{"report_id":"95b62a46-4594-437b-bdda-e20d910365e4","version":6,"status":"done","tags":[],"date":"2026-02-04T17:27:28Z","url":{"schema":"http","addr":"tradesphereco.com","fqdn":"tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"www.tradesphereco.com/","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"title":"TradeSphere","dom":{"size":164869,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15021)","md5":"c0222a1ecae1a2b87f84612d3b6edaf6","sha1":"854636ef58f370d5ee5857557c27d394fed96c34","sha256":"ea0e22e8036078c806c667c63fa2be9afaa41ff316802ccadad6d1ee5f8b587e","sha512":"e14d9ccc253911fadd5f8ecb8df57daa852de67b57519d279a6e4a9b72224797f0247247e1387703141a07da7162892548d4bdc60b96ba2fd1799fea13e8eb7b","ssdeep":"3072:YvD7uSdMD8WZobjemlUVugamHDvCoxQk6oMpemG8Gx82mZAdwYjK+c+iO6SHDXz7:A/uSdEZobjemlUVugamHDuPef","tlshash":"b8f3e822476844b6746fc799f099f71ee608f841de8a82d5f4b6c154a4ccefa21b370b","dom_hash":"domhash99c043e81ec56cd52e577303e397b69c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tradesphereco.com","fqdn":"tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-11T17:27:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.tradesphereco.com","ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2025-05-04","domain_rank":0,"first_seen":"2026-02-04T03:07:01.692759Z","last_seen":"2026-02-04T03:07:01.692759Z","alert_count":246,"request_count":82,"received_data":4672598,"sent_data":40967,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"pickadate.js:3.6.2","description":"Mobile-friendly, responsive, and lightweight jQuery date \u0026 time input picker.","website":"https://amsul.ca/pickadate.js/","common_platform_enumeration":"","icon":"pickadate.js.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"tradesphereco.com","ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2025-05-04","domain_rank":0,"first_seen":"2025-11-27T04:22:34.408457Z","last_seen":"2026-02-04T03:07:03.060439Z","alert_count":3,"request_count":1,"received_data":164267,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-i18n-js-after","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"35c2c3d28067ef5ee441512554687830","sha1":"f759bf7a4b19575f3e6ab4bcb3353a5be604bc83","sha256":"b6f0aaa826de7bba21896534a239b1341d2558697dd3408faf9fca86e1cfc6b4","sha512":"a97ffc3a3eee264140cc73636d1eb8aa6177a053af3f94bb813cc3614826ed332eb20f84ab871648cd58bc2b321d557657dc12fcf1dcd76e54cc5155000b6f6c","ssdeep":"","tlshash":"6b1112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1020,"data":"","first_seen":"2025-12-13T21:20:30.300889Z","last_seen":"2026-04-05T08:09:44.415977Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.min.js?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"fffdb6679196753bcfa1767df50ffa0f","sha1":"b47de9386586d4ed9acb42cf001cbc2505b1ea10","sha256":"b4f6b37beccf9dd518909c6777ed26d3aed7077538ec9f14c0f002604946c82d","sha512":"a1e727c214fb3c59971759d9efb7c8c5dd6d45752ce8226771b38b74697c5bc8bacb3eda7fe0f7e3c96d76028a6471cefe96c965a18b51a0a55ed760e6be9544","ssdeep":"192:G3+XrdT5pCvWRPtTkiiX3hlSWqlDfxALo3xs:G3yrdT5UvW/AiiHSlN8ohs","tlshash":"6802f8e8b190b05015fb62f8813fea2e633b2a556d8f9480de12c6d46f75d6c9162f8c","size":8308,"data":"","first_seen":"2023-12-13T16:16:21Z","last_seen":"2026-04-12T22:03:19.156083Z","times_seen":4785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/um_common-js-extra","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ef89325d34401f8637dfdec3e3bc72","sha1":"7b53830a9f08cbd5f909ea221497adb6b38327bf","sha256":"fd5ea07ab25ce3004cc324eaae4a26acc2f967d48b54bbfe04ad64927d2bde0b","sha512":"da68fbc823504efdddb073db3d7ab4ec4e72f56fc3e44c7db7c6b1027d8d5548ea5d8bc06e8014a6f6ffbf60da66de4a165bcbcd61698dcf4b78bb2197fde964","ssdeep":"","tlshash":"cb119288d1c13df2be84fc7438ec223150ad0b81c0b6ac1cdb99f3a648ea91e1dc8c40","size":1056,"data":"","first_seen":"2026-01-28T01:45:23.860006Z","last_seen":"2026-02-11T01:17:45.469183Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/select2/select2.full.min.js?ver=4.0.13","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcd7500d8e13d2b2aae5d3956dc3e21d","sha1":"aa40e683c82dd844db73fde37048cf7fc145135e","sha256":"5c6fdab80cb86a279695dccc226a1fac50e2c922bea70242edaa28f52b7bad2d","sha512":"65ab44d85b09e8f383f00c298239a1ae944b9b452dea7e450889dfa4a1aee11861b380d51ff5551b56b526f86f14f856becf1537d1afc005e0c09a3d3e2b5090","ssdeep":"768:foPw7Fnru7/eGGG2nqwi83nORlJDRGookOlxNk7h2tKCBQOu7uq7dnnAjiEcEpWW:gs6knORYkOvOcE7JAvcch","tlshash":"8b73b54c7a53723542af20e7256b150922376b3e600b52a8b428cdec6dbdd15736bf3e","size":79212,"data":"","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-04-12T22:03:19.22245Z","times_seen":6830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-12T23:01:40.408439Z","times_seen":144531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/js/frontend.js?ver=4.4.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"4411485dc2d9fe1b87546b8b322e7ae2","sha1":"b5e3e2558b4920385e27369c3ae07bc2619337b9","sha256":"ae294a6453f9cd7af52ec1797a685feda14bec8ac5085266a42685ba46a786db","sha512":"cc2af092657d6b49949a00f70beb625ffd06adf059e19c265b8710b098b6f2461cb458285e18c59f39736f435bc5ec23a917bd87893489029fb33364cbc4544c","ssdeep":"","tlshash":"0871ffc8705711a154bb73668f07290ceb32e52b4189ab083d7c87de2ff545a83b36ad","size":3480,"data":"","first_seen":"2024-08-31T13:32:52Z","last_seen":"2026-04-12T13:46:05.427935Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/fileupload/fileupload.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"0684c0f224a71cdb346ef5ad830a6dec","sha1":"af618b53042abd38396bc602921f9970cc4930e1","sha256":"1cf301fc7abaf94d065bda1619c2fe5c57121697661a36d974e1a96f98b64e90","sha512":"054c3adb5c58501e7c6b6e340c17ab3ad5bae6e2b857b326ac901d059f739e057621eea75e39cdbb64c54403c924c7a0797119dd40ed3b8b9b0098c90d78f104","ssdeep":"192:TXz8mnUAVTzUszM2NySLKLAEdvjQrh2aa2++Hq2DjrdsF3AXnSAT152rq4S:TX30GySLK/ljQrha2++HrsOxTPz","tlshash":"3f12d681f2e31c15e7b7b17ca0df16f65012ad225d83831460a4e2c479e6e299ce7fe1","size":9808,"data":"","first_seen":"2023-03-07T12:07:57Z","last_seen":"2026-04-12T22:03:19.105577Z","times_seen":5296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/common-frontend.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"322a3e9b97a2ba4c59f7bd4275fedb79","sha1":"24d1d49451b7943e136c01b709fa25b243c0a60b","sha256":"53c43eb20d815b17e2a86963a906f89928a072a1baadabd35e7559e1393e4f62","sha512":"d061172c31bb8a48b7f536091cda2742e6ad3b1f1fa1338735b83596500abe1d1e692b5a31e6a93dd5699a30207220a659eead4e7356da2a474e35af0890a1ab","ssdeep":"","tlshash":"2731513c2a3831b5e033903b38f73e1422ba74395515d8237785cc7a0cf4ea99aad620","size":1800,"data":"","first_seen":"2025-01-20T10:26:18.424921Z","last_seen":"2026-04-12T22:03:19.215396Z","times_seen":3751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"2425563162742e42b592fcc4e339c50d","sha1":"0b12f6c18075227b4b37b186b130cfb2de2fdde8","sha256":"de4e37d22fb09479944c1c276a3a37919822ec50a1282b570b84c26f593a938d","sha512":"bebf4f27a5c938710328d97b73a5b72f0dc2b228d1b7b400ad42bf5f3bd122d5c4c4320699ffc96c91894e0d4b29843024702574abea8b9e6fe763f1ab37e1f8","ssdeep":"96:pKcQfyJTaDzmi9eYkPaPAyyE2UXP2Ly1T2JTCyWT2JTsefYvUMmhemvmYD0ed7mE:AcZJq9eYGgby9UXOVLWefSBiprd7BLu+","tlshash":"aaa1330db16445fa34779af3b8f55b71331b2931b65cc605923b98332c71d58e2f2845","size":4891,"data":"","first_seen":"2025-02-18T20:57:23.780451Z","last_seen":"2026-04-12T22:03:19.225292Z","times_seen":3693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/wpfront-scroll-top/includes/assets/wpfront-scroll-top.min.js?ver=3.0.1.09211","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a6d9799aa5bca66aaca03ad26e6b6b3","sha1":"59158785f36c66a415d8563beef49310c270d61c","sha256":"7b1a6b8e38a3dc77d351b47f733f436c67b8f66959768b45e98543a5fc655cd5","sha512":"20eb61ef0bb54eaf89250ead4de0020ca0b2ee993743f632216ac2730dcc7e14c9c76e6592183f15000e207cf3b3c5709b129396a440a8910bdde5d0ffccc0ac","ssdeep":"","tlshash":"fe3110ccb82da56343bb945e083f2508f033052b686029881055ccf93f7cdab7a47b9a","size":1490,"data":"","first_seen":"2025-06-30T00:48:16.494202Z","last_seen":"2026-04-12T17:23:05.245773Z","times_seen":1949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/select2/i18n/en.js?ver=4.0.13","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf932ba09a98fe11bde8e1f3dd5e2cfa","sha1":"6bb5c48e18078a5688c6f7e187cf3c44057cbc1e","sha256":"0bae803be28e5cdb97116c21c1f8d80456b7806708cec3c51d0019f6a4a1dc6a","sha512":"c139fe636223fefb1f5c84e067405d5a7bc08d3ade1f1a73f549d5750623643a4d5f08507fdcaf4d42d36b3d3dd2304f2a309c95ecf5728cf7716067a47b8803","ssdeep":"","tlshash":"480112ce38c2700c24973172787f350e763a5dcb995ce5dad22a2089fc24289803be6e","size":844,"data":"","first_seen":"2023-03-07T17:01:06Z","last_seen":"2026-04-12T21:05:18.928618Z","times_seen":4226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"7895a83a2e3717b4937cbef999833ae0","sha1":"ec9bddb891515f20d705dd3276cac39ee587aede","sha256":"3156ac3f8b5c61bf0e9df9e452563b35cdb5fe9f0abbda56d672728fc7119540","sha512":"674b9af4db0e4312fa40a190d4c3c5045f9637711338f6fdefb54e045f5b73bd00965d2650514681c7d54a60f5f54ce5c73f31969582d4c83f1c3e96c0cb655c","ssdeep":"","tlshash":"47e0ed0ebdad9ad223b02572a036843237262d3aa21f05247417c6b05c3d7856ae0a32","size":388,"data":"","first_seen":"2024-10-11T08:51:25.809743Z","last_seen":"2026-04-12T22:03:19.166205Z","times_seen":4065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-util-js-extra","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c4e441c2975677a06d8c69d99f08617","sha1":"8716d3cd5d6f3fec6cad0700d60c7f8c4917fb88","sha256":"5dc7c0d116ca08ad8f2f385c664f2c6c0846180e70e3d1bf01de9bdf1e09e42d","sha512":"31586d8a5ecfa17dafc5ff1cb24ca38a5af3024f47d3bd1b146e97f34c030118118c471cf7406fc61968902d1ee20c8544663cfd4097f7ba698e6c5906d81f83","ssdeep":"","tlshash":"751112ddf8aa2f5ba3ce5df6541ea37b2460f551d0554c0527c691610120c85df48401","size":1013,"data":"","first_seen":"2025-12-09T11:56:16.957385Z","last_seen":"2026-02-04T18:31:30.430951Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.js?ver=1.0.0a","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"c705ef91638e363c8889578125c08e36","sha1":"de12f676dcb87743c24a18ba64dc0a3746f7fb18","sha256":"31e6722068108fda3ffdd3275abfc3600930e7dac9597c7948ab931e8b72ad56","sha512":"e4501054d8033caa48dfa2a7dabe512e00db3ff8d0bc48e7a934a3983b6980fabd02c1cf9b5539e7a93e03cff6e476122970997053cf192b126f57cf409138cf","ssdeep":"96:DqwDdwd5Rh4QVKmvF0gCKzNxvzgsrpXGvu4rEwp:GVigcigp4y","tlshash":"eb91b71e7391792101a7e2d0941f121f30317b38794298a871b4d7d06de4eb6e2b7abd","size":4366,"data":"","first_seen":"2023-05-30T21:14:25Z","last_seen":"2026-04-12T22:03:19.115724Z","times_seen":5543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-12T22:57:52.780418Z","times_seen":706657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","size":18905,"data":"","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-12T23:11:56.410421Z","times_seen":93342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/jquery-form/jquery-form.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"632962f383a66fd3d22f3e8f34bced13","sha1":"09f1fa3fadfb7960994ecb183ee1b1c8f679dc7b","sha256":"0bf4b3f691ac2a3f4ffdb1ee657cc5991eea1bf796361c2c9b8069648a704ff9","sha512":"a58062fd5de2f4e6dd85dc0f00de938b1af29dfece12461dd8d4edcc87031e6c88cb801bde211bd563ab63b6987ba04d296bf95191e0295ce023ffbeb8cf4a9b","ssdeep":"384:7tlcoVL44z47UUfRlRxpgz+yyDW+cKILke6bxsWnGoOkZeMOubstq/+:747ZBg1yD0N6JnGoOkZK7","tlshash":"6d52e9f5329034771b6630e5987f86436132bc694949c0a4ba18dcf65dbce8aa063fbd","size":14452,"data":"","first_seen":"2023-05-30T21:14:25Z","last_seen":"2026-04-12T22:03:19.13514Z","times_seen":5535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.js?ver=1.0","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"383e2b4fbe45d38f45ce86bc1320b810","sha1":"64acc1a99be659ab310a4371ff858dad31f0bec1","sha256":"c115876f20f61789f14db9ff0bab7a7130e64bdc8cbe27e50bff42152c9374fa","sha512":"be92d689917379bbdb70aedae32190bfd3fb6deee0e23c219b6d931f091a76666be5d3249727509c1e909014cb6da1e2c318ca97101756f38b81c8469fa18f78","ssdeep":"","tlshash":"b451fd6f615d0d3743bb3c1866ef920da23259f6026054c0dd4bc8e12ea864d9ceae37","size":2670,"data":"","first_seen":"2024-05-23T21:30:55Z","last_seen":"2026-04-12T22:03:19.163767Z","times_seen":4264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-12T22:57:52.786522Z","times_seen":657625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/common.