{"report_id":"97f6abf2-1497-41ed-804f-27dcb1d3803c","version":0,"status":"done","tags":[],"date":"2026-08-10T01:37:26Z","url":{"schema":"http","addr":"roninx-trade.com.crystalforte.com/","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":0,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"title":"1 new message","dom":{"size":79336,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1252)","md5":"3615cc113618ab17b71b307f6dc2109a","sha1":"4e0b1c0a5fc1dbcc632f735397e399fbcd9d5aea","sha256":"3bfc213cc4b029c6d1fdcb6646312924dbcde803346c74e415985b2e310feb1e","sha512":"545a1f0722f27f7af5e3a0d91711b65d68bf371cb39c4b97914d128d3a07e83eaa36b8363d6b7950582208758cb6c588be037d86f2898c6b9be83289baa1b67c","ssdeep":"768:7t85rSTMXzGyxKmBe4y7lEXC1IF0UXf3y:7t852YKmJwleCiF0UXf3y","tlshash":"6b736572a4e010370053808176a67f6e7ea6f243ca568e64b3ec079d6fc6dd38d97a1d","dom_hash":"domhash6676fc53358736ec6ec207c9fea7fa39","first_seen":"2026-08-10T01:37:37.923183Z","last_seen":"2026-08-10T01:37:37.923183Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"roninx-trade.com.crystalforte.com/","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":0,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T01:37:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.getbutton.io","ip":{"addr":"104.26.14.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-08-08T17:32:04.359282Z","alert_count":0,"request_count":2,"received_data":443354,"sent_data":981,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-08-04T00:35:22.372433Z","alert_count":0,"request_count":3,"received_data":6362,"sent_data":1800,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":8749,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vsb25.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1353796,"first_seen":"2020-04-05T09:28:26Z","last_seen":"2026-07-30T21:23:57.799616Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1123,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"roninx-trade.com.crystalforte.com","ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":57,"request_count":57,"received_data":4428622,"sent_data":72612,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":4,"received_data":101100,"sent_data":2326,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-09T23:02:50.69879Z","alert_count":0,"request_count":2,"received_data":305250,"sent_data":991,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-08-03T20:04:57.874986Z","alert_count":0,"request_count":26,"received_data":1390090,"sent_data":13407,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56cb8d5774a618e798ce9bfa00796e3e","sha1":"4fe37e13d9fd4156b684752e5af938a3579bd102","sha256":"c1e2acb380d4a5818a0641bdf5eafde669fd2c86ebe49559cd7ea0030d50c196","sha512":"c651afb2b824e43dbb1548f081c6148831c39444e10358abf6109afd4649125dfe3f40cebff94892b96d973daa534185a3dd9b3b6520ff3349ca994879549d2e","ssdeep":"3072:GEIYgadYqhJrTodiWFW1WF8fMqAOACkjQiuIRxLMz9+Z15:dAiWFW1WmfMqAmkhLMz9o15","tlshash":"bc34c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","size":242222,"data":"","first_seen":"2026-07-08T23:24:03.888143Z","last_seen":"2026-08-10T04:46:25.329416Z","times_seen":3752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/js/jquery-3.6.0.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-08-11T23:10:44.209941Z","times_seen":21583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//js/vendor/slick.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-12T08:37:46.794857Z","times_seen":111064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/js/firebase/firebase-8.3.2.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aeb031c1d596281cfb0bc798ad68c35","sha1":"f3cbd0c473069e581705448366b33fcf71e0fdb9","sha256":"c6129ac86f15d92723bbb81e97f5ab4bcfd97f0744ea5898d2402087520c532b","sha512":"5fcc9700c5c7842dcd0f7c18a1028d6a6bc00536d03ced45d83c4ad7ed7b8530ddde45ec402f4fcb79c8ca87c4541af9786fed00817fb5437e08a4c75e9817ce","ssdeep":"6144:K8YqbosMLHtk4OLs/8wWaoFwApF+GzJXZaGQqdxQUdcujbva18nsLDMX4teWXs4v:nYqbrKOQ/YRQp18nl4sSG+z","tlshash":"5305b5ccb692b062439360b5507f410bf33b685da40e40acf669e9d67cb954e923bf78","size":859901,"data":"","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:26:57.884388Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.14.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442041,"data":"","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-08-12T05:40:51.003055Z","times_seen":2876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-12T08:25:13.779466Z","times_seen":742116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d9736a6cf175b83c2d5a50234a16b44","sha1":"930111650d3fb0035c89a075ad226f32589a0939","sha256":"175791cee0d4323d07bd395c74e2ebb88f8916a7236928717c07527e4b1891be","sha512":"6e3990c6b08e10f1a5419d130f8d068962b1836ef457a464124a817c6f8e154826445b4ce09d64233f1738a501c6d9af33e423184563c45701916f893bee90cb","ssdeep":"384:Nqw/U5YK8HxhquThWazJbUZDkM0kWEYPk6c+UtKM5eH:A+hquThWazJbUZDkM0kWEYPk6c+92eH","tlshash":"d352d6a7b2a4782d46379752308f3204f33b7d45b215d919f36ddcea4aa84c16056f3e","size":14277,"data":"","first_seen":"2026-07-08T23:24:03.877553Z","last_seen":"2026-08-10T04:46:25.332974Z","times_seen":2787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f81a7bf3d3d053b77fe013413abf8e2","sha1":"d080f3787f12145036209fada5c29f6d2931bb8b","sha256":"d71f406a3ecbcf4dcb1b79d075c15d935f11dee4efd1fcf4dea492182278c261","sha512":"6c3499d947c237b6c6731448ab2a7eeccc25dc62c2cbf1f59bc1528e12b3ff2d50c4c10c4f847b8473407fbe5f417fd6f5bea070815c46352ba7a9f29a1ae249","ssdeep":"96:zNC9Hqt7pEma7hY/rcKoJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYmLRIvgx43nVY","tlshash":"c3b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077f3d","size":5261,"data":"","first_seen":"2026-07-08T23:24:03.884969Z","last_seen":"2026-08-10T04:46:25.361824Z","times_seen":3055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-12T08:25:32.029759Z","times_seen":66802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-12T08:25:32.033432Z","times_seen":42349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fbd26af790f4021c222d285bca63f47","sha1":"643fd2af6f8d4df46bcb7998c9638ab085df7736","sha256":"0ab3e6d58bc33ae6635954e6397b3423c301cd66b58a9c0badfb67c0301d701e","sha512":"d446c3026035e64159e877892a94f5f0456f766285142f65bf17bd6ec5d43cb35c8ded56560deccd82511caadfdc48b3c16326bc94209b3ff2ec77beb3dca855","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC5GN//h6LiJq:SzP2DbSLi8","tlshash":"8a822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745df245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-07-08T23:24:03.859246Z","last_seen":"2026-08-10T04:46:25.351959Z","times_seen":3067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7571445a752df762894d31268e7c12","sha1":"54b956960bd4376f15523f25f586fc5478a626fc","sha256":"2a768547370a8933454d03757e1981e616d448234e06e5b9dcf1608f35bec644","sha512":"12e90c52c5cce1f2767060de43c8627fb789a49f5a1b1a681048e732f08ae67194f4ee0c7a80f305778c67e31a756555c54d463bbdab66f19b03f8f050aa4e71","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK4/:xfuro0f20UJWfO+Et7GZrCi20k","tlshash":"8133d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","size":54211,"data":"","first_seen":"2026-07-08T23:24:03.874474Z","last_seen":"2026-08-12T08:25:32.063539Z","times_seen":3214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//js/app.