252Z","last_seen":"2026-07-21T21:27:48.023327Z","times_seen":18,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/graph-small.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.258Z","timestamp":1784667390258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/graph-small.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35823\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35823,"size_decoded":36010,"mime_type":"image/png","magic":"PNG image data, 791 x 669, 8-bit/color RGBA, non-interlaced","md5":"2dc042741505e91801511b69469a0364","sha1":"4dce6011304266937e431cb00d71eb62e0f69b9a","sha256":"190fa7e6ae9960cedc75cb99317732db7bf6a29faad41e1f1cc6d7fe4e94eb8d","sha512":"4c13cdfb9639430fb6d55b7b90a7081397b53b8edc70773afe7cb3c681c6647643c258a60c79855d525ad819cc36e5765ae56d10d187e218b0e624a2b178941c","ssdeep":"768:J5QVxanGkkEm1k84I2+75BPEjz5rx/Wrk6c6ha5z9wUHe/NKFgy1Xy:DQVxafkEm+lI2+75Bgz5V/Wuis2fNK7y","tlshash":"82f2e1e2d48319c6d9b702fac73be243fdbfa2959b040110c6a9bd9157286f83254c7e","first_seen":"2025-09-18T04:39:52.586267Z","last_seen":"2026-07-21T21:27:47.917471Z","times_seen":21,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-includes/css/dist/block-library/style.minaec2.css?ver=6.4.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.612Z","timestamp":1784667389612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.minaec2.css?ver=6.4.1 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13607\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110035,"size_decoded":13838,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"99ab466e0866c823ae5db517d59cebd1","sha1":"5595a586cbd42b31377681b9d35293278d75d336","sha256":"698b89c0da3d319754d6a837b5e6d4e6a42dc402d9ffd7559b8c4cb29c644340","sha512":"d19932f64adbdb1286b61d472526fe0be92e5fcdbecf9df9c9dc607d46e26f8912c74294256f1a6b56d0fb14a774679407187eed011f4b5b7008981aa52f6df6","ssdeep":"1536:iLeJ2f9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzE","tlshash":"03b3405413f0dcf939fba73a5e5ee248a513aa41c64a6be7e076d190614ca490cf3b0f","first_seen":"2023-11-07T23:07:41Z","last_seen":"2026-07-21T21:27:47.864253Z","times_seen":9035,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.641Z","timestamp":1784667389641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":29982,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-22T00:24:56.285613Z","times_seen":984098,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/sticky-element61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.671Z","timestamp":1784667389671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/sticky-element61da.js?ver=2.6.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1430\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4565,"size_decoded":1667,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4565), with no line terminators","md5":"902bca38c03d1626772ab51f9fd4658f","sha1":"db287e6068f218e89815d253c97071e2a655fbe6","sha256":"437d2173a503fefc1557e3ff02150e54dd8f26a8dc76d96a9df520e992e54254","sha512":"c65a66fc3226fc586f7053bce738d85509cd6eef10c90209c182b374107e3f304ff9fed8263468e0e7c65fede04762e06371b0b6056fde112b7ff9827c134a73","ssdeep":"96:j6k/sBO/Sj5cbfsK7mIXN0sK7y8M57FssxMzwofRGkeK2p:j86SjXIXNN8Mfd3yZq","tlshash":"27915265736178b481dfe687003be11a709b492142ff80d1b239c06b27a4c5d33faaee","first_seen":"2023-09-30T00:55:13Z","last_seen":"2026-07-21T21:27:47.964835Z","times_seen":226,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/logo.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.712Z","timestamp":1784667389712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 14 May 2025 06:33:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19294\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19294,"size_decoded":19481,"mime_type":"image/png","magic":"PNG image data, 617 x 222, 8-bit/color RGBA, non-interlaced","md5":"d9ea3b4787031fcc334cc95539c70a34","sha1":"f8d8b19984c4fb709fea1ce43c60b115ed53372f","sha256":"c36095f5ffa725caf20059e08aaf41ae25678c0dfcd0024c2db729f8ffab02d5","sha512":"6b88d7d6b24caa373876f810f1665571d41ae0581b7733cafdefd64a540bd1e3c9e9f241355924b0533352beb7efdd81f776b1ab7caa3a6905e6a206771b5f41","ssdeep":"384:GnObAC/7XPNgMmrehdmhZyRf+pA4mmszIr4e0fFmnpaxjkGVymHDfsAy:GgN2Ch2ZyRf+pOYx2FmnCfyAUN","tlshash":"8e82c046bc0aad5548c4eb08f69c160329b3c7c1cdc1e224adc6ad174db51bdcdaea83","first_seen":"2026-07-21T20:57:17.24045Z","last_seen":"2026-07-21T20:58:32.016014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/iphonemockup-stacked-3.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.250Z","timestamp":1784667390250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/iphonemockup-stacked-3.