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3b61a037278d8b392cbf89c25abb51e","sha1":"c4e8e93b95f835b81c064773dd7f6687b8efc168","sha256":"b2f035b8a7fd26bef558df9c6759509369379bea8a2899fd16b9643138a20b5a","sha512":"90d69fa5516f0ea5ba6240421112f8bbb17c1300439c7f5f51b2b4f3c9c8d156a491ebb9e8a4499d03acaf00f0d131dc34892f128ab5cdf7f02e3d1d7cf4792c","ssdeep":"","tlshash":"3151214a62ea16e8183321e379b7277d3337693d3f5485ea900716a64cabc7d80b790d","size":2541,"data":"","first_seen":"2024-10-18T11:45:13.124301Z","last_seen":"2026-04-12T22:03:19.235423Z","times_seen":3924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.js?ver=2.6.0","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"59f75aa49162a9cbd234c1c445bb92e5","sha1":"92337c52d8f18153dbb728fb1c7c6e4baf99de11","sha256":"0b38470a40052c9ba91360e670a9f423fbb9e3ff9944f7b39fdd74b489562669","sha512":"b1b70018cdcbb07e8f2e4c281fa0fc747bbc014b40d8c30fc142b006aa1116ff822ff49ad19c1e5c304a7f62f9f76d3791166bf2ec6ef39d82510552829ad935","ssdeep":"192:nbHbKVlJV2mxtGp8r5RBQ2qaDGsUH5LQ+8Mw:nbHWDJjWeiS6/w","tlshash":"9c1202cdb38576429e5333a059ef170ee2337d88a546402c78bdd7d6eba894d20b2d78","size":9103,"data":"","first_seen":"2024-10-11T08:51:25.97041Z","last_seen":"2026-04-12T22:03:19.151646Z","times_seen":4084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-profile.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7c9c84c58b1ab7d5e2de9a8311e3d01","sha1":"12681b36a71f3fbac06e955ef628a67a2a643a3a","sha256":"8c5d569671824ee5819d176cba9a366730274a4ddd1413158a4910d10bf64188","sha512":"409f8c5827c9e5fa7cdfb22491f4c5741381c2f14f8ecbb4a5148867948edd300abccdac1e205f594851b8ed5bcc76a3550a21416b0aa7e48f9fc3fed5af484b","ssdeep":"","tlshash":"3671642fb50454f94336b1b2f4b79f72353b2534b15c5100a65ba8222f69c48e2f3eb2","size":3519,"data":"","first_seen":"2025-02-18T20:57:23.78735Z","last_seen":"2026-04-12T22:03:19.106878Z","times_seen":3721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/um_scripts-js-extra","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b122daea7b692b1b96bf066c3d1cea6b","sha1":"a4317713a04490da9e89332db3481d6f8ba33ed2","sha256":"aaa99e5194ab908f3b7906bda2ae705840822ec77d56e667e150ea032f1cb7de","sha512":"3eb36f8afdb76d72637fef35b96f21b858611de40cfaf49fb4dc1cba722afc3c951bd49d5924d98eca302242120c85800fc91b0e6c34cf94e596a938eb6e6dec","ssdeep":"","tlshash":"41111246dee4fff567450c7634f78133029d2201c080ca46a9c9a14152f46c11b458c2","size":1057,"data":"","first_seen":"2026-02-04T17:27:36.733481Z","last_seen":"2026-02-04T17:27:36.733481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9cfcc05178ba1751b13166efa65fc6d","sha1":"f6544f0cdd1ff342b34081732c65ce0b3bbcd367","sha256":"0c8da78467c0ad3d49e2fb021f3525b8e599b89febb563a3ea2592d27b62fe5a","sha512":"8f688b1bf2ea6e13fe5c681e9a5c0cbf58172fd4d892d16394a1420e4a163780e99e61964739ede5e78b99d8cdc3ca2173f8ae81085e8ccd1bcfad2b6ffd931f","ssdeep":"","tlshash":"fa81969ae77638dbb2f900f2697a0e47eb614435d6c8d438c9bea3141cf5893c274b46","size":3935,"data":"","first_seen":"2026-02-04T17:27:36.734293Z","last_seen":"2026-02-04T17:27:36.734293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"57d6f474f307d2454105b587e53cd518","sha1":"2f71eeca04901f779998f7bd8c35d7ef09feec34","sha256":"2f5c6401951b4197532cf9df977374a74bf57f91b26c1d6d2b74b94546005a79","sha512":"6f25d0e3788698994835f66a808b44a28031756c8d7c9924265a21688fd80517e80daf11ee2d2617cb5d5caf7785ef3b59bf30a0a170e3b5624be30d6639ef97","ssdeep":"96:mW54pABXzRx0PRRWornO0dzUlwvdKYKcCV4gG75C8NSY6Q+yWrfWU/W/TGs35hmn:VFdUUdGTSIKWgW/Ta2e2q","tlshash":"3d123356310829b2277b90b3b6fbc23063225f35de099650e353ecb22e7dc84669bd5d","size":9731,"data":"","first_seen":"2023-05-30T21:14:25Z","last_seen":"2026-04-12T22:03:19.242425Z","times_seen":5536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/Direct%20chat%20123/whatsapp-plugin.js","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc28244ffbd4bd931cba15d2a2d864b","sha1":"994a649e400f82eab5eb214cbf55c81c03b1182a","sha256":"a9c1c8bf0075eef22447fd5e8400ee3a94079fdea09accdd16556428d0c33604","sha512":"39461543a275897c049a0837cba0a20e0f4e237a2bf107bba6a7a128085c9d8ac0fd85fcaa4ac003753c36c0299cd75490ba1a4034b15ebee02a506f50a2cd5e","ssdeep":"","tlshash":"dbb0923e204b2a259ca22730522ba68ae227b05231d160e1210c12f06e36194006bd8a","size":106,"data":"","first_seen":"2026-02-04T17:27:36.690204Z","last_seen":"2026-02-04T17:27:36.690204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wpfront-scroll-top-js-extra","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f71e590f9d74b0a14dc579cd9be2d3a3","sha1":"dd409ee38ece017379af9b5d048b6380c84fe97b","sha256":"998da00b87f58e5223d8854e3b61ef10de0268184651a3dfc77a616d9f819c92","sha512":"3393dd661292fad14f00b138fc1eab08165118bc7592e03397e7e67304d5455415638944a06d171309a5033f3a4855cdb8ec8d0561044426828a7e029c8fbf92","ssdeep":"","tlshash":"73512264e9480015e167cc3dda25bfeed33ab173c4c6074c2674ddb8d9ce6f49915218","size":2679,"data":"","first_seen":"2026-02-04T17:27:36.735022Z","last_seen":"2026-02-04T17:27:36.735022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"94ebdd5a8af40d8e0612c70a0725f7d8","sha1":"c437bfe00812d31b61f93e75bc8b0ed9cd15ba65","sha256":"e101e32ba6cd535f0c03a4fa80754dfa694b187c713c35bcc72e83438f3d4ee3","sha512":"0dc340a4430d6931f8a555ea11331c7a362cd6e26d7c9a16d27ec48bbdb256952e923684b4d9eb391d6e433551b0186d282b4200ab355265712a722a042229de","ssdeep":"","tlshash":"a4e0921a3d94e0c512367163a1ef7f4813a70a713a25ac01b91540622d34a9d94ff75a","size":384,"data":"","first_seen":"2024-01-20T22:46:23Z","last_seen":"2026-04-12T22:03:19.241594Z","times_seen":4538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.date.min.js?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"9db07b15693407c9279f2682e83f1c1e","sha1":"46a5f1fe7850e00770936468c0a0531e1f21582a","sha256":"40262d5dcd887efa32be2d9697d54b5b88940928ad0fe7a594075175df66391d","sha512":"298c6c2817e02322a404572524d2785e96ccc3791fe77e0599b6e7ab8753cbec626a746b4935884cbff03f9c06e8200dc073c23e43753ece41ac1a7ca8877094","ssdeep":"192:fNZunVk59S+3h1fUoPE/HPJB3AvRbibTkzBXL+6rNGVilcNSTV3gtt45:fNYnV6PE/hB3Apie+8NPcNSFJ","tlshash":"5b42a78a7151b120173b51a7405f020ef33924bdd44a45b5b814e9faa4fdda983bff2a","size":12578,"data":"","first_seen":"2023-12-13T16:16:21Z","last_seen":"2026-04-12T22:03:19.231657Z","times_seen":4780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"63d682f5cf067b323eef191931ede337","sha1":"df90bc9f172262f5cbc76d12719d456686f44ef5","sha256":"e62db6a5e160c47fccad1829e3dff20f1b124da51db48a466b3f384e5a9384af","sha512":"9eccc08f1a2409d0d4e0f777cffef179e8541b3095d1cd7373dfde4c590611e78dcdb620159fe503cb8294898955d5e15ed3912872e0144003944d7c1d9a1057","ssdeep":"384:YMHcilv3xv37DEs0YxKLogQY0BE8Glm2VYiSaWUU:YMHVlv3xv3732KE8p2KiSak","tlshash":"6b42735c3180a4f529b316b2b0769b3732236e79a4099540622a24f57f7dd48e2f3e7b","size":12336,"data":"","first_seen":"2025-03-04T05:50:07.092298Z","last_seen":"2026-04-12T22:03:19.132392Z","times_seen":3298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-block-template-skip-link-js-after","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d295ab2351077ad941a54886374183bb","sha1":"a36013062084576cd67326143d509cd687359cc4","sha256":"ca4298c83cebe3737a3bdfe063c3fd54f96d163965fa35de918031ef2a5bb605","sha512":"188f5ee6a5e4044259a16a8d567e12867952e22a3a5516dc78e3db20d43980b0b7e67afb07465e1a8e123dfee9c7d583abef888db9a9420c462ef2bd46b28ffa","ssdeep":"","tlshash":"fa4195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1963,"data":"","first_seen":"2025-12-03T05:51:01.541778Z","last_seen":"2026-02-27T09:49:17.49957Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/wp-util.min.js?ver=6.9","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","size":1426,"data":"","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-04-12T22:26:50.785753Z","times_seen":97384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/um_frontend_common-js-extra","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"527b35cb85ff537eef3b9b27f03a9749","sha1":"08efa2d4e719fa1b58a577cbab57756d1292d127","sha256":"745348582d7b5434a7ce791bee969a5b2d7f59afefbb9faf2e922573bb387f3b","sha512":"a4b1af4b0fbefc7d28a67abb161eead4f3ec6c284def8dd6f52ca5d5ffef5af1f53f4250566889ef3fbf992c32fe62ff87078a29b40edca1493d6ddc1fc9ad3b","ssdeep":"","tlshash":"a0111228c0c03d80d546dc3458e4336d421f0610c43000044444311b05e0d188748800","size":1019,"data":"","first_seen":"2026-01-02T20:15:59.46191Z","last_seen":"2026-02-11T01:17:45.470757Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-account.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"82edbeef0889be30e779d94d96f37902","sha1":"7192289b2c41d6ce1d8083f11bafc653330a876b","sha256":"89903006bb131cf1b2c76d04187701664b0a2cfa8fbedf1c66e653b13212f6c1","sha512":"2e5e9fd472a1cb338ccfaddb2fc2263a723c97264a442cd269b1d581ace7867cfe474d8587574de6af9a7941db24d0e2be579fe5380f90740e84d783a72819a5","ssdeep":"","tlshash":"ae51ee28201065f7ad3b6df2f4b2673ef197d7b5f064000da39b042b291aadcd1a2d67","size":2894,"data":"","first_seen":"2023-10-13T12:06:40Z","last_seen":"2026-04-12T22:03:19.178344Z","times_seen":5265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-12T23:01:40.406811Z","times_seen":118362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-12T23:01:40.41744Z","times_seen":117050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.time.min.js?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"779e173355a9e7dc02719a810a9b0a2d","sha1":"511a81d84ab7451adb101a8d7ec654e52d3cc92b","sha256":"229960d85c76fd1f3b427ff01039d98723632bc030c4bdc687057f5d3b35cd05","sha512":"109a964dcccb1394da9a612acde2c981ec4846d55f75d0859d9f096d86a8d65e7b146a7ac6fbbcc3e6885296aed40e30dfb33605fef4de405b674a9c18b6473b","ssdeep":"192:D8jTLvUij0QmHZtv6M5+q605tlcOGPkhNJI4IMu1NfN+A6HzRA:D8jTLvU3QmHPir0tlcOGPeIvZlXszRA","tlshash":"69026545b26170104b6e71e1007f031ff73e285de14a54e4b758c9fa68be9da81abf3a","size":8895,"data":"","first_seen":"2023-12-13T16:16:21Z","last_seen":"2026-04-12T22:03:19.20686Z","times_seen":4781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.js?ver=1.6.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"37c2521efbe4ed78da774d284dad1483","sha1":"f67f53f06f5d011b4fc7dbb81f8e5109ded3199d","sha256":"b20765dff4a5c832a07a5e86d2f46d429ba60024b2c8a0a746d7f5ef5eaad33c","sha512":"f4a908a9d7cdee2a445ba07a93e02adb43d5df56e3383838000e765beb58b401348c4d24331e3d6e3277160bd2e7ac339b27cc5076d0e0a9b66fb97df98ffe12","ssdeep":"768:wCeGBNOaZ2ZMN7PHDj6KsgabjNu5kq2rSDlbkKJrZ2USwiyFa:xOnaD2KkbjNmB2yQKJrZ2lwiyFa","tlshash":"3ff2e95c7621342a801241a2a42f470ea133b92d6b07c46c727de9d72dbcd9e767fe35","size":37380,"data":"","first_seen":"2023-12-13T16:16:21Z","last_seen":"2026-04-12T22:03:19.088339Z","times_seen":4839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe5c7b66a7071381d141dae4bc186db","sha1":"80720a45e4ae05f3db6a0bd3eed1815c26751ca8","sha256":"b3379a52fde74ea4236db7711f545463b1a68b234f9d2731e825cdb21403d779","sha512":"d168dbe6c0878d5936d50a4a3ed251cf9181ececaf8a7651ba3626dafb694cce94f0c2cd9db178b41f3ba18b90cc0b7d81344cbcbe11868d27729df43d03d875","ssdeep":"192:Ve49z1ckoIZ7KgqrdOy6ejmWuxTq30eXlfb:g49z1Z8r8y6uqTq30eZ","tlshash":"1c42735c76d5a6f6787f02b7b0b66b3930032d36ba0948516137c8661e64dc8f1f3b8a","size":12199,"data":"","first_seen":"2025-12-03T09:55:31.937328Z","last_seen":"2026-04-12T22:03:19.22637Z","times_seen":929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-misc.