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aae759cc9fa56453c329d121bf87017b","sha1":"514289cb538b2e91b6767fddff7f5d9778ce536d","sha256":"b124b5340460e4163427a7309373e3b7b0250e16986969ff1b060819db97f75b","sha512":"41606ef3b56e53a6f1ed5cbc970771239bb6e8bbb493286bbacee54846e2458ef7390529fd9778a9a0d854f278a3ad2a27e0f76806061789a431c1d6a4e8fc7c","ssdeep":"96:XvpBTSaHHFF/1Hhdz73EL+3QgU7q9LNq3pcTISpL:Xv7F8L+uCgIph","tlshash":"aba1cc0ae801117b40bf7379d925ab09f7971327c28a0a13bafc05885f71a59b6d0dfd","size":4722,"data":"","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:46:40.24588Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"581712668ae095b5d8f678a6ea34ae0c","sha1":"b25b29f31300f4d63e6dec685339e0bed3235e8f","sha256":"5107df35262814ad822e242e2f510be7dfa6b382f7a00211808dafe85bf77d3d","sha512":"b51bc3a2e92f0e472ba8e7a2f09bcbe35996175e6731e349f9c192f7b58fb320b6eaa7a3757a4363df8ac952c0ebdcab7b751c8ee96a17fbb319a579cc6d0706","ssdeep":"","tlshash":"134183d936e8f9b6834318e1043fa056f6353976097be8c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-07-08T23:24:03.879117Z","last_seen":"2026-08-10T04:46:25.319513Z","times_seen":3764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/js/iziToast.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-08-12T03:17:50.052266Z","times_seen":3429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/67e7184069da0d191c8d4d4b/1infbdglu","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed2f310c872de31c048235bb3cf6e594","sha1":"108d8a2afe7e0a207da9c007a5baae59ada22d81","sha256":"a6123cdf9292389ead31298df0656cb7cce08f31367c3b44d36d6725b58185a1","sha512":"55bd744fd9a5e4db1ad095d4d4139c994f40574d4e3ee3c76f1911be10ae5e2c9f5deea221a71b95deb542234117b6b6debbe89e1c85e5d278952afbd82b0c98","ssdeep":"","tlshash":"404111e75f4f1862d32420d84caef98eb47b72e648d85c964708040073557ad3a8ee3f","size":2123,"data":"","first_seen":"2026-08-10T01:37:38.056664Z","last_seen":"2026-08-10T01:37:38.056664Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-12T08:25:32.074694Z","times_seen":93303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2528753fcff2713c9c633700cb6ab7fe","sha1":"3ae9318912ac6a038860dfc27d45d52a57dbffa5","sha256":"65b1a9237f942dada0c03510e49b1901c6fe2f0ad77b3031a01bd7303455a918","sha512":"e966691ba781c2a88bdb825bb2c04c702c09834c10e2f4b66dd4d37ddee1c3d1f4848c3fcc038803f9c1d3e0fe2ef450c2cb6fddad3e01c4cf872797ee4fd285","ssdeep":"1536:BigMTWFu196woffn32j8DegaOqbWbaGlDluK1k+YZdZPkx3u4V5pfYMrlSf:4nmuTcgGHbJx3u4V5pPrlSf","tlshash":"3ba3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":107247,"data":"","first_seen":"2026-07-08T23:24:03.881188Z","last_seen":"2026-08-10T04:46:25.320612Z","times_seen":3018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-12T08:06:02.330687Z","times_seen":51558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78080,"data":"","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-08-11T13:39:35.216054Z","times_seen":2737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","size":348923,"data":"","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-12T08:25:32.073129Z","times_seen":10017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","size":10918,"data":"","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-12T08:25:32.102457Z","times_seen":14223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-12T08:25:32.112439Z","times_seen":49947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//js/vendor/wow.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-12T06:36:07.08619Z","times_seen":14374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-12T08:25:32.039053Z","times_seen":93331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4f17b44539cdb517c1475424aec5722","sha1":"6f02d2f55076fd3a4742f18bc41abe2ab11fdbd4","sha256":"c0be6022318db42025ee57c3ef987e375f0591db734457caa0ad249df1202f67","sha512":"2bb5554affecc7a9c5049cf93876876c49f2f36aea08e4ef1ea87374af28b440573078e2c934a850218c45f9e47aa058b0861a3ce19c4e6162dbde3772b35c15","ssdeep":"192:0H9Ma6RIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:K6b9HkS316xAFKpLZEh","tlshash":"2732a3c6e8c7b9564227160451efa128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-07-08T23:36:09.661392Z","last_seen":"2026-08-10T04:46:25.332366Z","times_seen":2169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"\nIt looks like you're using the development build of the Firebase JS SDK.\nWhen deploying Firebase apps to production, it is advisable to only import\nthe individual SDK components you intend to use.\n\nFor the CDN builds, these are available in the following manner\n(replace \u003cPACKAGE\u003e with the name of a component - i.e. auth, database, etc):\n\nhttps://www.gstatic.com/firebasejs/5.0.0/firebase-\u003cPACKAGE\u003e.js\n","filename":"https://roninx-trade.com.crystalforte.com/assets/global/js/firebase/firebase-8.3.2.js","line_number":1,"column_number":859387},{"level":"log","text":"\u003e longCodeInit","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439085},{"level":"log","text":"\u003e try","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439267},{"level":"log","text":"config loading..10","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":259826},{"level":"log","text":"validation...false","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":254413},{"level":"log","text":"config loading..500","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":259826},{"level":"warn","text":"GetButton is empty","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439933}]},"http":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.213Z","timestamp":1786325819213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: \"2528753fcff2713c9c633700cb6ab7fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 777460\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d218faa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107247,"size_decoded":27602,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2528753fcff2713c9c633700cb6ab7fe","sha1":"3ae9318912ac6a038860dfc27d45d52a57dbffa5","sha256":"65b1a9237f942dada0c03510e49b1901c6fe2f0ad77b3031a01bd7303455a918","sha512":"e966691ba781c2a88bdb825bb2c04c702c09834c10e2f4b66dd4d37ddee1c3d1f4848c3fcc038803f9c1d3e0fe2ef450c2cb6fddad3e01c4cf872797ee4fd285","ssdeep":"1536:BigMTWFu196woffn32j8DegaOqbWbaGlDluK1k+YZdZPkx3u4V5pfYMrlSf:4nmuTcgGHbJx3u4V5pPrlSf","tlshash":"3ba3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-07-08T23:24:03.881188Z","last_seen":"2026-08-10T04:46:25.320612Z","times_seen":3018,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.266Z","timestamp":1786325819266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 