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 143842\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143842,"size_decoded":144030,"mime_type":"image/png","magic":"PNG image data, 1862 x 921, 8-bit colormap, non-interlaced","md5":"ec76d708dce7eddf2cb763e2f8daf91e","sha1":"e40192933f1fc93a957dd9542bbe0a846a43dc11","sha256":"ae1494370fa087e6809908d5d1a42bef49a18b305bcd9259fe5268555486c54a","sha512":"b4a575bc8134631fb01df1e8ad2959645ea33e811d9c88cd295ccf4293ff8908e0cfc43403b89fb14ab318bf9734a2fcd5a8309289f1f7c18de64365be0f7944","ssdeep":"3072:Ce2GK83FWKm9YThxpaVjSxDEg3j/dgWMCceXZ6pq1ztZ9wkEZSXV2jNLF:C1GK83FWlavUVjSxDvj1vR6pq1ztZiCG","tlshash":"f0e312801c8947ed4efe0bcd8971559a2670b18b82977ed03e0633f953a7871c5ae163","first_seen":"2025-06-13T10:55:04.623364Z","last_seen":"2026-07-21T21:27:47.984762Z","times_seen":36,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/allow-webp-image/public/css/allow-webp-image-publicf269.css?ver=1.0.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.616Z","timestamp":1784667389616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/allow-webp-image/public/css/allow-webp-image-publicf269.css?ver=1.0.1 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98,"size_decoded":281,"mime_type":"text/css","magic":"ASCII text","md5":"e6094661d8923e95b233019ebff7c8f0","sha1":"cfd836d385d475baffee45d85cfeb9bb36e70d9e","sha256":"547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a","sha512":"b5684920345ccc14419cec135d43521bdc9b77618befa0096e11e33414dba09225ffe8e19ef10f3d75a74a086cfa40be2ebf3a4310fa6395e3e2d407a7451995","ssdeep":"","tlshash":"5eb0120b56b51c0700051d30bb0b80ce213d291e43b65004284711fcfc16d781316c9f","first_seen":"2023-04-05T14:27:18Z","last_seen":"2026-07-21T21:32:09.944814Z","times_seen":25640,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min192d.css?ver=5.23.0","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.621Z","timestamp":1784667389621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min192d.css?ver=5.23.0 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3677\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19557,"size_decoded":3907,"mime_type":"text/css","magic":"ASCII text, with very long lines (19511)","md5":"38c4de8c75e447949346f8bbcf01f472","sha1":"909995844d95c6ccdb6c9675b98ffc020506730b","sha256":"73d150bdde775ecdcba274ab86c17da9231c2e5db50799d3888d13b85ba47c0c","sha512":"06e36232c52c3938a2a568f5c8fbf810968d1f376d0309bd9406f2476a1271c1d53c82ac02e31ea1b595a362fd9e764f24154d6993e4192562b301569cead245","ssdeep":"192:0B877iN3iCOy2bvGIdp8khugk8/H6qiMs7HqnFTSZq7RXDlCdkgIg:X7iNyqEpXk8/aq8uFucbrgIg","tlshash":"a092dbe4e46923c87b32c403e745f64c64d9f921cac89d59fa6f850c1ee16a316c6fb8","first_seen":"2023-11-03T05:35:11Z","last_seen":"2026-07-21T21:27:47.957089Z","times_seen":30,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.643Z","timestamp":1784667389643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":4915,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-22T00:25:07.542448Z","times_seen":902760,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/css/frontend-lite.min8864.css?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.623Z","timestamp":1784667389623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.min8864.css?ver=3.17.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12935\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":117332,"size_decoded":13166,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"dd5c83e7ec56ea8d548c79678481e56b","sha1":"38eed3bd5cfb855c29cebec72fcc4e439b5af3f0","sha256":"1485ffaff2359f92ff114399e20bd9497016d5efacf39a60d3e720d5f77c7f31","sha512":"e8024dc294849fb08a042cf86e8d5eb7d7c20ea47f8fc8080b3f7e1b2f4428121d83488cd6780456a8eabfe5447238d3bb6672ec804d69191810ae5b5d6b97f3","ssdeep":"768:U+nW5Kb3tgnlET5sZQ8tQfJjCqn/0ginSla6T8L47YwbuXh77:U9TtQxWqn/snSla6T8L47YwbuXhf","tlshash":"c7b353923d07622a662f5e3f4a87769c53a445c1de437ad6f442c413d2feee1372a823","first_seen":"2023-11-09T00:53:55Z","last_seen":"2026-07-21T21:27:47.846658Z","times_seen":1500,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.649Z","timestamp":1784667389649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:35 GMT","end":"Mon, 21 Sep 2026 08:37:34 GMT"},"fingerprint":{"sha1":"2F:20:3B:91:88:65:20:CD:06:9D:0C:58:4D:17:6F:FC:9D:EC:41:83","sha256":"0C:7B:D3:23:E9:5B:D6:6B:F2:5C:71:91:4D:41:CE:E6:D7:1F:A2:F2:63:BA:25:70:1D:00:F3:C0:72:21:51:6D"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":75427,"size_decoded":27154,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2543)","md5":"88e498efdfbf6ffd5591f9e6e03405a6","sha1":"8632b6c174e7befb69fd4f7b77de98734737c345","sha256":"fcb826167c21c909c3b183cc3ab526ca46e590ebc9b33a4cf4815c1abedc10f6","sha512":"1c03efbd0ba6cf12c3cb5040a97b69f3903fa36830159065fee3f06025cf6521818a117c6db7c993fdaa4ba30696bbffe831a95e58e0eebdc80f5d413848df22","ssdeep":"1536:XWjLpxIZnZzYOwRUSfl26KKZkXtmqR6Y06ECi9wNWFB:XDD4U6KKZgtBgtCijB","tlshash":"0d73b88cb6a5b4658363f4b5412f000eb23b58adf8484cadb288d8e1adf594d453bf7d","first_seen":"2026-07-21T20:01:36.862544Z","last_seen":"2026-07-21T20:58:32.019658Z","times_seen":4,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":107,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/animations/animations.min8864.css?ver=3.17.