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-misc.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 506\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1656,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1656), with no line terminators","md5":"ddda679de29332963351bffe44dadeba","sha1":"433ba9ac12344426055d88f407ffd532c8008bcb","sha256":"ab0b9590f67bc2e0d1300c2aebfa5dca4361fa1cdbc29fbe489b072375418ab7","sha512":"2ce3f33728411959a436113706a3beb565a8ad55c828772529582ae6e6538fb87c36494e94115a966eaed7261310fbf3f6e4539e13ec28f4e0b136737f38f384","ssdeep":"","tlshash":"9c3145d3a3802018af738a73a54c69b87874c912635608f99191b523c76f2c9e3d2b5f","first_seen":"2023-12-13T16:16:22Z","last_seen":"2026-04-12T22:03:19.212377Z","times_seen":4791,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-logo-Copy.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-logo-Copy.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 22:33:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27067\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27067,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 394x572, components 3","md5":"f86d5611a334e9300e4339fe121a5376","sha1":"e9150f0f4ef992db95942342bf2195f32089b54e","sha256":"8445df9781e70bfe8490d78a8ab829e995d03d071f06aea7e4b5a9a0e31ea654","sha512":"2525ce10d34294b64479d00dda647c3a0d35ea60ecb6284d95f7a383ccfca8587dde6432011e642a76f67e7f59854754adfa3e0b04989f2661eab73f0b4fa29e","ssdeep":"768:+Jc6K4fxki9bLs/vgLGnK5IOdqWq0BYkArfgucJ5:+JPfWC4n2KK5IOqASkmNcz","tlshash":"f9c2df83e1605535f236233a5f8116a3d6728d4daacd0aa7c1d2d9e0ae1edbe02535fc","first_seen":"2026-02-04T17:27:36.679062Z","last_seen":"2026-02-04T17:27:36.679062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/wpfront-scroll-top/includes/assets/wpfront-scroll-top.min.js?ver=3.0.1.09211","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/wpfront-scroll-top/includes/assets/wpfront-scroll-top.min.js?ver=3.0.1.09211 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 15 Oct 2025 17:48:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 566\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1490,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1490), with no line terminators","md5":"6a6d9799aa5bca66aaca03ad26e6b6b3","sha1":"59158785f36c66a415d8563beef49310c270d61c","sha256":"7b1a6b8e38a3dc77d351b47f733f436c67b8f66959768b45e98543a5fc655cd5","sha512":"20eb61ef0bb54eaf89250ead4de0020ca0b2ee993743f632216ac2730dcc7e14c9c76e6592183f15000e207cf3b3c5709b129396a440a8910bdde5d0ffccc0ac","ssdeep":"","tlshash":"fe3110ccb82da56343bb945e083f2508f033052b686029881055ccf93f7cdab7a47b9a","first_seen":"2025-06-30T00:48:16.494202Z","last_seen":"2026-04-12T17:23:05.245773Z","times_seen":1949,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 05 May 2025 17:48:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7185\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18905,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18870)","md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-12T23:11:56.410421Z","times_seen":93342,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.js?ver=1.6.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.js?ver=1.6.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11772\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37380,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37193)","md5":"37c2521efbe4ed78da774d284dad1483","sha1":"f67f53f06f5d011b4fc7dbb81f8e5109ded3199d","sha256":"b20765dff4a5c832a07a5e86d2f46d429ba60024b2c8a0a746d7f5ef5eaad33c","sha512":"f4a908a9d7cdee2a445ba07a93e02adb43d5df56e3383838000e765beb58b401348c4d24331e3d6e3277160bd2e7ac339b27cc5076d0e0a9b66fb97df98ffe12","ssdeep":"768:wCeGBNOaZ2ZMN7PHDj6KsgabjNu5kq2rSDlbkKJrZ2USwiyFa:xOnaD2KkbjNmB2yQKJrZ2lwiyFa","tlshash":"3ff2e95c7621342a801241a2a42f470ea133b92d6b07c46c727de9d72dbcd9e767fe35","first_seen":"2023-12-13T16:16:21Z","last_seen":"2026-04-12T22:03:19.088339Z","times_seen":4839,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2878\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12336,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12336), with no line terminators","md5":"63d682f5cf067b323eef191931ede337","sha1":"df90bc9f172262f5cbc76d12719d456686f44ef5","sha256":"e62db6a5e160c47fccad1829e3dff20f1b124da51db48a466b3f384e5a9384af","sha512":"9eccc08f1a2409d0d4e0f777cffef179e8541b3095d1cd7373dfde4c590611e78dcdb620159fe503cb8294898955d5e15ed3912872e0144003944d7c1d9a1057","ssdeep":"384:YMHcilv3xv37DEs0YxKLogQY0BE8Glm2VYiSaWUU:YMHVlv3xv3732KE8p2KiSak","tlshash":"6b42735c3180a4f529b316b2b0769b3732236e79a4099540622a24f57f7dd48e2f3e7b","first_seen":"2025-03-04T05:50:07.092298Z","last_seen":"2026-04-12T22:03:19.132392Z","times_seen":3298,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.css?ver=2.6.0","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.css?ver=2.6.0 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 330\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (876), with no line terminators","md5":"9ff22a864ae4ad7c9f8650926b731387","sha1":"9615ffe92ea1b16823ff50839039c2e99aa30451","sha256":"c195eb366a6c08996bcd68f001baac9bd4b01bfaba3d827912f76692f5861ee5","sha512":"12777346ea0058ac26197b4cbc57621bc7c78aec53d26d7fe107261102cb7d2b39292bf3f6d32132443dc129616dd3a1f92c4f83ec44b9de7bc1cb28640f0a96","ssdeep":"","tlshash":"43119960e31928d34e55ec12bbc07749381ab02d808249a7e13f4f6cdeda21a22e1f28","first_seen":"2023-10-13T12:06:40Z","last_seen":"2026-04-12T22:03:19.175553Z","times_seen":4043,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-fileupload.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-fileupload.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 686\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2963,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (2963), with no line terminators","md5":"846a7fc475d21f98f882af72512dcd33","sha1":"a0011e3aa39511ea9061472e10787b4ff094373f","sha256":"061917eb65cbe20100ffebf48a5130b16baab986f7bd81d3dbd2ceb5c7abb404","sha512":"7ee504001d98bc8ed210fe9e899aac67efdc7929c9db475f253c2e38cea7e2018f71962991f3a43d5987d78b064077c95d9223933d3c18557bccbbdac6d691d9","ssdeep":"","tlshash":"b8515232f69c43367d27cc7138c04ff72aa8899325612f58e992f128cb62c1299f110c","first_seen":"2023-12-13T16:16:22Z","last_seen":"2026-04-12T22:03:19.127318Z","times_seen":4796,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.css?ver=1.6.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.css?ver=1.6.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1140\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3768,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3585)","md5":"fc778926668c93c708d8d0771daf25fd","sha1":"b5408c10fbf81d25c55a572a8520b0189f7c6cb3","sha256":"f7f61b6cc4219716618f8295502eadf36f9612f4a4a8fadfce9d165bd58dbac4","sha512":"86f351d05fded89ef33cf7cb0bd6ae15edff484d321b868908e77fab17b0ef834dedeca248a8ebef124932ed49cb6c1fec55c84e9592d44fd163ccb3b9737b54","ssdeep":"","tlshash":"96712b6b2fb5301eb222c135fca1a69ca5ef5283aade7317f4d0b760893a486d835105","first_seen":"2023-10-18T17:50:01Z","last_seen":"2026-04-12T22:03:19.131664Z","times_seen":4178,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-profile.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-profile.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1726\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7715,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7713), with no line terminators","md5":"583df529d6628bc99a34d861e842ad0d","sha1":"893a04d60c1806e2d8427a735cb6eabaaade28e8","sha256":"6de690c326e865a8fd799f683dca4c42928bee89364898ea39a5ec9c46de8da7","sha512":"b704a4469610c7ada47f74b7f0892b313a4b465299eb749cf660f3230641689f4824a3adc1c50379bebe61b2b3baa333c288885ef6e598456930bd91d849e58c","ssdeep":"96:sWOPtBovoNog3XkL9uA/nyEkjN3nJ3VIkIX0jUj2jBJ79AjtCVjdTkqX1L0:uj6AjN53SkIX0wa9J79AjtCVj6qXJ0","tlshash":"b1f1f133f688112ebe2af471f5c06bfe39698102f1660ae9e510f3358663087d6b1b49","first_seen":"2023-12-15T21:09:56Z","last_seen":"2026-04-12T22:03:19.149444Z","times_seen":3800,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 200\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":388,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (388), with no line terminators","md5":"7895a83a2e3717b4937cbef999833ae0","sha1":"ec9bddb891515f20d705dd3276cac39ee587aede","sha256":"3156ac3f8b5c61bf0e9df9e452563b35cdb5fe9f0abbda56d672728fc7119540","sha512":"674b9af4db0e4312fa40a190d4c3c5045f9637711338f6fdefb54e045f5b73bd00965d2650514681c7d54a60f5f54ce5c73f31969582d4c83f1c3e96c0cb655c","ssdeep":"","tlshash":"47e0ed0ebdad9ad223b02572a036843237262d3aa21f05247417c6b05c3d7856ae0a32","first_seen":"2024-10-11T08:51:25.809743Z","last_seen":"2026-04-12T22:03:19.166205Z","times_seen":4065,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-import-and-export.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-import-and-export.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 16:48:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 508337\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":508337,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1280x1216, components 3","md5":"ad2882c933abc3466cfc517140205ab3","sha1":"7886593e8b21e981d3a47c40c55f9b0491ed524b","sha256":"a7a11b4f77dbfa17bb88b21324bee18953b5cb6eec9b95ef12b7aa7842f72b7e","sha512":"f51493a2f5e76a913cf4216d6d30fa89e3d89fab1c11744ffee7b9a1d4fc704190ecb487ad8fe4b745714db6053105483b35488928d3ee321526da69c5dc16f9","ssdeep":"6144:hgssL8GjpmogwniI8B+GGYZJxhihwozYdBNWdfIsYmNfntN8F3X8AamSjKpIw4gx:hMgogKGB+E5FWIsxd63bOWGu5","tlshash":"c3b423d2d0781b52879c12abb0a6d2796290ff3d26cd1b5132dd0d99bbcd3ac45ac87c","first_seen":"2026-02-04T17:27:36.684287Z","last_seen":"2026-02-04T17:27:36.684287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-health-and-wellness-product-1365x2048.jpg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-health-and-wellness-product-1365x2048.jpg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 17:29:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326026\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":326026,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1365x2048, components 3","md5":"2ff7577dd540ebf828aab82e2a27a2de","sha1":"b79df60f1e028132a02bed984ea1cab03aaffe07","sha256":"acd3ac7bfad939b0f3a490b22535590d420f273272797f59c37da0001fa6df71","sha512":"f90fa1b8bcd42ac18eb1989570f622e7d9ed1113613e044bd4798def6d9e21d894e689bd2370ccf758229d2b770e6be99b28fc7f643a5d34a1bebf01d8f8cdfb","ssdeep":"6144:VtOgUQ5skoK5oYiqi7FUxU+punyEYoxhkM2mYn1m2wZ1w427:VtOgUwskoaiz+QlYoxhL2DLE1w4s","tlshash":"166423c6d0d7e4298d1e3adec0f56c9c06d6f7582792edd684880e18bae3e50d85ec6c","first_seen":"2026-02-04T17:27:36.685034Z","last_seen":"2026-02-04T17:27:36.685034Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/images/greeni/amex.svg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/images/greeni/amex.svg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 17:26:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 23 Jan 2026 18:33:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 511\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":981,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8166c82143a96e10a09a03ba0962745a","sha1":"3d77a7357253d850c699c761067c66817207744f","sha256":"3caea4af04299baf2f17fbdc3fc96d3858deef5bd49d8c4015db0fec39ad91a8","sha512":"198547c427cafd69c8604311150c7a1de9d129d46726f4f5874380d1dd454165417dd9c618e57d07bd6d32060150bc14f545cbd6463f5157ecb6bf8e181cc347","ssdeep":"","tlshash":"2211b1ac939cd332d9d45171f329e01906323a75b979ee50cebf1a6268a506c09798c0","first_seen":"2025-12-24T06:13:32.697386Z","last_seen":"2026-04-04T19:41:04.794697Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-responsive.