783754\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d26902a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":12896,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-12T08:25:32.052806Z","times_seen":34045,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.308Z","timestamp":1786325819308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 920970\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d2a906a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19329,"size_decoded":4800,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-12T08:19:42.814085Z","times_seen":39070,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.304Z","timestamp":1786325817304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22158\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78080,"size_decoded":22396,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-08-11T13:39:35.216054Z","times_seen":2737,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.14.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.315Z","timestamp":1786325817315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 00:45:37 GMT","end":"Mon, 14 Sep 2026 01:45:33 GMT"},"fingerprint":{"sha1":"DC:2F:40:2C:2E:8F:A1:FE:B6:A3:D2:1B:01:7E:28:02:66:38:0E:86","sha256":"E1:C6:2E:FD:25:F8:44:CA:B3:2C:26:9B:A5:CB:26:9B:6D:77:7B:CF:2A:52:29:CD:23:39:99:E7:89:F4:41:57"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DcBL475gpCkLl8CzGdAm3rIoJ40g%2F5kw0oFJ0aMBmjKZ7dHa%2B8HawrLAMVyM%2FbB0RdKsMbC4AjgSzUP%2FuVrCtab0ggHLcnqWo2y86Qg3CrqKLFMVvsNn5h0gx88GXA43y%2FOjIs%3D\"}]}\r\ncf-ray: a28b45c6bd02b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":69,"connect":2,"send":0,"wait":230,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/63319103114611664192771.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.352Z","timestamp":1786325817352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/63319103114611664192771.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3240\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3240,"size_decoded":3506,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"137a43b89a05eb38bdc085ef1c80b5c7","sha1":"5c00d92687725935146a409117868a90a0b920b9","sha256":"8378cadb73d912e2c0590ddefff1527d359b04d053e3902bd8a77680de438eec","sha512":"ec1f41cad532889c6ea890d5c44abb6f2c5e7c02535714284cfc97f165abb2fdc9fecc874fa3e38ea677d5cd6ff30cf28096adb1bb12ed6a4c35ee444b499c28","ssdeep":"","tlshash":"e2611a2e8a9747d1b4369f76549b2c4261ed16a01c005f4f7ee68aa9fde1fdc8008d8d","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.031757Z","times_seen":139,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/team/68797a430d0881752791619.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.363Z","timestamp":1786325817363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/team/68797a430d0881752791619.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Jul 2025 22:33:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35285\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35285,"size_decoded":35552,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 280x296, components 3","md5":"a28fcf2eb7f66b8a5a3281f970e5b552","sha1":"770d8fa6d9322efed33ca5119e49ac60f10cf41b","sha256":"d5ffee2b642dcdf5a275d05ea4ded2fe9776241fc9c957c43eed76cfeb1a9c12","sha512":"9630671936d0d2bd546f26da45b4785cae22fea10c10f9fd1dbc6fabecf805725b0674a6e193a09b3cb46da4ddb56324cc65f43ccc84cfe2f35541aa22da099d","ssdeep":"768:/Qxc5KYxzUq0UsxbIYqFjkCMa9AKh0XG5ev7qO2G:/QxW2q0UsVvCMqAqP5Z3G","tlshash":"f9f2f23f3869a1d86b549806cd263c800b6612d372e5f1adbabc7f8b8531153fe04b4d","first_seen":"2026-08-10T01:37:37.92919Z","last_seen":"2026-08-10T01:37:37.92919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T01:36:55.804Z","timestamp":1786325815804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.31\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; expires=Mon, 10 Aug 2026 03:36:56 GMT; Max-Age=7200; path=/; samesite=lax; secure\nlaravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D; expires=Mon, 10 Aug 2026 03:36:56 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 10378\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 01:36:56 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55442,"size_decoded":11717,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (439), with CRLF, LF line terminators","md5":"9259dc9eb833f56373ee35470ea95163","sha1":"64baf0e2da6ab809202de85b359c7bc5760a2120","sha256":"a68772310984217f03f50c8886a5e6dc4f171c813aea42401fb2dd12b058613c","sha512":"44f6480ef28b0261946a881e4cae2cd8787466650a848cbbffa8d5b7146d1529a43192498ce2007ae87ad78351d0e8802e80dc3ae23c0f30b7d9948321eb7467","ssdeep":"384:u8uirS6oyTfPqzKt0QU+CvlJswF7md4jBOFlGcb1HLKbF6u:u85rS6oyTfPqzKtYywY41CF1r4FJ","tlshash":"4743307124f5113340a3d0d67aa22b4eae91e147c59bca48b6ec0bc96fd3dc2cd97a1d","first_seen":"2026-08-10T01:37:37.930724Z","last_seen":"2026-08-10T01:37:37.930724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":512,"connect":85,"send":0,"wait":234,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//css/vendor/dots.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.057Z","timestamp":1786325817057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold//css/vendor/dots.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8771\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67257,"size_decoded":9080,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f54d61c3a745e7fa4ef16cd6c50058cb","sha1":"4b76bc137553f05fc03fa7af80871f913a1c69af","sha256":"f60f8379d7998f8e2abf29cd5d7a0d9777577ac6adb46a6e60918a2fa56743bb","sha512":"fab50bdf5a5a017a38078e862cbfdc1f416d0092bb6894d47ba56e992ce57de04f3f4e43100c2d0b1f8b9d8d5b41096e37cbc41304aad0486c7bab86b18b0577","ssdeep":"768:ewx+zRmBrmbwx+zRmBrmUmK0cdCmK0cdzKZx31bGB2npKZx31bGB2nd:tp1pZNdCNdYid","tlshash":"4e63b57369010463f7b5c0eb8c6295079934b2cae61d6e63b37581acff91178c7ba06b","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.048119Z","times_seen":190,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.680Z","timestamp":1786325817680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:11:05 GMT\r\nexpires: Thu, 05 Aug 2027 13:11:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390352\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28528,"size_decoded":29341,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-08-12T06:43:52.862545Z","times_seen":10348,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/fonts/la-solid-900.woff2","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.682Z","timestamp":1786325817682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/fonts/la-solid-900.woff2 HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 96752\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96752,"size_decoded":97019,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 96752, version 1.0","md5":"36fc297902c9a2e857858baa6ac25f2c","sha1":"89d9531c0c70a8751dff83c1917baab1f16a2071","sha256":"10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb","sha512":"c5711d5027762fbc8d352dfdf64094958348b873671c891e8c5cf701a569c3bad672a380db7fad76692bf79dc9235b37f76b6f42f73698c9f85d2c7a23aa62fd","ssdeep":"1536:H8wZeXMjWqtJeAAHBX6ANib7HTYJv+Nr1ScHQjn6t/k5LBNCMAG35y:H8hXMjWeeVHtA7evKr1Xwelk51N4Gw","tlshash":"1f930257f0921be097c688990e189035cd39fd71397fe9f4e603ae4cc361927e52a4b6","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-08-12T02:16:33.01077Z","times_seen":13750,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.214Z","timestamp":1786325819214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"8f81a7bf3d3d053b77fe013413abf8e2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 920970\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d218fba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5261,"size_decoded":2633,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"8f81a7bf3d3d053b77fe013413abf8e2","sha1":"d080f3787f12145036209fada5c29f6d2931bb8b","sha256":"d71f406a3ecbcf4dcb1b79d075c15d935f11dee4efd1fcf4dea492182278c261","sha512":"6c3499d947c237b6c6731448ab2a7eeccc25dc62c2cbf1f59bc1528e12b3ff2d50c4c10c4f847b8473407fbe5f417fd6f5bea070815c46352ba7a9f29a1ae249","ssdeep":"96:zNC9Hqt7pEma7hY/rcKoJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYmLRIvgx43nVY","tlshash":"c3b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077f3d","first_seen":"2026-07-08T23:24:03.884969Z","last_seen":"2026-08-10T04:46:25.361824Z","times_seen":3055,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/63319095f3d411664192661.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.334Z","timestamp":1786325817334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/63319095f3d411664192661.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3145\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3145,"size_decoded":3411,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"7197693a722cd50b48330b040993e960","sha1":"f55a571fcf71b0528f50170e81abdf3fc7f0a34d","sha256":"5d836da99dda95fa0810ce8b72d1d68d63e3f309cd1d124e1d2c672d122db0ad","sha512":"85933a2bf19c649060899b503258199fb195c27fd3c0ac253fbf704fe662298ab6ba5c5e0bafb8583d74999b0a10666c4a16d9bc4e33f701154e7926b2404928","ssdeep":"","tlshash":"4e515d1683ca4be0b0371076c0090d0aa7e6c5b3b04c824b5bf0a9d69799fa9ced894e","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.816817Z","times_seen":138,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.686Z","timestamp":1786325817686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:11:05 GMT\r\nexpires: Thu, 05 Aug 2027 13:11:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390352\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28528,"size_decoded":29341,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-08-12T06:43:52.862545Z","times_seen":10348,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/cta/631c9f3d446e11662820157.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.705Z","timestamp":1786325817705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/cta/631c9f3d446e11662820157.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 178559\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":178559,"size_decoded":178827,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1920x1097, components 3","md5":"67cb986379b848c85ea6fa5b1045d0ab","sha1":"40217145dc803d2497f086e271f3c346b1a4e39b","sha256":"d8d29de2cb83295b22b07493742fff356f0e66bb660f895db990c3b92bef2736","sha512":"8bc97fd9c2df803503254c71f823aa741ddf911d35d480539d519eedd55b920ba9328a2043081c114ca8328724d1dd0cfdb90e42c6f952df85aaaabe76fe9112","ssdeep":"3072:c3sWZSyocOqDeWhOYcPEzUgXmHl+uWqYavH+y9jqcEu4HseX:kFUTchlOYOgX0B5veIo","tlshash":"6904021754680bc6fcbc1b84f7a25e182f5e3b4da0e76cda0195bd95fb043509c8c66b","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.010109Z","times_seen":118,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.009Z","timestamp":1786325818009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\ncontent-type: application/javascript\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: a28b45ca88c45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":647,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-12T08:25:32.074694Z","times_seen":93303,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.018Z","timestamp":1786325818018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"56cb8d5774a618e798ce9bfa00796e3e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45ca98c85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242222,"size_decoded":69013,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"56cb8d5774a618e798ce9bfa00796e3e","sha1":"4fe37e13d9fd4156b684752e5af938a3579bd102","sha256":"c1e2acb380d4a5818a0641bdf5eafde669fd2c86ebe49559cd7ea0030d50c196","sha512":"c651afb2b824e43dbb1548f081c6148831c39444e10358abf6109afd4649125dfe3f40cebff94892b96d973daa534185a3dd9b3b6520ff3349ca994879549d2e","ssdeep":"3072:GEIYgadYqhJrTodiWFW1WF8fMqAOACkjQiuIRxLMz9+Z15:dAiWFW1WmfMqAmkhLMz9o15","tlshash":"bc34c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","first_seen":"2026-07-08T23:24:03.888143Z","last_seen":"2026-08-10T04:46:25.329416Z","times_seen":3752,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.201Z","timestamp":1786325819201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"8c2091a992e4303600967e53388cb5c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1000705\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d208f3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10918,"size_decoded":3756,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10918), with no line terminators","md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-12T08:25:32.102457Z","times_seen":14223,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/6331909d64be71664192669.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.337Z","timestamp":1786325817337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/6331909d64be71664192669.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2974\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2974,"size_decoded":3240,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"9d3c2bfb5e1682906cedfabacffe99c2","sha1":"f182ab545cc42ac026f5a66c15163714958e6747","sha256":"8a2d447e8710f543c39e51277cdf39f42b1ea8b1214a63940224b28f3db63a68","sha512":"70c424762552d3eedf5ef38098fdd5a0bba4c83da177a9fe6c13f99603ef28177011bbc18dddf163d1b3662c7a2d417b28b5355bd962790f89e73f19b8c51cdc","ssdeep":"","tlshash":"ce512ace0b529bcbf48ac763ed574cd9f7c58c933d6496484fe804a1aad65d3888188c","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.883915Z","times_seen":137,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190beae8061664192702.