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.663Z","timestamp":1784667389663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/animations.min8864.css?ver=3.17.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2442\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18468,"size_decoded":2672,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-21T22:03:43.718086Z","times_seen":42570,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Space+Grotesk%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=6.4.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.636Z","timestamp":1784667389636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Space+Grotesk%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=6.4.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Jul 2026 20:56:29 GMT\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6110,"size_decoded":1218,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"796402579720468c08662b7640777827","sha1":"77bfd21376992cedffaaa6b12cc20eb07d563e5f","sha256":"11e27d3db6f525c4962a51f99cc461979a9af4409a5b070536a89e4f8b55e031","sha512":"d429e74cdd0166bd179111359f5c9d00c821a3c6f9de354d81ace6ee94b10c02fe084eb144cbaf34787d2940cc52d11e00e1ff3224797922064364de13760267","ssdeep":"96:cNQOWHQOWGJc+uhQOWfNDNQOLHQOLGJc+uhQOLfNDNQOgHQOgGJc+uhQOgfNDNQ8:ceMGxZTtGoZIKGzZNzGKZqoGtW","tlshash":"40c10192042ae504e7635cc226cdbd32ee8fe1446054da397ffe2899ed9ac315311b3d","first_seen":"2025-09-07T19:22:08.653899Z","last_seen":"2026-07-21T21:27:47.81357Z","times_seen":184,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min365c.js?ver=1.0.21","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.645Z","timestamp":1784667389645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min365c.js?ver=1.0.21 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7,"size_decoded":196,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"749034f2041f637ed40dcd96f4fd9759","sha1":"0a03f9a53a588426d83008046d855089ac4c85de","sha256":"641991d00eeb0d50ac64f69ca705f8bdc72cb725a60c8d7f7ef5191cefd5a455","sha512":"6d0a3ec65f4a640cc8c48795cc5f6e3463c9a09c35cce0206f8c93c6e8ec936cef8a650df36d5ab6fd44c1b35b00acd09f972b7e8850962ca713c3a4c6904411","ssdeep":"","tlshash":"ed400000300c000c00303303c030030030000000000000000000000000000000000000","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-07-21T23:30:15.132422Z","times_seen":452,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/testimonials61da.js?ver=2.6.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.676Z","timestamp":1784667389676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/testimonials61da.js?ver=2.6.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1082\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2697,"size_decoded":1319,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2697), with no line terminators","md5":"cb0ea27ac0491d54da68bdcd0e77d673","sha1":"5c419302245b090a4392bb35bbae5d679fa0f7ca","sha256":"ff7ed4a258027bd0434b458606aaf8a69d020d281e6abd3c0eeffd8688b26837","sha512":"8df7cbea669e8c65910c034eabb788e1d2e2eed92a752a9b794138c3c953c340be7129997ed37e32f977c08469ab00472fe04f32a0cc1b89f469c597f2d9311d","ssdeep":"","tlshash":"7351a4827062f483135bb23b266b001eb3374c29d42179d9a3b586635eb5c422336b65","first_seen":"2023-03-11T19:09:58Z","last_seen":"2026-07-21T21:27:47.858804Z","times_seen":656,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.683Z","timestamp":1784667389683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1c1f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nage: 2196460\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270062-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 46664, 63141\r\nx-timer: S1784667390.713098,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 3063\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7199,"size_decoded":3702,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-21T23:30:09.240411Z","times_seen":24632,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/leverage.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.721Z","timestamp":1784667389721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/leverage.