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-responsive.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1404\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10083,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10083), with no line terminators","md5":"51046d87cc9089c69eb9b72963640504","sha1":"0c66d5c02180f34a5aa3bf4b9dce9816ef97a4ad","sha256":"4dd0f537fed20290d95ca058baa4cbb26416a541980073c8983b09b4e0def40a","sha512":"ddba5f8d01567425ab8aa95516e4b43c354457aa1e135ef2d05c392914ce2e1deeb14326bd9212ff2658a04f560ff8fc063eab332c381b8e6ea751cd8ef1fb9a","ssdeep":"96:ZjBPY2llQnTSmvOqSYuxirgFB03PPynJIo9Oq8+hNYKjzWUpHl6AtZAeKw0:Z9g2llQTSmWq4M3PPyJIocqFzZHl6y09","tlshash":"1e227b23f999623a7e1ea07ef9c27efd79ac01017b1618fcdd34e6356626086c8f0944","first_seen":"2024-10-11T08:51:25.782971Z","last_seen":"2026-04-12T22:03:19.211448Z","times_seen":4100,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-account.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-account.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 921\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3735,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3735), with no line terminators","md5":"d80b124d52e63efbb76a99c88038e314","sha1":"6834e32d4cc0da68c1d18545cc0055f6c46a691b","sha256":"bfcb8f3f38164d4fa9dfb03a50a8bb443bbcb39cb53633a6ea4297f0aa40cacd","sha512":"a8725590c937e18aef7b05bfb9c4b848aaeefcc9486e911cb91ce2937cc73979eb0d0de781fd3287f85965fe12ff12cabc626f96f57d24032f0cdf8342d5603f","ssdeep":"","tlshash":"ca710d52b589221bbd3bad75b48167fff0a9c1d294220a7cd5d0f322a5610cfe65278c","first_seen":"2024-01-22T00:26:36Z","last_seen":"2026-04-12T22:03:19.176651Z","times_seen":4554,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-phamacy-unit.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-phamacy-unit.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 15:43:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 374741\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":374741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1280x1212, components 3","md5":"8bef2c7e1342b9d2757526e57a1e77d4","sha1":"8ddc4e88a3d7fe3b1a4f55b4004c06c115d51893","sha256":"a352275543a8d78b6471ce9506be0487aaac22a82a8a42e4429941018e12262f","sha512":"0c648ea5d86bd29996f6ad4c1984067389b0f625cd11c3d4f33e7a50610d66cade3fee611656305da9125f7be6888ff638afa511faf9feda1f6f1f9e7b0ec3ff","ssdeep":"6144:7/b2r0T9wjTcrpRaUYuBnL5QJaEuz8vmI09lVbkshevLbvMO2e1X9tfwVyQ27Zau:7/b2r0Th7dVGcb4+Ic+sObvMO971Q27P","tlshash":"188422bd896b13e46a5c3f70d0e4681e17b22ba40ecd508c2614de99f3cd761bde12ac","first_seen":"2026-02-04T17:27:36.687625Z","last_seen":"2026-02-04T17:27:36.687625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-suply-chain.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-suply-chain.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 19:46:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 347502\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":347502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1280x1199, components 3","md5":"4f1a9d32ed076c8f0c9755136d9a6089","sha1":"97b4bad129f309a86370681460e1acb69563a43d","sha256":"9472fc95beab16e1d8b752935f06b1cae085ece15035fabf81c59e22991a3e32","sha512":"4ed62af1cff09c85aa5861529e64dd8b567d186546c78109768dd97964fbb53c8e330df9b8234023b6831733c79eec5d0f61a43b891bfa3dfe8075cd59e4a519","ssdeep":"6144:nsp/bxbrw8muaEIEml57jB83G8Qc0pgTw1So5WSxQelEGaSeV6mJpLbO:ns/bx/w8aEulZjB83G8cyTw1SC1nZmJs","tlshash":"4574236afaab5ba0d77c5f4250f0ad4e1378832c2ca44229415e094ef3de251f995fbc","first_seen":"2026-02-04T17:27:36.688501Z","last_seen":"2026-02-04T17:27:36.688501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/Direct%20chat%20123/whatsapp-icon.png","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/Direct%20chat%20123/whatsapp-icon.png HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 May 2025 23:10:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 199921\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":199921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced","md5":"480fe3c654c61a194accdf11453dd009","sha1":"345dc6ba89202a4cdd51ffc7bb96c1f70d760a13","sha256":"72716aaec7e477e49630785cadc87a40a7f52cc5b6bb179b375f0f93559ff3f7","sha512":"270a31642d3faf80306719749f67b67891ee26b82c9a89badd05a1050e877b743aa3f888931a5bdc94d5a26d8ffdef2b782f5d6428e89f48954a37a770fd36a0","ssdeep":"6144:6mzj2k9M5hGcuZwSdz8thxiXO86wrsocBvf:zzoGcu/ethd6wo4f","tlshash":"cc14022a92b3d5a0cd0f353dadd14f1f2a7b58a046fc48b9c3b87d5ce025d686b141ab","first_seen":"2026-02-04T17:27:36.689304Z","last_seen":"2026-02-04T17:27:36.689304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/Direct%20chat%20123/whatsapp-plugin.js","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/Direct%20chat%20123/whatsapp-plugin.js HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 06 May 2025 23:10:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1fc28244ffbd4bd931cba15d2a2d864b","sha1":"994a649e400f82eab5eb214cbf55c81c03b1182a","sha256":"a9c1c8bf0075eef22447fd5e8400ee3a94079fdea09accdd16556428d0c33604","sha512":"39461543a275897c049a0837cba0a20e0f4e237a2bf107bba6a7a128085c9d8ac0fd85fcaa4ac003753c36c0299cd75490ba1a4034b15ebee02a506f50a2cd5e","ssdeep":"","tlshash":"dbb0923e204b2a259ca22730522ba68ae227b05231d160e1210c12f06e36194006bd8a","first_seen":"2026-02-04T17:27:36.690204Z","last_seen":"2026-02-04T17:27:36.690204Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/jquery-form/jquery-form.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/jquery-form/jquery-form.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5219\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14452,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14452), with no line terminators","md5":"632962f383a66fd3d22f3e8f34bced13","sha1":"09f1fa3fadfb7960994ecb183ee1b1c8f679dc7b","sha256":"0bf4b3f691ac2a3f4ffdb1ee657cc5991eea1bf796361c2c9b8069648a704ff9","sha512":"a58062fd5de2f4e6dd85dc0f00de938b1af29dfece12461dd8d4edcc87031e6c88cb801bde211bd563ab63b6987ba04d296bf95191e0295ce023ffbeb8cf4a9b","ssdeep":"384:7tlcoVL44z47UUfRlRxpgz+yyDW+cKILke6bxsWnGoOkZeMOubstq/+:747ZBg1yD0N6JnGoOkZK7","tlshash":"6d52e9f5329034771b6630e5987f86436132bc694949c0a4ba18dcf65dbce8aa063fbd","first_seen":"2023-05-30T21:14:25Z","last_seen":"2026-04-12T22:03:19.13514Z","times_seen":5535,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/select2/select2.min.css?ver=4.0.13","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/select2/select2.min.css?ver=4.0.13 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1800\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14966,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14965)","md5":"9f54e6414f87e0d14b9e966f19a174f9","sha1":"ae5735562faabd1a2d9803bbd7bf4c502b5e4f51","sha256":"15d6ad4dfdb43d0affad683e70029f97a8f8fc8637a28845009ee0542dccdf81","sha512":"9cc365a6e6833ebaa5125b37217fd0e7a1f7eaabc1012c1bde2a6ea373317966ec401d7cf35a31d1c46fed43d380196b8aaa329eddf92a313080651e51720f9f","ssdeep":"192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF","tlshash":"3f62b935bacc2235b0bf8e7f6cf274946729dd5fc4111b9ab8e9e594c8e04540a8b60f","first_seen":"2023-04-05T09:15:52Z","last_seen":"2026-04-12T22:24:56.946878Z","times_seen":16016,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/common.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/common.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 209\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":573,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (573), with no line terminators","md5":"47c012a01e470a5ef63ab345342a4894","sha1":"aeac2a8af6e71b212684638f09603f694032349d","sha256":"2c5baf88d0e9dee65349a1f53eb6a37d253531bf60882e6b4f9e71150f9994ec","sha512":"f95c5980a860fc56162cf5b5980bd5f81638fbe57c85314cd0b6a737fde11c88a655371e39eda9334587c3ce225e98c0cc05082425adc4e80fa7c6df503e479d","ssdeep":"","tlshash":"85f0c23752c01255782d4caca8026b7db9822662b3439f74e0c7a317daf15b3e7af648","first_seen":"2024-01-22T00:26:36Z","last_seen":"2026-04-12T22:03:19.112465Z","times_seen":4469,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-health-care-consultations.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-health-care-consultations.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 17:38:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 285731\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":285731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1280x1210, components 3","md5":"7517eef645379f7cdb075b127c1598b8","sha1":"8d9cb06cb216f074f0b9cdb9fac0ee6fd6debbfe","sha256":"533ae1c5b0cd04d9e050e17d9b431d5b279a3dc971994aadd8dfc4f2e9247153","sha512":"7d6da904e193e5b7239f7799fcdae9adaadf1c66cd852a6210c1a5b49dd627a1644f720b18c32039f5d42b82aca9bb35a24622ec7271fedd5f712d39fefdfada","ssdeep":"6144:dFgKD2T9MK7tlyP99OQISrLopip9dOFV96Dz4OBG7nu:72GatlyP9w/Swp0iF7+4OBG7u","tlshash":"3d5412b5a0bd59a84f5c37cac3e96c035be5ef7804d295041169aceef35c2bde4810ba","first_seen":"2026-02-04T17:27:36.692545Z","last_seen":"2026-02-04T17:27:36.692545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 183\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":384,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384), with no line terminators","md5":"94ebdd5a8af40d8e0612c70a0725f7d8","sha1":"c437bfe00812d31b61f93e75bc8b0ed9cd15ba65","sha256":"e101e32ba6cd535f0c03a4fa80754dfa694b187c713c35bcc72e83438f3d4ee3","sha512":"0dc340a4430d6931f8a555ea11331c7a362cd6e26d7c9a16d27ec48bbdb256952e923684b4d9eb391d6e433551b0186d282b4200ab355265712a722a042229de","ssdeep":"","tlshash":"a4e0921a3d94e0c512367163a1ef7f4813a70a713a25ac01b91540622d34a9d94ff75a","first_seen":"2024-01-20T22:46:23Z","last_seen":"2026-04-12T22:03:19.241594Z","times_seen":4538,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/blocks/cover/style.min.css?ver=6.9","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/blocks/cover/style.min.css?ver=6.9 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 05 May 2025 17:48:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1492\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19126), with no line terminators","md5":"63572908f5c4f1b77ab8bfb90a43d92f","sha1":"4dcca32b8b9143635264dccf437b80e1acf6525e","sha256":"666570bb7ac88a83bf11ede14a09166cd5cc1d83c4e2610f6b207e8a4596f6b6","sha512":"b71a51aa3808b586465a647285348b267ca721fe0609094988621e62f74498fb54d57b66240e055119146e444cd12cbf95e494a54de46710ebb8fb7afa3ea47c","ssdeep":"384:n95x4jp56/P14vPFgJUe3T1MHhZna/ZcBZDn/sNNgBgkgNgGg3xgc:n0eJ0GLaZmc","tlshash":"c7827a4122e58cfd75dfbe691f3deb88670b5c11c1894fdba53ae054634ca8888b3b16","first_seen":"2025-04-16T10:49:17.675381Z","last_seen":"2026-04-12T23:05:52.982183Z","times_seen":4528,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-health-pictures.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-health-pictures.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 18:12:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 379225\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":379225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1280x1205, components 3","md5":"e3cfda538d48e7d1f0992a525718d8ef","sha1":"3c2b4a0714cd40c09da88df04e83d23c87d39d18","sha256":"77ec81bbac32efa36f20c40be181d394dbd23445e6c5f789126b2273e26f5518","sha512":"1dae05c34cb75df98a9b53f510ed1560267e23ca167010d6d457cc533becf3e91932b2137166511f0f233ee66364613b451c5b5ede745d1b9ae554d6a403dc32","ssdeep":"6144:X8u1oRdR8KNLcPYgYU5LQn1dtYyVWaOmioMML7+h/SZ4Nlt90rUYGGHADgSyoFXw:X/1oRj8oIHImkziaL7+a4ArfzADgSyAA","tlshash":"1484136aefba8a3dd3ac4b74c064f04d27825b5959cbd00925284c9ff3def9845c2a5c","first_seen":"2026-02-04T17:27:36.694757Z","last_seen":"2026-02-04T17:27:36.694757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/common.