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.342Z","timestamp":1786325817342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190beae8061664192702.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2418\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2418,"size_decoded":2684,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"557f84b5bfffb0bad146d72887639de6","sha1":"07f73fcfe78ad0e19d3a44b4dcebd0dac5ea62ee","sha256":"439b972535f50f103caf524535d1ddbe62182190321f674433d8aea95b9e82c0","sha512":"459286106e25ead65ee5caf98b1eaccbd05c5b55bef5ebcfbb53c4c661bd23a437018a056d36a0fa2429eebd87cc259bbea2457e5ed19f45930e6bd90cb2a6b7","ssdeep":"","tlshash":"69413d77020337d4b45943a3c4893d9b6ef95114b640206b7eec54d7d5cdbf4bd68246","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.878364Z","times_seen":137,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/webfonts/fa-brands-400.woff2","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.688Z","timestamp":1786325817688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76736\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76736,"size_decoded":77003,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196","md5":"ed311c7a0ade9a75bb3ebf5a7670f31d","sha1":"0613c7ebba55ee47ef302c0f7766324692f899a7","sha256":"8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef","sha512":"6048e7ab94134b7200f0d5ed7fb8d577298d4831a2b3a4e0e5baa5c67468f77d4409314d63d34436ba6ba038c86faf87e46dacf98d311a74291b976fa39a9674","ssdeep":"1536:yVIKSdIKO0RtQIJwjZKd4jkC8Voun7L5XpeVQ+OEmdEu:SItm0RtQpAdofaluV99u","tlshash":"4d730196c3ca08de6994937ce960efdd1b0d4dc7aa72c7525e63c9a451c8ec83834b78","first_seen":"2023-04-05T17:41:32Z","last_seen":"2026-08-12T08:26:23.128756Z","times_seen":28362,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/logoIcon/logo.png","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.581Z","timestamp":1786325818581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlFIYlp2R1cxM2tJWjhCL2doR2tZS3c9PSIsInZhbHVlIjoidFZDY3NramYwbUNFTGVka2Q2RjR3S1RWRnVlUytMWlpJSmJUM1BOL0F3amRENnlCb2NmRWtMUXYyQlhIWldBclM4YURtMEIrNm40VjVMdnNTSTAyUTk4Z3M5QjVyUUpxNWxXQmhHZlVWQlFMa2haUmQ3SHN2R0Z3SUk0R1BUOVYiLCJtYWMiOiIxYmMyOTFjNjk5OGE5NWZmOTM0YzY5NzdhMDMzYzFkMTAyZDUxM2Q2YTkyZWE1ZGNhNTIxNjQzMTRmZDk0NjVjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZLZEE0cmxXTDgyVFAwTjc1WW9vUnc9PSIsInZhbHVlIjoiUDdGVVhYVE5Qa2cyUHR2dUlaSjNialpKY1ZOTkxMaWlLaTFKQVFOMDNBQUFWTThQZWFRRVVqSGo5cmVvbkJmME8wQm9oenNSV2JVRjBQUlJ1Y05ydkk1akNPOTMwZW9xblRIZDQyaTRTbFoxTVRjc3RpbzF5RzRBWlR0bjNWeUgiLCJtYWMiOiJmMzVjNzQ1NmI1M2Y4ZDJhMmY4NDIxMjJhYzVlNGJjMzIxM2NkZTQ3NDg1MDNjNTZiYzUyMzc2ZDVkZjMxNTUzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 06 Jul 2025 06:34:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142781\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142781,"size_decoded":143048,"mime_type":"image/png","magic":"PNG image data, 1133 x 495, 8-bit/color RGBA, non-interlaced","md5":"d920c605cd65b1eac97271a280dd120c","sha1":"11125678eb179e0fadf93ed0a5bfa258b68bec8e","sha256":"23c951ae256829d7dc6742d136c0769717f7583072c495e550738bf3b5d2eefe","sha512":"6f8bcbf88a53bbc813a1574e71ff878e328de0b16bb0b2240a3724f09a5f24acd17edd756e8e0597399ed4bf84aaab559145aa3f87e5219ca266bc2cff0a88eb","ssdeep":"3072:CGjSSaYySHpSmA4Dupjh9x7bEU+PUbmInJ:CA7By2JDeV9dXmGJ","tlshash":"33d3123e9a9ede94cd4f583121e6cf2b097a383604e81a609c18b67ddcc3d1d8555fe8","first_seen":"2026-08-10T01:37:37.963535Z","last_seen":"2026-08-10T01:37:37.963535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.702Z","timestamp":1786325818702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-7tbt\r\naccess-control-allow-origin: https://roninx-trade.com.crystalforte.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45ced9025ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":731,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.209Z","timestamp":1786325819209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: \"4d9736a6cf175b83c2d5a50234a16b44\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 855534\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d208f7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14277,"size_decoded":5533,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14277), with no line terminators","md5":"4d9736a6cf175b83c2d5a50234a16b44","sha1":"930111650d3fb0035c89a075ad226f32589a0939","sha256":"175791cee0d4323d07bd395c74e2ebb88f8916a7236928717c07527e4b1891be","sha512":"6e3990c6b08e10f1a5419d130f8d068962b1836ef457a464124a817c6f8e154826445b4ce09d64233f1738a501c6d9af33e423184563c45701916f893bee90cb","ssdeep":"384:Nqw/U5YK8HxhquThWazJbUZDkM0kWEYPk6c+UtKM5eH:A+hquThWazJbUZDkM0kWEYPk6c+92eH","tlshash":"d352d6a7b2a4782d46379752308f3204f33b7d45b215d919f36ddcea4aa84c16056f3e","first_seen":"2026-07-08T23:24:03.877553Z","last_seen":"2026-08-10T04:46:25.332974Z","times_seen":2787,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold/css/color.php?color=CCA354","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.063Z","timestamp":1786325817063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold/css/color.php?color=CCA354 HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-length: 55\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70,"size_decoded":334,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"2ed8a31af81521dd6d4ad8ec2697a77f","sha1":"c2370fcdf48b74885e3a4379b1388b8eca284a00","sha256":"29afe14b891dba8a7cabfe9e4c83f6cc1f2acd4702ef61e04dd776ddd66039ea","sha512":"5a39c2e9308e73ccc286a8d0e1d4f060d631fda913ac56f77b41b4c52cd07a8239cce82cc262f4fd5444878ca06570d72398f09a7a29c149a72e520317a5d445","ssdeep":"","tlshash":"61a0010240043e2b02398212a2d4120be06402565aa07c99b8c000261b628277453c00","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.048826Z","times_seen":153,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//js/vendor/slick.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.306Z","timestamp":1786325817306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold//js/vendor/slick.min.js HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10097\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42863,"size_decoded":10335,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-12T08:37:46.794857Z","times_seen":111064,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/logoIcon/logo.png","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.332Z","timestamp":1786325817332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 06 Jul 2025 06:34:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142781\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142781,"size_decoded":143048,"mime_type":"image/png","magic":"PNG image data, 1133 x 495, 8-bit/color RGBA, non-interlaced","md5":"d920c605cd65b1eac97271a280dd120c","sha1":"11125678eb179e0fadf93ed0a5bfa258b68bec8e","sha256":"23c951ae256829d7dc6742d136c0769717f7583072c495e550738bf3b5d2eefe","sha512":"6f8bcbf88a53bbc813a1574e71ff878e328de0b16bb0b2240a3724f09a5f24acd17edd756e8e0597399ed4bf84aaab559145aa3f87e5219ca266bc2cff0a88eb","ssdeep":"3072:CGjSSaYySHpSmA4Dupjh9x7bEU+PUbmInJ:CA7By2JDeV9dXmGJ","tlshash":"33d3123e9a9ede94cd4f583121e6cf2b097a383604e81a609c18b67ddcc3d1d8555fe8","first_seen":"2026-08-10T01:37:37.963535Z","last_seen":"2026-08-10T01:37:37.963535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190dadd0f81664192730.