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26331\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26331,"size_decoded":26518,"mime_type":"image/png","magic":"PNG image data, 520 x 290, 8-bit colormap, non-interlaced","md5":"50bdf5650e95badf60f0f27b3a94e812","sha1":"14c5de11b1cbc532cfe259aaf01fd42330f91591","sha256":"5b59de9b2d250ba83241179d9601b332e7fd6dd0ad34fdd0b9b0a270b03c6049","sha512":"0e546ad482d0b9d38e59efc9efdaaaa85fb82ced9a91dcc01c4ff7529589cefe08cc49ab9f3e458be17dd582ee15961401703d07f490a43aea2a211665eceea6","ssdeep":"768:vmU971/bHxRsxLDfb8higTKM2VAD2JFyJfxlNhf:d1bLswigTKMEHKfxlNhf","tlshash":"04c2e168912150713c6f4e11f6f997defc1600435bce62132fcbce6eae5622c61da551","first_seen":"2025-03-16T05:26:53.203751Z","last_seen":"2026-07-21T21:27:47.957724Z","times_seen":10,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/portrait-of-successful-business-man-businessman-i.jpg","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.744Z","timestamp":1784667389744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/portrait-of-successful-business-man-businessman-i.jpg HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74452\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74452,"size_decoded":74640,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"6d06a789c6d92765c5c5bebc5370b32c","sha1":"852be5eb9e4ce2aed8e7d727821005f88a6fa7db","sha256":"a116d4d344c9f11ed4864b49ef70faa34a694d4b9dccbe8ebab1a0ae34e77ec1","sha512":"bbb4687a2231f58c02ee445f53cb558e4dee5272017d7b2dc17431ea14a79841eead57bed57c651e757505e53ca324b96f8e09bad7f164b2878def62ffdf91e6","ssdeep":"1536:2Wmw2jLmkv9dqy03ayUmQZHksCObIfKIZQr6MVhjmxLYva83+7TzDhn:ZN2tTqy8ayRQZUOb/qviZmxH7/Z","tlshash":"d2730232523e410fc2815abd48cb57e3717073b43272062f1955ac76e2e2b72be5728e","first_seen":"2025-06-13T10:55:04.673871Z","last_seen":"2026-07-21T21:27:47.853776Z","times_seen":33,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.609Z","timestamp":1784667389609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220126-FRA, cache-ber1080028-BER\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2369587\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANHpE21LVejH%2FTPdy%2BobC84IX67qwPuc%2Bt3nP%2FbdQzsdHQIkwoNyhFnXZysDTgLyd9pcazCAeQgo3d%2FeXmgpuxe1Yreq1kHci9Ruux3%2FyxuZEeS7zfy%2B3nyJxuLm7F6xx0U%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1ed1cd1182523eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":25616,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-21T23:32:43.124571Z","times_seen":29691,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/template-kit-export/public/assets/css/template-kit-export-public.min365c.css?ver=1.0.21","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.620Z","timestamp":1784667389620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/template-kit-export/public/assets/css/template-kit-export-public.min365c.css?ver=1.0.21 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 371\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1111,"size_decoded":600,"mime_type":"text/css","magic":"ASCII text, with very long lines (303)","md5":"4ee432d2ea3aac0ac9d01136c784b46b","sha1":"48ba2c95fd24b12d388ec27a79536add8ec639b1","sha256":"1c2665008fa6f6c15056deef5134ca42043ac7df2fc20bb37d5268afafe1bd25","sha512":"3893c355f70a5581238b11c9f6c1d4724c3c3eeccc1cac5f0497ff5fbb5a7ff3382fca467712d69e33166b08d77e79452207c6a60964a19f9dcdfc4584df4705","ssdeep":"","tlshash":"1d211eb30d82a3116637c924f7e49485e4b58c396b811bd3d9e3ea2acf17c6f0978646","first_seen":"2023-07-08T02:54:03Z","last_seen":"2026-07-21T21:27:47.928065Z","times_seen":215,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d5.css?ver=5.15.3","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.639Z","timestamp":1784667389639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d5.css?ver=5.15.3 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 291\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":673,"size_decoded":520,"mime_type":"text/css","magic":"ASCII text, with very long lines (487)","md5":"d660dac198a8a5c0df41a01dccb14c74","sha1":"cb820a185377cc51a2d09bc6350ff1b03d8b80f8","sha256":"ce437d515af818cf3de2b4545912e35e7f2b9f28f1623d8e5e2c5ec744529a70","sha512":"3b9250a25af2240ba39bd64bbf02f59204af775a2ea9a97e941f9c17025a9240318fbe9a7caf098fffb519fa342cde178263ded7fa6d1163e17366b5efa51087","ssdeep":"","tlshash":"2701496d0643294141c10f0138d9fa5ded46f0a87c582f33a22adc2d8cf9e5f21b9f09","first_seen":"2023-04-10T13:47:12Z","last_seen":"2026-07-21T21:27:47.858024Z","times_seen":308,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/confident-smiling-young-asian-business-woman-stand.jpg","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.731Z","timestamp":1784667389731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/confident-smiling-young-asian-business-woman-stand.jpg HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 147803\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":147803,"size_decoded":147992,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x1440, components 