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/common.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 825\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2541,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2541), with no line terminators","md5":"a3b61a037278d8b392cbf89c25abb51e","sha1":"c4e8e93b95f835b81c064773dd7f6687b8efc168","sha256":"b2f035b8a7fd26bef558df9c6759509369379bea8a2899fd16b9643138a20b5a","sha512":"90d69fa5516f0ea5ba6240421112f8bbb17c1300439c7f5f51b2b4f3c9c8d156a491ebb9e8a4499d03acaf00f0d131dc34892f128ab5cdf7f02e3d1d7cf4792c","ssdeep":"","tlshash":"3151214a62ea16e8183321e379b7277d3337693d3f5485ea900716a64cabc7d80b790d","first_seen":"2024-10-18T11:45:13.124301Z","last_seen":"2026-04-12T22:03:19.235423Z","times_seen":3924,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2961\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12199,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12199), with no line terminators","md5":"cbe5c7b66a7071381d141dae4bc186db","sha1":"80720a45e4ae05f3db6a0bd3eed1815c26751ca8","sha256":"b3379a52fde74ea4236db7711f545463b1a68b234f9d2731e825cdb21403d779","sha512":"d168dbe6c0878d5936d50a4a3ed251cf9181ececaf8a7651ba3626dafb694cce94f0c2cd9db178b41f3ba18b90cc0b7d81344cbcbe11868d27729df43d03d875","ssdeep":"192:Ve49z1ckoIZ7KgqrdOy6ejmWuxTq30eXlfb:g49z1Z8r8y6uqTq30eZ","tlshash":"1c42735c76d5a6f6787f02b7b0b66b3930032d36ba0948516137c8661e64dc8f1f3b8a","first_seen":"2025-12-03T09:55:31.937328Z","last_seen":"2026-04-12T22:03:19.22637Z","times_seen":929,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2173\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9731,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9731), with no line terminators","md5":"57d6f474f307d2454105b587e53cd518","sha1":"2f71eeca04901f779998f7bd8c35d7ef09feec34","sha256":"2f5c6401951b4197532cf9df977374a74bf57f91b26c1d6d2b74b94546005a79","sha512":"6f25d0e3788698994835f66a808b44a28031756c8d7c9924265a21688fd80517e80daf11ee2d2617cb5d5caf7785ef3b59bf30a0a170e3b5624be30d6639ef97","ssdeep":"96:mW54pABXzRx0PRRWornO0dzUlwvdKYKcCV4gG75C8NSY6Q+yWrfWU/W/TGs35hmn:VFdUUdGTSIKWgW/Ta2e2q","tlshash":"3d123356310829b2277b90b3b6fbc23063225f35de099650e353ecb22e7dc84669bd5d","first_seen":"2023-05-30T21:14:25Z","last_seen":"2026-04-12T22:03:19.242425Z","times_seen":5536,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/js/frontend.js?ver=4.4.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/js/frontend.js?ver=4.4.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 23 Jan 2026 18:33:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 771\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3480,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4411485dc2d9fe1b87546b8b322e7ae2","sha1":"b5e3e2558b4920385e27369c3ae07bc2619337b9","sha256":"ae294a6453f9cd7af52ec1797a685feda14bec8ac5085266a42685ba46a786db","sha512":"cc2af092657d6b49949a00f70beb625ffd06adf059e19c265b8710b098b6f2461cb458285e18c59f39736f435bc5ec23a917bd87893489029fb33364cbc4544c","ssdeep":"","tlshash":"0871ffc8705711a154bb73668f07290ceb32e52b4189ab083d7c87de2ff545a83b36ad","first_seen":"2024-08-31T13:32:52Z","last_seen":"2026-04-12T13:46:05.427935Z","times_seen":66,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/legacy/fonticons/fonticons-fa.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/legacy/fonticons/fonticons-fa.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4321\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24175), with no line terminators","md5":"e72ecaca00b4fdb4d2b5041e552f36a6","sha1":"e0b4777e9cac85b0aaaede250896cb20d30797f9","sha256":"0e6b40210d1adffc1786a5d1a453af75db0f199a136605d07e7a2311ad9f02c2","sha512":"60ee54e97b29002624397348ee2af45d70910cc83a340b405e67a7c6bed8397e9c8f00fc840097804b06cb20571798b6d9dd5ed06693162eebb6a555ba411822","ssdeep":"192:VnTcW348bfjjNV7muynMR6Ddjpo3tnqeceGgZ3ez5ar4MmWBl0aEV1pqn5SyU:9vNVqNMR2dmtqHdar4nOFJ5SyU","tlshash":"60b2c1e4e04d08d1ab29c4a2af81e26eb385f7289dc95c5cf05f681c1df1b1785e5bb8","first_seen":"2023-10-13T12:06:40Z","last_seen":"2026-04-12T22:03:19.243191Z","times_seen":4970,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 11:19:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-12T22:57:52.786522Z","times_seen":657625,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/images/greeni/paypal.svg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/images/greeni/paypal.svg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 17:26:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 23 Jan 2026 18:33:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1392\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c021e68b3430e4281a8f4a6e3038b92","sha1":"db09cf1afbedaddfe46a61821511b94d0db8430a","sha256":"63fb84cb65b8e4962cfaf0e245e3694dff717cb9c37a1d3f55ed192fee28b64b","sha512":"b25c656e2464135bd583653376d50bbdcb9201408728b5f62ccebf7a6b2d343064f6d8e17a97b95b3209979ea38ec8ae9926f4d9eb35288e092d6c00a9e54723","ssdeep":"","tlshash":"097136eda7e0e5708180f7f55324bca9bb63a4fa3c23ed48c7db1959d99580d8068dc2","first_seen":"2025-12-24T06:13:32.706791Z","last_seen":"2026-04-04T19:41:04.788848Z","times_seen":4,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/images/greeni/mastercard.svg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/images/greeni/mastercard.svg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 17:26:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 23 Jan 2026 18:33:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 429\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":997,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c6a0541d2a57eb8f293cbde92f91629","sha1":"7ff5e6349abb33a9ca65632f8cc78b5b710112a1","sha256":"6402302158d912fed7e2a311443240da8e3f597a73a44c3980466f27335cad15","sha512":"56071a3a7582d1803e122b58db2497b98ce3da389cf099ca8b9abe9c249597da05597e943c03f7f0fdac01e4a4aa32c4142a201e6a97ec48a5e797d84f618c34","ssdeep":"","tlshash":"941165ef817e8a11f01ae328c7d4283a1b3211dc4572fd31c8462ce3264547d2cfc900","first_seen":"2025-12-24T06:13:32.69053Z","last_seen":"2026-04-04T19:41:04.779462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/images/greeni/discover.svg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/images/greeni/discover.svg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 17:26:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 23 Jan 2026 18:33:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1082\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2847,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38180ac0dc42c8ea3a0e459af895de2d","sha1":"792fc30e914e45b3bd3b53187126374f506bd6fa","sha256":"589f81b8acacaa0f944c1e079ec89e262fdd58c1fc8863cd11973154297b3b82","sha512":"30d4b0af9e7fd8f15801937c163358d6cf836a05f5feca51672287f440022e8c4e1f6367f167372bb5c9ab1011a59c93b077f8c20375a1d17715da6a3b3c2c2c","ssdeep":"","tlshash":"925105dd0798c5b0d586b7792b187cba077324e61e339058455f218eebc355f9814ecd","first_seen":"2025-12-24T06:13:32.695789Z","last_seen":"2026-04-04T19:41:04.780702Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-account.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/um-account.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 679\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2894), with no line terminators","md5":"82edbeef0889be30e779d94d96f37902","sha1":"7192289b2c41d6ce1d8083f11bafc653330a876b","sha256":"89903006bb131cf1b2c76d04187701664b0a2cfa8fbedf1c66e653b13212f6c1","sha512":"2e5e9fd472a1cb338ccfaddb2fc2263a723c97264a442cd269b1d581ace7867cfe474d8587574de6af9a7941db24d0e2be579fe5380f90740e84d783a72819a5","ssdeep":"","tlshash":"ae51ee28201065f7ad3b6df2f4b2673ef197d7b5f064000da39b042b291aadcd1a2d67","first_seen":"2023-10-13T12:06:40Z","last_seen":"2026-04-12T22:03:19.178344Z","times_seen":5265,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/jquery-ui/jquery-ui.min.css?ver=1.13.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/jquery-ui/jquery-ui.min.css?ver=1.13.2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7087\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31081)","md5":"8d4115fcadeadec1cc81eb819eadee46","sha1":"816ab78a423689946f01c8c06e9399a84de6e678","sha256":"debbf2cb207098637dc21454a16f838ea7f4b8f480ffa14f55bbc425ad5e4d3f","sha512":"149d9c0e87bc9a9fff2d796be542ced398f4d923bbec3a2b5502ff3cef537482dc8edfff06ba886aca09b3005bf4064d23b35ce5c66bcb311b633505692911b0","ssdeep":"192:LiOxJtfaURYrFuFrjxZoND1P9yFu4jt+p8C5Y572hk/b0c2jluQkjoDMMrMUxxZf:ZC2/ZoNizdL1eqJdHc2WA7TbtBthvM","tlshash":"f6e242302482242dfe23d1ec7de11ef452eb0142dda25fbda09ab55b42f98e4c57ba71","first_seen":"2023-12-13T16:16:23Z","last_seen":"2026-04-12T22:03:19.230714Z","times_seen":4573,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-old-default.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-old-default.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 984\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5275,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (5275), with no line terminators","md5":"aad0070c3268efabb56a747bfe3cce4e","sha1":"ba65a2348c7cb22d2cf00e2edf55eed9a81a85e9","sha256":"0a20eae616a9fdda5f411c060a7373b6085f755ad437abbda9cb294b1dcfb5e1","sha512":"d3118e610aae2eeb20c72ab5afd95d22565db332b4da7948689d817262e7d776a2266581af07bbd4745bb53c3a5411bbe641dcadcc3f42a276b40e7374fe7ac8","ssdeep":"48:zkjBan8oQc2j5Wjao2PHES/SzP845g244g24bOZPP5EOwIcl7GPWWLXelPTm1q3l:zO6K5wOm3gt4gtKDrwMGF/j","tlshash":"bdb1eb59a50816572e24eafd7ed0a87a77cf42a5a00417b97032403c878e843f3b7b9f","first_seen":"2023-12-13T16:16:22Z","last_seen":"2026-04-12T22:03:19.119596Z","times_seen":4792,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/fileupload/fileupload.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/fileupload/fileupload.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3191\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9808,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9639)","md5":"0684c0f224a71cdb346ef5ad830a6dec","sha1":"af618b53042abd38396bc602921f9970cc4930e1","sha256":"1cf301fc7abaf94d065bda1619c2fe5c57121697661a36d974e1a96f98b64e90","sha512":"054c3adb5c58501e7c6b6e340c17ab3ad5bae6e2b857b326ac901d059f739e057621eea75e39cdbb64c54403c924c7a0797119dd40ed3b8b9b0098c90d78f104","ssdeep":"192:TXz8mnUAVTzUszM2NySLKLAEdvjQrh2aa2++Hq2DjrdsF3AXnSAT152rq4S:TX30GySLK/ljQrha2++HrsOxTPz","tlshash":"3f12d681f2e31c15e7b7b17ca0df16f65012ad225d83831460a4e2c479e6e299ce7fe1","first_seen":"2023-03-07T12:07:57Z","last_seen":"2026-04-12T22:03:19.105577Z","times_seen":5296,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/select2/i18n/en.js?ver=4.0.13","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/select2/i18n/en.js?ver=4.0.13 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 395\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":844,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (757)","md5":"cf932ba09a98fe11bde8e1f3dd5e2cfa","sha1":"6bb5c48e18078a5688c6f7e187cf3c44057cbc1e","sha256":"0bae803be28e5cdb97116c21c1f8d80456b7806708cec3c51d0019f6a4a1dc6a","sha512":"c139fe636223fefb1f5c84e067405d5a7bc08d3ade1f1a73f549d5750623643a4d5f08507fdcaf4d42d36b3d3dd2304f2a309c95ecf5728cf7716067a47b8803","ssdeep":"","tlshash":"480112ce38c2700c24973172787f350e763a5dcb995ce5dad22a2089fc24289803be6e","first_seen":"2023-03-07T17:01:06Z","last_seen":"2026-04-12T21:05:18.928618Z","times_seen":4226,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/cropped-image.banibatiti.com-logo-2-192x192.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:49.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cropped-image.banibatiti.com-logo-2-192x192.