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.346Z","timestamp":1786325817346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190dadd0f81664192730.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2577\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2577,"size_decoded":2843,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"8f191e619bd61661dec0791c15cf6632","sha1":"777a71001dea64a02cbcee471118ecdaa8280596","sha256":"793ccb8719d81e4a822b2fb846e342b4ce4babcd10ddbaed4df3ca75e7b369a1","sha512":"0ba507a89652eb332bbf950c7d9e181a08057ee23904996004004121eff191940bab0733461a87993703cc81632b97886cf513e5fec9cdd9ff0b748197a3c433","ssdeep":"","tlshash":"2e512c17232803c0f41b4576a06e2de6a9f49f4124d6d75b27f4db70a410ae38dce729","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.870617Z","times_seen":110,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190f8ef6061664192760.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.351Z","timestamp":1786325817351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190f8ef6061664192760.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2408\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2408,"size_decoded":2674,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"dffa57d9ca159b96f77d4bee2f4c1fe6","sha1":"ab7a636196def872adf535c24a306469858514a1","sha256":"b4528af90592dba6f7ea05d7940dd6d853ab8fc0e5c8464750bbf091dfc1928f","sha512":"bde3d3bf50e1136e31e750c72540bb0e5b08435db4c1faf18958a5dd1f854239af09a6db9a74001fec4203c3a7c6756ac8f4e2798dbd607c36024af608055d79","ssdeep":"","tlshash":"9e41da5b5761a2d8781d40face1a1dc0d2d4ad5730895a273feb059483d57ccf08b20c","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.884433Z","times_seen":137,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.203Z","timestamp":1786325819203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"2fbd26af790f4021c222d285bca63f47\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 783754\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d208f4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18392,"size_decoded":5823,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"2fbd26af790f4021c222d285bca63f47","sha1":"643fd2af6f8d4df46bcb7998c9638ab085df7736","sha256":"0ab3e6d58bc33ae6635954e6397b3423c301cd66b58a9c0badfb67c0301d701e","sha512":"d446c3026035e64159e877892a94f5f0456f766285142f65bf17bd6ec5d43cb35c8ded56560deccd82511caadfdc48b3c16326bc94209b3ff2ec77beb3dca855","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC5GN//h6LiJq:SzP2DbSLi8","tlshash":"8a822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745df245a8cc2906af3d","first_seen":"2026-07-08T23:24:03.859246Z","last_seen":"2026-08-10T04:46:25.351959Z","times_seen":3067,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.211Z","timestamp":1786325819211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: \"0b7571445a752df762894d31268e7c12\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1012459\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d208f9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54211,"size_decoded":14820,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54092)","md5":"0b7571445a752df762894d31268e7c12","sha1":"54b956960bd4376f15523f25f586fc5478a626fc","sha256":"2a768547370a8933454d03757e1981e616d448234e06e5b9dcf1608f35bec644","sha512":"12e90c52c5cce1f2767060de43c8627fb789a49f5a1b1a681048e732f08ae67194f4ee0c7a80f305778c67e31a756555c54d463bbdab66f19b03f8f050aa4e71","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK4/:xfuro0f20UJWfO+Et7GZrCi20k","tlshash":"8133d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","first_seen":"2026-07-08T23:24:03.874474Z","last_seen":"2026-08-12T08:25:32.063539Z","times_seen":3214,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.280Z","timestamp":1786325819280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 941985\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d27904a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36092,"size_decoded":8709,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-12T08:25:32.064234Z","times_seen":49764,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//css/vendor/animate.min.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.054Z","timestamp":1786325817054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold//css/vendor/animate.min.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4617\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68606,"size_decoded":4926,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"0338f296e0c62240e256f481aa2e0231","sha1":"bc26ba3a09932875baa1ac2b3b533e258e339e14","sha256":"7400b662c9bf915de8c9a174f9e09ccc8313340622deaac4f65bed8339f1466d","sha512":"7b15ceae7f268484b43af55a1d0e1e793ba692101bddeb5e5b916bef9a426716e345e3e0325c233d0547c8d620ecd7c48432f59d4d29ddf534205586348fa091","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvr:LIW6yffHf7SpS/fjf7","tlshash":"2f63096929e1114466370a15c7df9f78263ce5a31826ecfab3d2588bcf41fac23c9617","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-08-10T02:37:45.015757Z","times_seen":1792,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/why_choose/631d7ee5c26801662877413.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.702Z","timestamp":1786325817702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/why_choose/631d7ee5c26801662877413.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 450511\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":450511,"size_decoded":450779,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1920x1152, components 3","md5":"4fbea64dbbf65303e9851a9293ea2b68","sha1":"cc8891faed9f5ddeb9becae9b3b0a72972fc5b91","sha256":"753db1c83776055657638e0951949de9d11553e7151fe3fa5749c799fdbcbab0","sha512":"aada70849abc27912a9ca0b7d96c98c69befefd85763d04b8d60501a30d827d6426eee3ba90b1dc384beb2b41da9d3d9e4351a297c764c589b3869887ef82960","ssdeep":"12288:cHjwuQrgIsBd2+5hHManRKSCmxgrFjEnbLzoSYN:UjKrdov5hHMaRBurFgbLzoR","tlshash":"83a40147ac284f83a515c7e5bf071dd82f18261ced863aff552a5ecb7f19a224c4a01e","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.050925Z","times_seen":117,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.14.