3","md5":"635e214712c98dc53f0829f857bc7042","sha1":"9a7e15965805a6a29d23539de9ad3d797e69b9b1","sha256":"34cbfb008f814fb9ac9091590e834c241b2d9fa005d72952545cd5e378219843","sha512":"e588801bbda0131fae7f444532c17d99dae781d56363de4b67709e43bded826902b80e6f1de3b19caf93fdf48d7da3b5ff1468b5810f99f880f35923bb3fcb9a","ssdeep":"3072:I2HtwKI/ASHhBNmonppk2I6ehWL5UK1BQd8IIl7j0Ihdz:MKEAU7NxnlU8BQdzIlcIhdz","tlshash":"00e3122ba34e56dd65d082aec4b4d3a14b150d7d59bfb81c12b98380de489beec23f4d","first_seen":"2025-06-13T10:55:04.645607Z","last_seen":"2026-07-21T21:27:47.827181Z","times_seen":31,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.440Z","timestamp":1784667390440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 10:10:10 GMT\r\nexpires: Fri, 16 Jul 2027 10:10:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470780\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6225,"size_decoded":4198,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-07-22T00:32:21.546414Z","times_seen":74295,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/stocks.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.725Z","timestamp":1784667389725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/stocks.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4446\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4446,"size_decoded":4632,"mime_type":"image/png","magic":"PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced","md5":"f69e85f2418ca0cfdd4258a43b910f99","sha1":"892f5b22a7e6357070dca327e3a1d32ba5644af4","sha256":"313da962e74888ab582dddd31adc71cdcffba64eca2743fcb5e0fd91aca1b03f","sha512":"6b76dc26c3d3aaa1c80b0928bb33ddebf3325e7d03bec0401e6a6bdd3deec9b2eb87adf6fbfb15c4793e5ee8c3e506e1ff19115c4aac8c87e04ffaa6052c4243","ssdeep":"96:cXKJJJJJJLTtTnMq1XXflgm0K9ebOnmMrgvAGWxLX542Hhu/TF0AhSf+evdJJJJU:cXKJJJJJJXtT3XvlgpK9w9MQUH42H6Z/","tlshash":"d8910be72f50f3d5fa7d0b1fa3479fd4294a880b24b61965551b22f92c3853c6824df2","first_seen":"2025-06-13T10:55:04.613662Z","last_seen":"2026-07-21T21:27:47.825069Z","times_seen":37,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.685Z","timestamp":1784667389685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10910\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230136-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3334388\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BfbiuE52fqzwffZEueTXfKviZf4lCP8DW6kxR%2B8QFY9D9eEimr9yRqIcW%2BVol1HwqPaodZJP68E7t%2BaCHehHVsKu1LBlJjZG%2Fi5hNeHlGL2Jo5Ks5y%2FqWi%2B0zlchf3vp34%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1ed1cd1894323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42863,"size_decoded":12033,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-22T00:19:34.40074Z","times_seen":108172,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.236Z","timestamp":1784667390236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:33 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k+Q9d/P+FQg8bc6A40NNFDISvVEJ8kTBQixu+yUktuKdMAuIpu28DpyO7RW1Qs8aTcuhDeg\r\nx-77-nzt-ray: fdb541230c4abef801dd5f6aa94b7420\r\nx-77-cache: HIT\r\nx-77-age: 26\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-21T23:40:04.229834Z","times_seen":4743,"resource_available":true,"data":null}},"time_used":3317,"timings":{"blocked":-1,"dns":34,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/favicon.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.890Z","timestamp":1784667390890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Mar 2025 13:31:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4392\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4392,"size_decoded":4578,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"b75d9c6a7debf98aa196e6c304d6466e","sha1":"ae5ba276a0969bb6e1e6078037585b4ad1aab242","sha256":"8a7e9389355f28fc39264fd74b57b3f2ee090a362d97c985265b25622b0da5b0","sha512":"84fc5e3acd7cc79fb6d0f5a0cafe9187c23e763d01ca4f319ed1aa94cac5999302ff2bb2e4f6c261f6c3edda97f829427e704ee7031e028583a9fedcccda6946","ssdeep":"96:eSOknmWIrF/THxNG0ddqPv1wG+HCMHvHjHyGZ9Vx08XE7k18swgBK0k:eSOkngRy+iMPDD47kG7","tlshash":"c991f749ac86ec005a8d7a484ceeb22253b72fc48f50909aacd8cf53cd2017dcd8d2db","first_seen":"2026-07-21T20:57:17.257Z","last_seen":"2026-07-21T20:58:31.998126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:33.905Z","timestamp":1784667393905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 14:33:02 GMT","end":"Tue, 01 Sep 2026 14:33:01 GMT"},"fingerprint":{"sha1":"CE:B9:32:81:E9:D2:46:C8:31:53:55:D3:41:19:F7:94:91:30:D1:93","sha256":"54:C9:41:2F:97:E8:14:28:D7:2C:4F:FA:E0:C3:3A:BC:85:F8:14:22:1C:98:23:82:53:4D:5D:58:C9:0B:C9:68"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://arbitragenest.com/\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 0dd3c95f86cdb6b59a0dad25ffcd406aa7c7723b\r\nx-77-nzt: kzg8xAXEevtot0HfyhXFOazHwb9HOI63ey24Db7tYV5Z42ueHPB2Ld7oedSGM0Kg+sy+Dro\r\nx-77-nzt-ray: e2f75420dd2107d005dd5f6ad545120e\r\nx-77-cache: HIT\r\nx-77-age: 414\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7216,"size_decoded":3346,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"05d7604a60456ab25eb809557b353edc","sha1":"e32135b721636e7994e42748da35341e03dfd123","sha256":"5892aca834fe3f9f8fb66f68c8a3eb2295708a3b428cf355d7f3e3c1a0b7b62e","sha512":"db4124c008e22597192e1f07b44575ff191a03322f763bffb1efd129152e0f6f1546d98f5016967b32cc71a8252fefc0546aef0be258e8343fbba4ae2afe00da","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcbWbYKZcF+jhqoWQmw","tlshash":"48e1b54f9a144ea987c6438276cfb84675bc80734250993afd8cc8b842697cda3e3b94","first_seen":"2026-04-01T12:23:41.393805Z","last_seen":"2026-07-21T23:40:04.184789Z","times_seen":3116,"resource_available":false,"data":null}},"time_used":3341,"timings":{"blocked":0,"dns":31,"connect":8,"send":0,"wait":10,"receive":0,"ssl":3292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/linechart-bg.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.248Z","timestamp":1784667390248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/linechart-bg.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 95906\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95906,"size_decoded":96093,"mime_type":"image/png","magic":"PNG image data, 1861 x 1013, 8-bit/color RGBA, non-interlaced","md5":"67834ce4e8b39b013a71ceffca2b010a","sha1":"6883560f7bf206f671dc02c49829aa76dbb8ba07","sha256":"6d56db1e34a5e254760d6b71d663ad9e04d01d19a29e33a26b8f9cdd774cba8d","sha512":"0d4261a98dff1620c484405a944e00784ba8c65a6e6d8c9790625d2dc87984e2f7440087d33f612894ffd3b38115af5580d8da3abb0dade376c94a3d8a75019d","ssdeep":"1536:p/72POei2GLF1Yry6TKDaJJOxYYlCArzwB5ks2hnZThLzbPfh0PjxItWGuPNjO:YGyIy5TFOiYY2zTnZTVnPfhGIjuc","tlshash":"d6930233fb4e3ff3f448973a89b5261a3739c0ab14006627abb1fb680c5664fa147951","first_seen":"2025-06-13T10:55:04.609728Z","last_seen":"2026-07-21T21:27:47.799856Z","times_seen":40,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.629Z","timestamp":1784667389629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9745\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":195417,"size_decoded":9975,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"99fa0b36e1f7fa489894bf922636bef2","sha1":"f786c9899e7a3f8fb2cbffb0cb5b16906cd61fb0","sha256":"82d6de6bfddc2f8fe723843119f63fe75f7c2e2a4d27d85c255afb3177433ab2","sha512":"b0bf2bc98186cb383f82d64af5790f92e0b06eac142646ca278f00e402524565d80bed482efcc88a0a86ed951ad309f4c8227ec0baba41386a7ccb6a95b452f8","ssdeep":"1536:T1KvIfhcI4rLlvMrDVW40qpEWfwhuKSq91WwYzDoQdafMhMFj2G9PuSj3wSki7KK:TyIfhcI4rLlvMrXhMFjVbjz","tlshash":"40149d887e13d029b43f594f6547f1ac242c8cce892da5e7e4149223f1bbefab398551","first_seen":"2025-06-13T10:55:04.629092Z","last_seen":"2026-07-21T21:27:47.915133Z","times_seen":26,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/tradingAssets.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.720Z","timestamp":1784667389720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/tradingAssets.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22611\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22611,"size_decoded":22798,"mime_type":"image/png","magic":"PNG image data, 520 x 290, 8-bit colormap, non-interlaced","md5":"18c12a444265b5e31093b379a11c2e0a","sha1":"d1b8b9b66ca5e29c35d6d4d3f7f6b313537781cd","sha256":"ec4e5ac4344534bf5dfc2127c1c8c3602c33eb017a9aeb67c086811280ad2f12","sha512":"37f5294dc87e9f0bdb0c57778c81af7249c13d8dc45c063529f526a36069f395bb456a554935f994baa3fc6a781e50e0448292529fda142c14526d42f480ced3","ssdeep":"384:Dr+T2zz3hV67nDkA8kRUbgFQLlWv3puwThBrIq1pzhtYpAKY4BAUeWBwNzYf0qy:dRI7Dk1kCECSpuw7zuiKUUeWwYffy","tlshash":"e1a2e17e037b9d68a2ca1ffd2044a364b4774e1d25eb6e4f1223e736c0e682949d91d2","first_seen":"2025-03-16T05:26:53.21609Z","last_seen":"2026-07-21T21:27:47.797125Z","times_seen":10,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/lib/jeg-framework/assets/css/jeg-dynamic-styles6f3e.css?ver=1.3.0","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.656Z","timestamp":1784667389656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/lib/jeg-framework/assets/css/jeg-dynamic-styles6f3e.css?ver=1.3.0 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":182,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-includes/js/jquery/ui/core.min3f14.js?ver=1.13.2","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.669Z","timestamp":1784667389669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min3f14.js?ver=1.13.2 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6801\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21438,"size_decoded":7038,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-21T23:40:36.59509Z","times_seen":45372,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/gold-1.