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 10 May 2025 11:24:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9085\r\ndate: Wed, 04 Feb 2026 17:26:49 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"0b6ba1cb39055c810462553df9a9d0f4","sha1":"323b52c5c8f671b6afda00eeed79b7729855c436","sha256":"9cfb42e5707f229a084d59ddb3bd9ef436ec4187cffa7d9aa2ab5ae74023e6a7","sha512":"22bd7d6a40663fa2cb361aee091f07598a035853eb6dcf4c457eeb1497e218231be2d39543071b22aee4e6dcc521d9fae4517d5e75b11798ec7560f606d271a8","ssdeep":"192:/PFIN1bKLxL3e21+74x6Qckudr5lbbGnBMffRpGPsDwuE:3gdKLUeySMdbgMfjGPUw","tlshash":"7512afead384dec02d569aed38057f17e544d980e460f7863170ca2abd945da08af21e","first_seen":"2026-02-04T17:27:36.703717Z","last_seen":"2026-02-04T17:27:36.703717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.css?ver=1.0","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.css?ver=1.0 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 281\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":873,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (873), with no line terminators","md5":"c75d0314897e0d6eb8aebf3b9f798d84","sha1":"f23f47067554e00a5734d268581b5bfa7add4088","sha256":"eee4ab7e702115f418fad324c578761dc4139fa2270d10acdcf467453c9430bc","sha512":"fdb705568109646ae379d38822f1c907d42d74e396dc57a4d87c2f21a35fb8601ec8f9519253d064451fc388541d2145c3f125b9df306a0f5f8eb0bfe2bfd406","ssdeep":"","tlshash":"4611c033546e2827763ff9662de0d91821b584e7b74727d0dd2721528da40d71db4705","first_seen":"2024-05-23T21:30:56Z","last_seen":"2026-04-12T22:03:19.136553Z","times_seen":4287,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/css/editor-frontend.css?ver=4.4.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/css/editor-frontend.css?ver=4.4.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Jan 2026 18:33:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1172\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4904,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"21736f7ce67385761c80e9c0050e6844","sha1":"527fb01ae2b51042790174df428115400d6d3f4e","sha256":"4047e81e63f7be273186f1a8474f72b08e0b922bd2b3b7a79648b277fcb23bf8","sha512":"2ac2ba88fd1a4614437db32d7047db9c9a5c0fa865addd0c6e4b21040d99a10529ee134cf5272aacd918bdf2c4fbb1b484296f69f29af50e06806889d16c0ea4","ssdeep":"48:3Q1dhcWPLTvVu56pvRBUvVv5atbJPcQ1yocCanuVKJZZfZ/1ssTldFGi74dyc79+:3QWWNecsRaVSQLcxuwJh/j1W+","tlshash":"cfa131d8414698e565371b769facaa41fc714312ce4214d8f9f182b06fadaac0ea1f8d","first_seen":"2024-08-31T13:32:52Z","last_seen":"2026-04-12T13:46:05.411068Z","times_seen":62,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/Direct%20chat%20123/whatsapp-plugin.css?ver=6.9","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/Direct%20chat%20123/whatsapp-plugin.css?ver=6.9 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 May 2025 23:10:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":603,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"704d73b34d24ed882dfb294d35b773b8","sha1":"b8be38adfb99dd016a7c5177900438a4d98a2654","sha256":"0475b22d231996a8be1aff02516b8ca01a7d6e4db2eeb39abc8d2b5cd9cd5f9d","sha512":"dd56d9f4661e24f9ebc4bbfcb5b0d3f3df0b3be017a468cef1351b534f27a2c86e89ecd9647e94eb7735c5e26c93e7ea670c8bb1e250c362073a7b5cfdc4d15e","ssdeep":"","tlshash":"49f0ac21845421429134f7aa0f301e09da86d23bfb835475bef167548f728e85741ec8","first_seen":"2026-02-04T17:27:36.706031Z","last_seen":"2026-02-04T17:27:36.706031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/default.date.min.css?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/default.date.min.css?ver=3.6.2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 765\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3770,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (3770), with no line terminators","md5":"23e2925bf5fc3c4b1414f2214885b855","sha1":"12e617f2061ba8f4c29cd49e1ca34cef4aa53eee","sha256":"e9da786fb9b251c3e5c97a092dee719a68c282018e54a9d1cd6b4164be8dd580","sha512":"e9899eaf6eb55bf478db50daaccdd74382676293e0ed2d66710f37e5b9c0dba1476fd4ad1b0ebb9d73913af56dd8c05607496ddfdb4bf5817d5e9c104d024a50","ssdeep":"","tlshash":"4971ae62bd44248f18bad3d9ffb169b965d79c35a3060e3df011b51783de09949f8828","first_seen":"2023-12-15T21:09:56Z","last_seen":"2026-04-12T22:03:19.142234Z","times_seen":4147,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/legacy/fonticons/fonticons-ii.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/legacy/fonticons/fonticons-ii.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4994\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34543,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (34543), with no line terminators","md5":"f1dc1f80ee1647c21482b1badfd59b4f","sha1":"a4ce113f777b109b924a4ed562665d28c725b8ed","sha256":"7e6ad654c2d989265fc747c3fc1ba46b7be72977e32cc953f8555bb9eccc7810","sha512":"2b95ca596b076e63e0c1d06c83a1ae08105c07595c7b59310bac577f15be42d228392e6eb182b5dceb03dca2b01340af60209fd3921a70ad5d6027be2b468a7a","ssdeep":"192:z97ov3GLJ0GXcI2rUHtor+ntknY1u7RhK2E+mi2w3xz/e8RE7I5c8P/x+2kTb21E:S3AVwrUHC+tknY9yc8of2bbKV5nZdF","tlshash":"8df2e3a4d20d00c26f3dc466bf85776b5781fabedc9c0c90f41b944e2afa22591e1e79","first_seen":"2023-10-13T12:06:40Z","last_seen":"2026-04-12T22:03:19.194452Z","times_seen":4977,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-collabration-image.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-collabration-image.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 17:51:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 307317\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":307317,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1280x1214, components 3","md5":"428431c3b8112aaa1829c85740f64a06","sha1":"3d37c9f32c7ab4d40b9c1cb5422ca42d286ed387","sha256":"83d8a965938bf53c82e74f5cdbd16bb7ed150d7cb45cfe18fa5ef323b24db386","sha512":"52f8a6ee107b5a8fbc7614945485f5a4399aaf335c56b981d761f71c9c6516051d0290e2f040738c3600c46f9745984287a52ca16128ba771bf0c53cb0ad24c2","ssdeep":"6144:MJ2e4SWk6uVvoIKBYcKGtWhMQb1ZPaNKmEaYDIWaa+NUsT0:M9LF6uZ5KKcbeMQM1DYDF1b","tlshash":"f264124e994409714a5dbaf4d284e95e27ad1f38cbddc64811b10d8df3eebc9f012ab8","first_seen":"2026-02-04T17:27:36.707742Z","last_seen":"2026-02-04T17:27:36.707742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/common-frontend.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/common-frontend.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 588\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1800,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1800), with no line terminators","md5":"322a3e9b97a2ba4c59f7bd4275fedb79","sha1":"24d1d49451b7943e136c01b709fa25b243c0a60b","sha256":"53c43eb20d815b17e2a86963a906f89928a072a1baadabd35e7559e1393e4f62","sha512":"d061172c31bb8a48b7f536091cda2742e6ad3b1f1fa1338735b83596500abe1d1e692b5a31e6a93dd5699a30207220a659eead4e7356da2a474e35af0890a1ab","ssdeep":"","tlshash":"2731513c2a3831b5e033903b38f73e1422ba74395515d8237785cc7a0cf4ea99aad620","first_seen":"2025-01-20T10:26:18.424921Z","last_seen":"2026-04-12T22:03:19.215396Z","times_seen":3751,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1208\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4891,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4891), with no line terminators","md5":"2425563162742e42b592fcc4e339c50d","sha1":"0b12f6c18075227b4b37b186b130cfb2de2fdde8","sha256":"de4e37d22fb09479944c1c276a3a37919822ec50a1282b570b84c26f593a938d","sha512":"bebf4f27a5c938710328d97b73a5b72f0dc2b228d1b7b400ad42bf5f3bd122d5c4c4320699ffc96c91894e0d4b29843024702574abea8b9e6fe763f1ab37e1f8","ssdeep":"96:pKcQfyJTaDzmi9eYkPaPAyyE2UXP2Ly1T2JTCyWT2JTsefYvUMmhemvmYD0ed7mE:AcZJq9eYGgby9UXOVLWefSBiprd7BLu+","tlshash":"aaa1330db16445fa34779af3b8f55b71331b2931b65cc605923b98332c71d58e2f2845","first_seen":"2025-02-18T20:57:23.780451Z","last_seen":"2026-04-12T22:03:19.225292Z","times_seen":3693,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/default.min.css?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/default.min.css?ver=3.6.2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 574\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (1467)","md5":"0a7b1e5f81fd175e6c25716d01e83c4f","sha1":"6d7f4e904cc93bab2542f3090aab8b7a1f9ff50a","sha256":"4a72a906f606ebf25231bb1fb0d4206a0dc892deb3cf7dc05a72762a0300d371","sha512":"7b249e5e9e6a6cfc3b5c63e4850e038197ea8715bd8b5a2dea7bf49df0f484cd78284577ab27dc294b03d9bec94cb8b20a1c61d876e937e1ad2f4d8dae9f8d37","ssdeep":"","tlshash":"2741d0272200621ea437cbe43ff06644557ec941b772134ef6157aba8f5e99104b3d8c","first_seen":"2023-12-15T21:09:56Z","last_seen":"2026-04-12T22:03:19.162312Z","times_seen":4114,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 22:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-12T22:57:52.780418Z","times_seen":706657,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.time.min.js?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.time.min.js?ver=3.6.2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3097\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8895,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8895), with no line terminators","md5":"779e173355a9e7dc02719a810a9b0a2d","sha1":"511a81d84ab7451adb101a8d7ec654e52d3cc92b","sha256":"229960d85c76fd1f3b427ff01039d98723632bc030c4bdc687057f5d3b35cd05","sha512":"109a964dcccb1394da9a612acde2c981ec4846d55f75d0859d9f096d86a8d65e7b146a7ac6fbbcc3e6885296aed40e30dfb33605fef4de405b674a9c18b6473b","ssdeep":"192:D8jTLvUij0QmHZtv6M5+q605tlcOGPkhNJI4IMu1NfN+A6HzRA:D8jTLvU3QmHPir0tlcOGPeIvZlXszRA","tlshash":"69026545b26170104b6e71e1007f031ff73e285de14a54e4b758c9fa68be9da81abf3a","first_seen":"2023-12-13T16:16:21Z","last_seen":"2026-04-12T22:03:19.20686Z","times_seen":4781,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/wpfront-scroll-top/includes/assets/icons/12.png","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:49.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/wpfront-scroll-top/includes/assets/icons/12.png HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Oct 2025 17:48:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2819\r\ndate: Wed, 04 Feb 2026 17:26:49 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"f0be8606a79d59c149db0c9951435271","sha1":"397f1a6358e9b3e5030ef24767a4df6d608862e7","sha256":"82f2a197c14d6896925bd1b1d0a986fa7ffe38d30a7b0c3c156479ebc66837d4","sha512":"a48ae853167f3a6193a2aba62d7d02841430a31a9845af08b383c7205df2642fb8bbca545cf40a8c0e28ce72910048d6258e5ea63416f5e99585e340a6b42ac6","ssdeep":"","tlshash":"05513a0c587993b9a4cc20a832bf32516ab5c53a1f8e41ce27bebcbc90307c12d15c81","first_seen":"2023-06-18T22:36:21Z","last_seen":"2026-04-04T08:08:16.219114Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.js?ver=1.0","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.js?ver=1.0 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 730\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2670,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2670), with no line terminators","md5":"383e2b4fbe45d38f45ce86bc1320b810","sha1":"64acc1a99be659ab310a4371ff858dad31f0bec1","sha256":"c115876f20f61789f14db9ff0bab7a7130e64bdc8cbe27e50bff42152c9374fa","sha512":"be92d689917379bbdb70aedae32190bfd3fb6deee0e23c219b6d931f091a76666be5d3249727509c1e909014cb6da1e2c318ca97101756f38b81c8469fa18f78","ssdeep":"","tlshash":"b451fd6f615d0d3743bb3c1866ef920da23259f6026054c0dd4bc8e12ea864d9ceae37","first_seen":"2024-05-23T21:30:55Z","last_seen":"2026-04-12T22:03:19.163767Z","times_seen":4264,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.js?ver=1.0.0a","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.js?ver=1.0.0a HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1448\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4366), with no line terminators","md5":"c705ef91638e363c8889578125c08e36","sha1":"de12f676dcb87743c24a18ba64dc0a3746f7fb18","sha256":"31e6722068108fda3ffdd3275abfc3600930e7dac9597c7948ab931e8b72ad56","sha512":"e4501054d8033caa48dfa2a7dabe512e00db3ff8d0bc48e7a934a3983b6980fabd02c1cf9b5539e7a93e03cff6e476122970997053cf192b126f57cf409138cf","ssdeep":"96:DqwDdwd5Rh4QVKmvF0gCKzNxvzgsrpXGvu4rEwp:GVigcigp4y","tlshash":"eb91b71e7391792101a7e2d0941f121f30317b38794298a871b4d7d06de4eb6e2b7abd","first_seen":"2023-05-30T21:14:25Z","last_seen":"2026-04-12T22:03:19.115724Z","times_seen":5543,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/js/um-profile.min.js?