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.769Z","timestamp":1786325817769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 00:45:37 GMT","end":"Mon, 14 Sep 2026 01:45:33 GMT"},"fingerprint":{"sha1":"DC:2F:40:2C:2E:8F:A1:FE:B6:A3:D2:1B:01:7E:28:02:66:38:0E:86","sha256":"E1:C6:2E:FD:25:F8:44:CA:B3:2C:26:9B:A5:CB:26:9B:6D:77:7B:CF:2A:52:29:CD:23:39:99:E7:89:F4:41:57"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 07:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"698ecfa4-6beb9\"\r\nexpires: Mon, 10 Aug 2026 02:11:23 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 8734\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s79G0C6AA5uZGwqlwYubvTeoGW13uUANeY%2FTDU303Gv14nBHpX3yrIEFA5p6CkT6axTDOeCFKsNPvpHe%2FjKZAenTC0RH8jdCdvI8E8YkIBFjQ%2FNAWqrUo3uYUdjhmoCTsbXZBhY%3D\"}]}\r\ncf-ray: a28b45c90812b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":129341,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-08-12T05:40:51.003055Z","times_seen":2876,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.011Z","timestamp":1786325818011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45ca88c55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":32869,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-12T08:25:32.029759Z","times_seen":66802,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.020Z","timestamp":1786325818020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: a28b45ca98ca5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":671,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-12T08:25:32.039053Z","times_seen":93331,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/logoIcon/favicon.png","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.584Z","timestamp":1786325818584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/logoIcon/favicon.png HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlFIYlp2R1cxM2tJWjhCL2doR2tZS3c9PSIsInZhbHVlIjoidFZDY3NramYwbUNFTGVka2Q2RjR3S1RWRnVlUytMWlpJSmJUM1BOL0F3amRENnlCb2NmRWtMUXYyQlhIWldBclM4YURtMEIrNm40VjVMdnNTSTAyUTk4Z3M5QjVyUUpxNWxXQmhHZlVWQlFMa2haUmQ3SHN2R0Z3SUk0R1BUOVYiLCJtYWMiOiIxYmMyOTFjNjk5OGE5NWZmOTM0YzY5NzdhMDMzYzFkMTAyZDUxM2Q2YTkyZWE1ZGNhNTIxNjQzMTRmZDk0NjVjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZLZEE0cmxXTDgyVFAwTjc1WW9vUnc9PSIsInZhbHVlIjoiUDdGVVhYVE5Qa2cyUHR2dUlaSjNialpKY1ZOTkxMaWlLaTFKQVFOMDNBQUFWTThQZWFRRVVqSGo5cmVvbkJmME8wQm9oenNSV2JVRjBQUlJ1Y05ydkk1akNPOTMwZW9xblRIZDQyaTRTbFoxTVRjc3RpbzF5RzRBWlR0bjNWeUgiLCJtYWMiOiJmMzVjNzQ1NmI1M2Y4ZDJhMmY4NDIxMjJhYzVlNGJjMzIxM2NkZTQ3NDg1MDNjNTZiYzUyMzc2ZDVkZjMxNTUzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 06 Jul 2025 06:34:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6231\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6231,"size_decoded":6496,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"70174cd279715cd47f4359353262115c","sha1":"e045e15c5873e8100bcd486f4f93f68bcc4c6574","sha256":"23066c7a01401e7bd3068061b511a410e8e1c60fa3ddfaff091c3fd2b6db2760","sha512":"3321496eec58c3506609870cf5874c659c017b3fedb3784e124e4560695c9c0d56c94db055f0c4d593869b3c8227135de5dc080fa215af994d8ecc8b37d345da","ssdeep":"192:JBegBPpy6+LlK7zz5xH/b6v/90fUk81i/B:3Gs7RxH/Gvi9","tlshash":"7dd16c9202962b2b8e5a45b7cfe86852f5bff664d7898061426ef3b5d053c4cc141682","first_seen":"2026-08-10T01:37:37.982793Z","last_seen":"2026-08-10T01:37:37.982793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.698Z","timestamp":1786325818698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 195\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":195,"data":"{\"p\":\"67e7184069da0d191c8d4d4b\",\"w\":\"1infbdglu\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://roninx-trade.com.crystalforte.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"KDgKXPtjeHclNFAiZ4HGi\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-pkpv\r\naccess-control-allow-origin: https://roninx-trade.com.crystalforte.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a28b45cfc90c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047,"size_decoded":1437,"mime_type":"application/json","magic":"JSON text data","md5":"e3584bae35fd5cbd79b1f837c0a6baa6","sha1":"b8f89d38097e5d25edc7698ebcb6a1459190b0cc","sha256":"f93a28aae8bd4b6b0c7d4d393e7d2618eff857b966946d96956b5c1bd299aa0c","sha512":"11f93f866dca64c01cd5bf47d42f079024be1b836e291a334092eb626fe4a8c9be55c42def551b141c6e1e9d4ea31bab58fb178d8e0e206042b2ad77b4486e9b","ssdeep":"","tlshash":"3111a8065e4c4f6661b7abc00eee3d9589cc6777798c4848c1d1dd1f397477964c2c26","first_seen":"2026-08-10T01:37:37.985135Z","last_seen":"2026-08-10T01:37:37.985135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":340,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.207Z","timestamp":1786325819207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: \"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 182328\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d208f6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":2974,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-12T08:25:32.033432Z","times_seen":42349,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/css/bootstrap.min.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.047Z","timestamp":1786325817047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/css/bootstrap.min.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21169\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163826,"size_decoded":21657,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65307)","md5":"1477c4cbb0fe5d43e157c84981325db3","sha1":"595aebfa80b5afe20746a0f0af37c3dc3f9b502c","sha256":"8e23c3b3f22abb77e233c65f438c4190a773637c591d1fe15587bfddc6f81e6f","sha512":"bed809b5b97ed858b6a09f474ec37a06768981ebf311fba3b234a1828fe3c56cc2f78c23e326b0f288b17789a6b7f9e232b2474b8a5abc28de49c21e4ed48a50","ssdeep":"1536:At04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fT:At04/0VUpz600I4fT","tlshash":"a2f3b4d7f581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-09T08:56:00Z","last_seen":"2026-08-10T14:18:06.479673Z","times_seen":460,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/footer/631ca001534431662820353.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.709Z","timestamp":1786325817709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/footer/631ca001534431662820353.