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.727Z","timestamp":1784667389727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/gold-1.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5135\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5135,"size_decoded":5321,"mime_type":"image/png","magic":"PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced","md5":"dfd80232f7b392625527fa3e96c7407e","sha1":"0f949c4cd67665b43a517770bcbf8dcfd91a7455","sha256":"e02118ba5e2af120c5933e722b28c4b878c08cccf932e94430a76014e375cab2","sha512":"1a3b552a35648f7f0604f97624924cd3439caf475ea6358f92fd84ba94fa216f3201a9a5e6d1896ff553e96e2f9a0e087341f8d5741dadc45e823741bfe20451","ssdeep":"96:GAVVVVVVVKBPR2xx+NDAAP8jRJj7z5/nsxCgpRGiAjKXA6odUwAv8/IRKoLVVVVU:YPhAAQ7F/s4ViCUw28QRKoQ","tlshash":"56b10aac2663858e1063555c6fcbc0717a9ee782b19f3b05b6bce7101f5aefc11946c0","first_seen":"2025-06-13T10:55:04.614762Z","last_seen":"2026-07-21T21:27:48.039948Z","times_seen":37,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.155Z","timestamp":1784667390155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:41:37 GMT\r\nexpires: Mon, 19 Jul 2027 10:41:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209693\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23121,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-21T23:25:46.480844Z","times_seen":24505,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":67,"dns":0,"connect":16,"send":0,"wait":16,"receive":11,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"templatekit.jegtheme.com/tradiz/wp-content/uploads/sites/398/2023/07/portrait-of-successful-business-man-businessman-i.jpg","fqdn":"templatekit.jegtheme.com","domain":"jegtheme.com","tld":"com"},"ip":{"addr":"104.21.28.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.275Z","timestamp":1784667390275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jegtheme.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 08:32:11 GMT","end":"Sun, 04 Oct 2026 09:30:30 GMT"},"fingerprint":{"sha1":"90:D3:D8:43:68:0B:04:9E:57:A3:F4:B6:8D:07:8B:50:E6:CA:98:38","sha256":"41:2F:4A:49:7A:CC:2A:CD:CC:0E:EA:E5:2C:7A:8E:E7:3B:EE:22:E1:66:6A:7F:B1:33:ED:A3:49:5E:A8:F8:33"}}},"request":{"raw":"GET /tradiz/wp-content/uploads/sites/398/2023/07/portrait-of-successful-business-man-businessman-i.jpg HTTP/1.1\r\nHost: templatekit.jegtheme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Jul 2023 09:16:19 GMT\r\netag: \"122d4-601746abefec0;61f39880b9910\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2419200\r\nexpires: Thu, 20 Aug 2026 20:56:30 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4g5sIR6BhFV8VGkAb6x%2FFSd%2F%2FJR6vbJCezZTW1LdbhifoMpig6DSP0bPaLweBvrJdRGc9DCF553EJN%2BZ58qggcpdg3U3kgIE5cOuOXr%2FTPrdtMbs8u5jDHp8%2Fb3IlClK6GPs88x8mE8tro%3D\"}]}\r\npriority: u=5,i\r\ncontent-type: image/jpeg\r\ncf-cache-status: MISS\r\ncf-ray: a1ed1cd53c635689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74452,"size_decoded":72319,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"6d06a789c6d92765c5c5bebc5370b32c","sha1":"852be5eb9e4ce2aed8e7d727821005f88a6fa7db","sha256":"a116d4d344c9f11ed4864b49ef70faa34a694d4b9dccbe8ebab1a0ae34e77ec1","sha512":"bbb4687a2231f58c02ee445f53cb558e4dee5272017d7b2dc17431ea14a79841eead57bed57c651e757505e53ca324b96f8e09bad7f164b2878def62ffdf91e6","ssdeep":"1536:2Wmw2jLmkv9dqy03ayUmQZHksCObIfKIZQr6MVhjmxLYva83+7TzDhn:ZN2tTqy8ayRQZUOb/qviZmxH7/Z","tlshash":"d2730232523e410fc2815abd48cb57e3717073b43272062f1955ac76e2e2b72be5728e","first_seen":"2025-06-13T10:55:04.673871Z","last_seen":"2026-07-21T21:27:47.853776Z","times_seen":33,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:33.796Z","timestamp":1784667393796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://arbitragenest.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 21 Jul 2026 20:56:33 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k1mtYsh8KN5Vg3P365C2LQwkhNTyG3rOffHyU1d72b/jsB0TzrgzLk/kdKh4fxmU3hlV8II\r\nx-77-nzt-ray: fdb54123843b6f4701dd5f6aa8dc662f\r\nx-77-cache: HIT\r\nx-77-age: 1254350\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8208,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-07-21T23:40:04.081455Z","times_seen":406,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/plugins/jeg-elementor-kit/assets/js/sweetalert2/sweetalert2.min430c.js?ver=11.6.16","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.675Z","timestamp":1784667389675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/sweetalert2/sweetalert2.min430c.js?ver=11.6.16 HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13079\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42588,"size_decoded":13317,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42524)","md5":"4a20901d82406ffde5dc532383f8e655","sha1":"6dcfaf49ac382b483ae800b020b3b2964031df82","sha256":"f53a04c5c02b9670b31eb9b6c6a23646d779b12c6dbb98f894dcfc70e51d2671","sha512":"85631e1e6c5287e71d4e8ceef9e8abd7511a86b0c9f8a3d44dd3b9a3a8185a1dfc638d0d0925f818a884b88d7da3131b10ae2eb4eb6accd2b5a8be4789662789","ssdeep":"768:zPb1oLseD1xQIIe662Xna96GR88Dy4ewDQaU1qLUp+l6rdxfJ2IxAn1TEe1E2J3x:H6nIjH0VdlPK6ja6zSaXAvg","tlshash":"6e131c621600b1331afb08e5b5f58655fa120478b80a8c60f57ccd965afad8366f3e7f","first_seen":"2023-03-14T03:55:08Z","last_seen":"2026-07-21T21:27:47.895883Z","times_seen":185,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/advanced-tools.