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/js/um-profile.min.js?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1039\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3519,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3519), with no line terminators","md5":"f7c9c84c58b1ab7d5e2de9a8311e3d01","sha1":"12681b36a71f3fbac06e955ef628a67a2a643a3a","sha256":"8c5d569671824ee5819d176cba9a366730274a4ddd1413158a4910d10bf64188","sha512":"409f8c5827c9e5fa7cdfb22491f4c5741381c2f14f8ecbb4a5148867948edd300abccdac1e205f594851b8ed5bcc76a3550a21416b0aa7e48f9fc3fed5af484b","ssdeep":"","tlshash":"3671642fb50454f94336b1b2f4b79f72353b2534b15c5100a65ba8222f69c48e2f3eb2","first_seen":"2025-02-18T20:57:23.78735Z","last_seen":"2026-04-12T22:03:19.106878Z","times_seen":3721,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/fonts/young-serif/young-serif.ttf","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/fonts/young-serif/young-serif.ttf HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 17:26:49 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Fri, 23 Jan 2026 18:33:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 47434\r\ndate: Wed, 04 Feb 2026 17:26:49 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105136,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409","md5":"323f85d58ab2cfbdc4f5b6ca48467e11","sha1":"42abd3af5eba4ecdc77ea1ff885ce4a4e941f1ae","sha256":"f8dc08f77abad753a00670af70756a8ace938e5c3f0b770f4f4c2071c4bd8fc6","sha512":"130fdecdb4ba8529abd691680a21e1549b1a6126077d8d9e8ce86346e8171571e3947ab2fe8ee0d5602af8a4ba33baf77c4b40dc6f9e33c7da1b0d7a66fdbfea","ssdeep":"1536:Eg8tdfLs+5zqURdkkkkYFiJ6ahovENpDcltlHFaKPm0G/Z2fYbL/5Hk:EjdjsazqekkkkYFi0vkDclVrY6","tlshash":"62a34b06b713e60edd1d2e7885e2d3a2f735f802fb1a620b61592a76fcca040795f58d","first_seen":"2024-10-28T13:43:43.846143Z","last_seen":"2026-04-02T08:28:13.719741Z","times_seen":22,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/css/frontend.css?ver=4.4.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/css/frontend.css?ver=4.4.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Jan 2026 18:33:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 671\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3539,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c6176c37b16bf0128f47570331b21870","sha1":"0c66f3f516c074bebdefa8292806cd25c6e2a944","sha256":"c3bddfef0814b98e1b143838c49124f620413ea84d3a7589b05395df003d4afc","sha512":"0d461bd0b4cf5711185904f40a1a7eff61a7cac568fbc13dcb4ff2bd7a784563eee8248638dfe6e9fef8ce42c72b066ee9c0c8fedc09318333fe3e16962762ad","ssdeep":"","tlshash":"2c7189808e709df41d77632aaf44a504db33980393057dc5b8eee194bbac78489e2f4b","first_seen":"2024-04-02T01:19:41Z","last_seen":"2026-04-12T13:46:05.425174Z","times_seen":64,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.css?ver=1.0.0a","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.css?ver=1.0.0a HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 309\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1696), with no line terminators","md5":"87ace8c92eb7b87db767fbf47ade14ac","sha1":"ead436829a858966c068cb0a55a35de7e8102b32","sha256":"5be71147d10b5f979c87f267186a54b1aab5f6ee3e7c0a4667575f1ad8ed9d54","sha512":"f9845711e637f5343274fb25fae08beac89afdd29d975e5c194d5fdf7f00c52bc760be1125f84dd1af6df4828a4f9091789ad630334bef5e05850288e6edc76b","ssdeep":"","tlshash":"8f31f3b3f248001d5133ca15b8e1aefc64afb741ba571f12f2876661cc64dac6d4240d","first_seen":"2023-12-13T16:16:22Z","last_seen":"2026-04-12T22:03:19.171318Z","times_seen":4774,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-fontawesome.min.css?ver=6.5.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-fontawesome.min.css?ver=6.5.2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37154\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":278002,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64391)","md5":"bee1aa8195246c12a31b7646eb068d66","sha1":"2ca788c68571efac270246d5251d7c67e0d4c192","sha256":"276b6113f13f4f7d7dadd9ec4f0c2542d0e5faeb063a9e4ef76cb92a38d91994","sha512":"3cb561ad7652618a6e3b739e75019f44cf706ee277297c1b6d6c272d9bbdcb5f3fd39aaf1fae21d0a376b9f696a88a38edde5a8c5408386ca68f888e0eeceff4","ssdeep":"1536:AhhhhiPMXMmM9MrMlMhMMQ8YJjE7J7jB1dFWUsBiVNL2TlqMZz3oeZmPkM1tms9N:J2YJjEtj+bYVNL2TlqMZzDZmPkML1Bp","tlshash":"4b4470d6d28ca4cae7add89b5f80726b32b17f34ccc68c64e11b160e0df25659ad4b34","first_seen":"2024-05-23T21:30:56Z","last_seen":"2026-04-12T22:03:19.130958Z","times_seen":4016,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/pexels-photo-5716001-1536x864.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/pexels-photo-5716001-1536x864.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 May 2025 20:52:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142670\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142670,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x864, components 3","md5":"deec974893ba78de1ad41db1b6f50009","sha1":"aca688169044b1b11d18f1379e691ff5a6916cb1","sha256":"4cfa0a6fe03955875d9b099d3047fecc4a1318161f0be932375bc5fb71ecf4d8","sha512":"c1dc8ca3508b30f728b7c64446273594af9a08ef0d9b8cae2f460f81db3d5dc95422ebc051b0c01bd4dc67dcebee92f23d9b36b5146aafe6394489d2748bd892","ssdeep":"3072:obacIzjVPYwpjVgk4MrrvuFKGdw4VLIB8eToWxgcmxRV+RsatuvxiD:oOzXjj4MrjuFL4Ose+RKZK","tlshash":"47d302479d1567e35a05dbddfd1b089ca9552b0cca093ecb912adeff3c283d48c99888","first_seen":"2026-02-04T17:27:36.715857Z","last_seen":"2026-02-04T17:27:36.715857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.min.js?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.min.js?ver=3.6.2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3073\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8308,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8308), with no line terminators","md5":"fffdb6679196753bcfa1767df50ffa0f","sha1":"b47de9386586d4ed9acb42cf001cbc2505b1ea10","sha256":"b4f6b37beccf9dd518909c6777ed26d3aed7077538ec9f14c0f002604946c82d","sha512":"a1e727c214fb3c59971759d9efb7c8c5dd6d45752ce8226771b38b74697c5bc8bacb3eda7fe0f7e3c96d76028a6471cefe96c965a18b51a0a55ed760e6be9544","ssdeep":"192:G3+XrdT5pCvWRPtTkiiX3hlSWqlDfxALo3xs:G3yrdT5UvW/AiiHSlN8ohs","tlshash":"6802f8e8b190b05015fb62f8813fea2e633b2a556d8f9480de12c6d46f75d6c9162f8c","first_seen":"2023-12-13T16:16:21Z","last_seen":"2026-04-12T22:03:19.156083Z","times_seen":4785,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/select2/select2.full.min.js?ver=4.0.13","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/select2/select2.full.min.js?ver=4.0.13 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20518\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79212,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64131)","md5":"fcd7500d8e13d2b2aae5d3956dc3e21d","sha1":"aa40e683c82dd844db73fde37048cf7fc145135e","sha256":"5c6fdab80cb86a279695dccc226a1fac50e2c922bea70242edaa28f52b7bad2d","sha512":"65ab44d85b09e8f383f00c298239a1ae944b9b452dea7e450889dfa4a1aee11861b380d51ff5551b56b526f86f14f856becf1537d1afc005e0c09a3d3e2b5090","ssdeep":"768:foPw7Fnru7/eGGG2nqwi83nORlJDRGookOlxNk7h2tKCBQOu7uq7dnnAjiEcEpWW:gs6knORYkOvOcE7JAvcch","tlshash":"8b73b54c7a53723542af20e7256b150922376b3e600b52a8b428cdec6dbdd15736bf3e","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-04-12T22:03:19.22245Z","times_seen":6830,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/fonts/work-sans/work-sans.woff2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/fonts/work-sans/work-sans.woff2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 17:26:49 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 23 Jan 2026 18:33:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65500\r\ndate: Wed, 04 Feb 2026 17:26:49 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65500, version 1.0","md5":"d71b07129a50e56b5451f3a38ca48ff7","sha1":"46b8a9a7d8ad09f649bb10c6f3e99e213ab31427","sha256":"5e7c239e7f4a80195a12ca44b91747f2d05bd8ad0e2089237764836f04201ff2","sha512":"5f86fad724da7bb81ac11cd2dbfc5377ad6d5d8d5bee2fe41131aac5d4d5561017be1fc239f70e6b3ad7356ff38e419296409a324e19633bd841c74981ed2b19","ssdeep":"1536:riJK2zLxBGmliX+aCNoro98um8MZ6IZ7OpR94GFFn:eJdz1Bbap09tTpRJZ","tlshash":"235302c73587de03e5561a78e9bfe8895458ec529fcc917233b40681c2767236aca70f","first_seen":"2024-04-02T01:19:41Z","last_seen":"2026-04-12T13:46:05.408109Z","times_seen":38,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T17:26:48.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://www.tradesphereco.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: public, max-age=2592000\r\nexpires: Sun, 01 Mar 2026 19:03:29 GMT\r\netag: \"46-1769799809;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"pickadate.js:3.6.2","description":"Mobile-friendly, responsive, and lightweight jQuery date \u0026 time input picker.","website":"https://amsul.ca/pickadate.js/","common_platform_enumeration":"","icon":"pickadate.js.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]}],"data":{"size":163704,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (15021)","md5":"6f4a0d7cb553b3f6d4d84d9b7c2dd326","sha1":"87dc35446f41e64e22e5694569c0fa9be2eec492","sha256":"bd174f9764e8bee95d181c97d5e80b3f6c9fcc85117d52ed503164350e614afc","sha512":"5e9b8d2501710ac9dc292c32a17883ca7c57eab59a92b5e6c47356eae0ff9a9df8e57afbc7c392100c660816a3539f42123168a46000946e80b35bc987aed910","ssdeep":"3072:XV/7uDd5D8JZMpm4wvSAIeTV0ovCoxnk6oMpemG8Gx82mZAdwYjK+c+iO6SHDXzk:ljuDdIZMpm4wvSAIeTV0o5B","tlshash":"59f3e822476844f6746fc799f099f71ee608f841de8a82d5f4b6c154a4cceea21b370b","first_seen":"2026-02-04T17:27:36.718751Z","last_seen":"2026-02-04T17:27:36.718751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/default.time.min.css?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/default.time.min.css?ver=3.6.2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 393\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1452,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (1452), with no line terminators","md5":"6623c0b1cdff8ae6fc6703bbafd86565","sha1":"32863ac669f8532c4e19be0e8e2a221a7b7b331f","sha256":"37979261a61781075fc945e636b919badd7ac9f9e7098cb09480a0d26da55425","sha512":"1a93aecfbe46457112c0084d0d5255aae54eada2d3877f589e4780d37e5ab050055322bdf08c3a0c5cf621ceeabb378c67d6330bbe32b53e946abf4884e326dd","ssdeep":"","tlshash":"00310652b14a240f08f5a0a6bf6127f8aaefce2ae36054adff64a323035d5d215f5914","first_seen":"2023-12-13T16:16:22Z","last_seen":"2026-04-12T22:03:19.114028Z","times_seen":4784,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/image.banibatiti.com-education.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/image.banibatiti.com-education.