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.722Z","timestamp":1784667389722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/advanced-tools.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9278\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9278,"size_decoded":9464,"mime_type":"image/png","magic":"PNG image data, 260 x 145, 8-bit colormap, non-interlaced","md5":"90e203447483d6bca9a15a699173475e","sha1":"7cf76200af9b7c81b525c50b6567d481e4ab1570","sha256":"eb63b5792b07b872404680f5bf28c4bde13ba9db2f6c63a1b9aac0b40d97dfe8","sha512":"7add84429f86ae1d016a8607e9bbb632733820de2ef89f4aeb8aef97ee75fe6ccba890a23d6bfa2d1950777cf86d28351a1eddecfa3e4f16af052f2b4d99934f","ssdeep":"192:HuooNnd410aKEmhSYSMLw8hzPwJm154zwGyEjSLqWhHdN:HuBe10aKEkS5MLw+PrwSEjyqWBdN","tlshash":"3712c0851cd678516ed732b9a5c44228e5fbf01ca4114e8e5f53c789dacb4a5f8b3c42","first_seen":"2025-03-16T05:26:53.217Z","last_seen":"2026-07-21T21:27:47.951299Z","times_seen":10,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/images/copy-trading.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:29.723Z","timestamp":1784667389723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /images/copy-trading.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12217\r\ndate: Tue, 21 Jul 2026 20:56:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12217,"size_decoded":12404,"mime_type":"image/png","magic":"PNG image data, 260 x 145, 8-bit colormap, non-interlaced","md5":"692a7f31bf9ad575aff934008792d057","sha1":"a8f2e7c59150917acd3f0267cd933a822940fced","sha256":"f0519c83711773d1b51c2fa324d587310782ab2a3f5f84c0f58df37d4eabb8bf","sha512":"2ddbef3a5ceb440a42e333f3bb4726c526b4f8451ba301a0a552a6060e09a2bfba99ee8e03ca2769fb61cda0fd6316e73e0e343fdcc6fb106c9ae2d4aec96a69","ssdeep":"192:wH5DXH97sEkTn9CLwDkhCAnaScSgMetDN+D+DOBeZDbiGa/E2Q35IPBbjzxWKpcW:fEkTcUIoHLLsiCaDMM2i5IJbjzgKn5OK","tlshash":"e842c03a9b5b7ea8180b5805b467cf619c3637f57da9a740936f3b2f1e200077b8e241","first_seen":"2025-03-16T05:26:53.240916Z","last_seen":"2026-07-21T21:27:47.911003Z","times_seen":10,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitragenest.com/wp-content/uploads/sites/398/2023/07/hundred-dollar-and-different-cent-coins-isolated-o2.png","fqdn":"arbitragenest.com","domain":"arbitragenest.com","tld":"com"},"ip":{"addr":"185.93.220.48","port":443,"asn":395092,"as":"SHOCK-1","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitragenest.com/","date":"2026-07-21T20:56:30.253Z","timestamp":1784667390253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitragenest.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 02:52:32 GMT","end":"Tue, 13 Oct 2026 02:52:31 GMT"},"fingerprint":{"sha1":"DA:E4:20:3E:DF:E8:2D:E6:06:F7:BB:63:6D:11:DE:05:FC:15:51:C1","sha256":"69:9C:FB:B3:AD:AA:69:40:FE:83:4A:58:C0:D0:A0:33:CD:A8:B1:A9:AD:95:83:FC:B6:B1:1A:F6:F7:6D:C3:C0"}}},"request":{"raw":"GET /wp-content/uploads/sites/398/2023/07/hundred-dollar-and-different-cent-coins-isolated-o2.png HTTP/1.1\r\nHost: arbitragenest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arbitragenest.com/wp-content/uploads/sites/398/elementor/css/post-82cfd.css?ver=1700561046\r\nCookie: PHPSESSID=79c0529070f52d14db66897c94398741\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Aug 2024 17:14:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 192039\r\ndate: Tue, 21 Jul 2026 20:56:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":192039,"size_decoded":192227,"mime_type":"image/png","magic":"PNG image data, 558 x 450, 8-bit/color RGBA, non-interlaced","md5":"a64621cfc9518e92fdbda82c8014df2b","sha1":"4551c445d556afe19832ee25a4dae5324a7dd6b0","sha256":"a78f49f058091402a1c71957dc9d649b7962176da8e8e2b603e53bd04f36f2bc","sha512":"fa0052e57d614dada31bf80dbba0a786b022abd128d080d4d6ac0e75d05953f88f99cb5a160547e4e060956e54c78a8cbffbbba34f666af5976fcb054c92f1b8","ssdeep":"3072:X38WfpisYVqxNfqj9XInyRRETFhwcTQvhQHXHwdQrId2UrFwaIxu0TvHydGLxMvq:XniCyj9VbMFhBQpMHwdQry2UrCfXrF9D","tlshash":"411422c4a415e384ade4af877c37528898b9d40791b624eb27541f8fe0c8cc7057bdda","first_seen":"2025-06-13T10:55:04.659401Z","last_seen":"2026-07-21T21:27:48.010722Z","times_seen":37,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"arbitragenest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}