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 18:00:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 371228\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":371228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1280x1195, components 3","md5":"0b31e6040298dd8cd171cdcd4a2ebf5e","sha1":"97366aa16c514e789209176d2f12398b8b46ff83","sha256":"af416be64fdab24630c8a05f6d4914b2b280aba0957bab523f1e14b2e4b1bc5e","sha512":"d71d0a26634cb9d68aaa47e15b7c6fdf3e89d185664bdd952c199e55076eef46541b9e3475b3b81438ad751a8870d835e2d404ce33b89c011612888c55f79175","ssdeep":"6144:eyFdh59bpRCBMD4Pwh/qIW0caCHWYgiO5TOoNZKWaj0mGH9/6TZ0Qcvc5s0yeHyY:/159bKErergx7vaj7GHUF0QIksPLY","tlshash":"5b842339d4f5e864179cb2aaf0e4c12a30f40b7099ce5a4841516dc7f7bcb29ee447ca","first_seen":"2026-02-04T17:27:36.720091Z","last_seen":"2026-02-04T17:27:36.720091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/cropped-image.banibatiti.com-logo-2-32x32.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:49.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cropped-image.banibatiti.com-logo-2-32x32.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 10 May 2025 11:24:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1228\r\ndate: Wed, 04 Feb 2026 17:26:49 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"d3edda958524333ab4342a9ca365cb29","sha1":"7a5434fc6b862171e0acd85edee4c2ae8ea0400f","sha256":"598b85e5d8c78ba3a5a6b85cc00449b2f5ed204fe09ff041ce0c3d2393be21b0","sha512":"50686cd50543b11ac8a326ed2e8d0c580d367ac53c57b05c53fe11f7a3c971c02bbe5df47fdd6f2d894b37e98efd5eb9407d6b79767f7f74b2493e1a8418e281","ssdeep":"","tlshash":"272163aeeb460380c9168d7a85334999d1ae2a8bbd943f496f71c0e2d2104c99409f5a","first_seen":"2026-02-04T17:27:36.720932Z","last_seen":"2026-02-04T17:27:36.720932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-styles.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-styles.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3647\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21776), with no line terminators","md5":"4dd0f01f6f84d94e744d69aef3998d43","sha1":"73c8a4a98063b04061e80e1d482c65fa7342cbd1","sha256":"5db06fec9719dc17ad3b841dc1aea1581c7eccfdbaa77f97e83d2883943acda3","sha512":"6d848629341c12768eec93167a05458f8c749c51abc0e79f47a4001c9da851506d33de349af32d689c9602c5fb7f29ea49f04612832f275f898e08530455c733","ssdeep":"192:7poHtTPNHEZWQ4qAU3W44IWITWX0deBePoknM+jlfs3hsrZcTy9D4jHaeH:loHQwQ454NW/yiHaeH","tlshash":"d9a22212b5c83338bc6e887669f176bc367cc51ac9121b6ae650f731c3a2492967770f","first_seen":"2025-03-04T05:50:07.110346Z","last_seen":"2026-04-12T22:03:19.218702Z","times_seen":3145,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/wp-util.min.js?ver=6.9","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min.js?ver=6.9 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 20 Sep 2022 09:22:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 690\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-04-12T22:26:50.785753Z","times_seen":97384,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:44:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1852\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-12T23:01:40.406811Z","times_seen":118362,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:44:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2119\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-12T23:01:40.41744Z","times_seen":117050,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tradesphereco.com/","fqdn":"tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T17:26:48.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nlocation: https://www.tradesphereco.com/\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163704,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T22:55:59.864883Z","times_seen":13680880,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":101,"dns":58,"connect":14,"send":0,"wait":14,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/uploads/2025/05/pexels-photo-6285383-1.jpeg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/pexels-photo-6285383-1.jpeg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Feb 2027 17:26:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 May 2025 20:56:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63274\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1214x809, components 3","md5":"aaf6cf8ec013864943dcd095203c5b69","sha1":"c7bd276207bdc072d8fa2ba38c9aa893073ff8a4","sha256":"0cc93e6565fa77e55e44c35a20efb22d5dfcc8f0c613a75aa897c93af91ad6dd","sha512":"0565b29b96539b1fed903314cffa348ad40264d0f0ca44da3d8fc87eb59cc3674fd79a22f151c78fcfa6173125da3552d6c8ffe446b612964ffb8a5380cf7482","ssdeep":"1536:rxM+Nri/qY0fbcmsxQv+AZJniEwWHSCu9RErgU6dLHZcx:rO4i/Oj9sNA/ndw0SCuAgVdLHZcx","tlshash":"985302bb421bc677fb88a9f021439340f895fd1dc25eac73b04165f4662d5d06a78b63","first_seen":"2026-02-04T17:27:36.72444Z","last_seen":"2026-02-04T17:27:36.72444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:44:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1057\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-04-12T23:05:53.014335Z","times_seen":7530,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.date.min.js?ver=3.6.2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.date.min.js?ver=3.6.2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4219\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12578,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12578), with no line terminators","md5":"9db07b15693407c9279f2682e83f1c1e","sha1":"46a5f1fe7850e00770936468c0a0531e1f21582a","sha256":"40262d5dcd887efa32be2d9697d54b5b88940928ad0fe7a594075175df66391d","sha512":"298c6c2817e02322a404572524d2785e96ccc3791fe77e0599b6e7ab8753cbec626a746b4935884cbff03f9c06e8200dc073c23e43753ece41ac1a7ca8877094","ssdeep":"192:fNZunVk59S+3h1fUoPE/HPJB3AvRbibTkzBXL+6rNGVilcNSTV3gtt45:fNYnV6PE/hB3Apie+8NPcNSFJ","tlshash":"5b42a78a7151b120173b51a7405f020ef33924bdd44a45b5b814e9faa4fdda983bff2a","first_seen":"2023-12-13T16:16:21Z","last_seen":"2026-04-12T22:03:19.231657Z","times_seen":4780,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/fonts/prata/prata.woff2","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/fonts/prata/prata.woff2 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 17:26:49 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 23 Jan 2026 18:33:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38248\r\ndate: Wed, 04 Feb 2026 17:26:49 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38248, version 1.0","md5":"ba26074a37e4a9fb7cbf81d4d101b597","sha1":"e6285e08f22055dcebb202a894d70bf64874209e","sha256":"57caf2b5f6e3c4e754146af9a6c422a3428eaa6989a17f34c00edde8d40897a1","sha512":"e9b5d406460445fbf3047365d4c39421eab5adcd2127606d108f1179f2bdc9ebf7bed42134a871b07aa8adea5a52b0b6d12e3cf2995ca98d5a7e204c9b78db3a","ssdeep":"768:N57ELMjIxP3fHH88E+2ON1lNNSk3xCGTkYES8SunIif1QaeS5CYiI0Of:N57EA8xXHH72mXS8TkYn8SuIkQaXtiNA","tlshash":"2f03f206101fa0457e76cf3c6534bfba42ede3142d32ae994c8a83e25ade9f261e4d15","first_seen":"2023-07-23T02:53:38Z","last_seen":"2026-04-12T13:46:05.416107Z","times_seen":35,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/css/um-modal.min.css?ver=2.11.1","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/css/um-modal.min.css?ver=2.11.1 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:36:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 734\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2971,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2971), with no line terminators","md5":"1c889e0617fc48ad9ba49e49a2173ebf","sha1":"094391d8d26170a1c7360e66a2a25d7fcdbce119","sha256":"2f2501db6c9fdfdb046b2ce11c2795deed7e909a1d70fed665bf2fb52f079c9e","sha512":"b017106dab1811c194e3d589a3ee3ac45a48e9717201db55b1b6f906a6f625241e0acefd516d078e90da69d3dc011bfd32e5b5fa814bcb679a3fd5900e98152d","ssdeep":"","tlshash":"d051dd317cec613cba2fe83379015efa19bc821252211e69e9b4b538cb96cd5c8f164d","first_seen":"2023-12-13T16:16:22Z","last_seen":"2026-04-12T22:03:19.097435Z","times_seen":4592,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/themes/variations/assets/images/greeni/visa.svg","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/themes/variations/assets/images/greeni/visa.svg HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 17:26:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 23 Jan 2026 18:33:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 746\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1614,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e9ad1949e27d0adf1fb9b19550f5ff6","sha1":"ec251adc26ca41d5aaac91783545157b05d9b714","sha256":"36ad43fbf1e4822fec5e8cd259b6141e02c95db1034e24ab392a9bf00c4e0797","sha512":"8afdee9819e772abf3ec2fe20ac7481784284c1857e91928278214fbbb005ac86f8d23b85eaff87a28fcf740bbfa95dc4660a65664fb370b854fa1fab645afbb","ssdeep":"","tlshash":"933161ed47f8e3a0b6c1b7b4279c58387b2718ec4a78c511cbb8259f364144e04684e3","first_seen":"2025-12-24T06:13:32.694189Z","last_seen":"2026-04-04T19:41:04.77522Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.js?ver=2.6.0","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.js?ver=2.6.0 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:36:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2907\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9103,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9103), with no line terminators","md5":"59f75aa49162a9cbd234c1c445bb92e5","sha1":"92337c52d8f18153dbb728fb1c7c6e4baf99de11","sha256":"0b38470a40052c9ba91360e670a9f423fbb9e3ff9944f7b39fdd74b489562669","sha512":"b1b70018cdcbb07e8f2e4c281fa0fc747bbc014b40d8c30fc142b006aa1116ff822ff49ad19c1e5c304a7f62f9f76d3791166bf2ec6ef39d82510552829ad935","ssdeep":"192:nbHbKVlJV2mxtGp8r5RBQ2qaDGsUH5LQ+8Mw:nbHWDJjWeiS6/w","tlshash":"9c1202cdb38576429e5333a059ef170ee2337d88a546402c78bdd7d6eba894d20b2d78","first_seen":"2024-10-11T08:51:25.97041Z","last_seen":"2026-04-12T22:03:19.151646Z","times_seen":4084,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/blocks/navigation/style.min.css?ver=6.9","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:48.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.9 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 14:44:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2085\r\ndate: Wed, 04 Feb 2026 17:26:48 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16879), with no line terminators","md5":"9d20bf226422cb5168bef956e5eab9c0","sha1":"73d569bfcb92ba76ae987c3ac9c6d8cc091100be","sha256":"65433802260eba9a7ba737a21be6f679ab25480a3c6cc4e7f109041360cfb52e","sha512":"e8ac30913475c5a3c8ce98c1a0fd57a173c745d9adb94e84defd8116ad78835b4f8d27eff25391c1f3554c4e7485aa17bd139fe9bcd461873d30227b24e7548d","ssdeep":"384:OsFyo7/c9g7jiUsA5eyH9iXt/UYv/kx6y/:OsFyo7/c9g7jiUsA5eyH9i9/UYv/kxT/","tlshash":"b3729fd05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-12-03T05:22:41.874716Z","last_seen":"2026-04-12T23:05:52.998231Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradesphereco.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"www.tradesphereco.com","domain":"tradesphereco.com","tld":"com"},"ip":{"addr":"95.217.206.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradesphereco.com/","date":"2026-02-04T17:26:49.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradesphereco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:59:11 GMT","end":"Fri, 03 Apr 2026 23:59:10 GMT"},"fingerprint":{"sha1":"94:B1:A0:98:A9:9E:21:E8:C2:EA:DD:E8:0A:89:9C:F3:5D:3B:61:8A","sha256":"C7:11:61:5D:87:6A:96:4B:8B:1B:2E:FA:EC:E2:80:1F:A5:9E:67:3E:D8:6C:28:9C:C2:74:9A:8B:30:9B:78:94"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: www.tradesphereco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradesphereco.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 06 Mar 2026 17:26:49 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Dec 2025 14:44:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Wed, 04 Feb 2026 17:26:49 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-12T23:01:40.408439Z","times_seen":144531,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"www.tradesphereco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}