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 144098\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":144098,"size_decoded":144366,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1920x1281, components 3","md5":"74852c2c01787839f26e34d50a930c72","sha1":"864a1e5fa9849267118d12516494f69a3543d591","sha256":"4cb9600f71da3be5b7dfa4541e83652d9313dfac3088dc85cd56daf017f22f06","sha512":"66f88e71d39888422fb645d65f46ded3f80097cb9410c4b35db19805dad826afc0264b68d643347ec61f9dd6fdc76d98999fb337668ba7200eeefdf71dc28328","ssdeep":"3072:JLlCD62jOPVcfSr0PUZV+HiDJLiYX0GTZmI+AqeaAmTL2aGSq:8bw0PUZV/XX0GTZmI+Axvmm","tlshash":"25e30203416a64c2a01b52fcfe454fa6675a376cbad4b68a21df4e9f3e512358f4c02e","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:44.998327Z","times_seen":148,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.253Z","timestamp":1786325819253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: \"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 935857\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d25901a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23063,"size_decoded":5840,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-08-12T08:25:32.11304Z","times_seen":38906,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.327Z","timestamp":1786325819327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a4e64e9f0d/css/bubble-widget.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d2c9325ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":94429,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-12T08:06:02.343274Z","times_seen":35912,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":556,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:37:00.774Z","timestamp":1786325820774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 1311\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\ndate: Mon, 10 Aug 2026 01:37:00 GMT\r\nage: 2637261\r\nx-served-by: cache-fra-eddf8230174-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":1952,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-08-12T08:06:02.352686Z","times_seen":21251,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/css/line-awesome.min.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.052Z","timestamp":1786325817052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/css/line-awesome.min.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15174\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89729,"size_decoded":15484,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73db02545cf13e8c82b51b62782df0d6","sha1":"c1bd14187b6dcb36efad21e51711f8941801de0f","sha256":"ce61a18cf084f15003798340044643f329ac5f90045acb2d9e778368bd799854","sha512":"bde6d4962ab1ad5901cb782e70c842966c903fd3a7fc701641d2835d168095bfc52ae4dbc648cf294caa54ec40706c050e46bbf5e4c5f985f07e47b5877ff07e","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngf79IcjJv5IopdU6:1b+754u2nOW4xUse1exx7HD9hU6","tlshash":"cd938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-04-05T07:54:02Z","last_seen":"2026-08-11T19:23:30.483912Z","times_seen":7361,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//js/app.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.309Z","timestamp":1786325817309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold//js/app.js HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1034\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4722,"size_decoded":1271,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"aae759cc9fa56453c329d121bf87017b","sha1":"514289cb538b2e91b6767fddff7f5d9778ce536d","sha256":"b124b5340460e4163427a7309373e3b7b0250e16986969ff1b060819db97f75b","sha512":"41606ef3b56e53a6f1ed5cbc970771239bb6e8bbb493286bbacee54846e2458ef7390529fd9778a9a0d854f278a3ad2a27e0f76806061789a431c1d6a4e8fc7c","ssdeep":"96:XvpBTSaHHFF/1Hhdz73EL+3QgU7q9LNq3pcTISpL:Xv7F8L+uCgIph","tlshash":"aba1cc0ae801117b40bf7379d925ab09f7971327c28a0a13bafc05885f71a59b6d0dfd","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:46:40.24588Z","times_seen":91,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190a588df71664192677.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.338Z","timestamp":1786325817338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190a588df71664192677.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2590\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2590,"size_decoded":2856,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"0a83136514821c7feab4aec77a435715","sha1":"0b787308e5b037500f39cc3e278db032af516459","sha256":"f2626dcbd435ddb1e0279cf09ef907d2e11c5d3529cee8a92b29f9ba7d32928b","sha512":"bdf5511e56cb2b3467a513331619e6c926a7684a05351e89332e55f82c92f44835d486539f3de38a54a875a5643ccde7d32816f89db9cd83c5b63a982c92cdc9","ssdeep":"","tlshash":"9b511a1acb0083c0fe1eed758b8b6ee1d3ed9610b41a5a0faed00912de705a4d4fcd49","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.868171Z","times_seen":135,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190ad89c261664192685.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.339Z","timestamp":1786325817339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190ad89c261664192685.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2602\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2602,"size_decoded":2868,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"025bcfa81051eaf00faffaaa8cf2b984","sha1":"8e6ba1ead57f10eaee0ec076dc129bfff4b71e1f","sha256":"928abad03e045383bf0412e5f288ba64c1c2dd45a99d5242d9a3a8aa4ec4fa09","sha512":"b15b03c74f4fb01cd9e36dd5c2e0eda565bbad8768621951d81a77db83af78abef65f8a565cb4c798d58eacf7be2c87e70a14766850be323228cb508ed9b05bf","ssdeep":"","tlshash":"9e511c57334354d8fc0fe0b358497e51b2e5298339880f2f6ad6438096eab46d08cccd","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.84496Z","times_seen":137,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/fonts/la-regular-400.woff2","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.684Z","timestamp":1786325817684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/fonts/la-regular-400.woff2 HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12900\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12900,"size_decoded":13167,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12900, version 1.0","md5":"88d9d9416c58bde56378dc4439e3a144","sha1":"bebed8d7033a4df35bebba69f1fc261a78a4ee22","sha256":"51ca2c00a3e30945e52227147fed9e296dde03af3c4d7589e8e95ca5740037db","sha512":"906884d6b687dd0b583872578a107fc7264e4198b3218545c01dd2185a397015b7226e0c96ae3dea6294abf7599052d3d271b6bb8461e972c5e49149f28b95f6","ssdeep":"384:cQ/ZCDaw2Q49jW8QIkW5SepdRZS3KUWSQoppk6CMRYtPP:l/BwzojW8lB5SenCKUtDC3tPP","tlshash":"fe42e1629963cb089c9d5b38b0ee5d401792703dfd9d5bec022bfe52cd4e09e4b1a076","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-08-11T17:42:18.532643Z","times_seen":5304,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/subscribe/631ca2753add11662820981.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.708Z","timestamp":1786325817708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/subscribe/631ca2753add11662820981.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105104\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105104,"size_decoded":105372,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1920x832, components 3","md5":"3f1372d7687c782c89cce05f163bfe40","sha1":"72b18ba7d26f8c03d3ca6d2c2fd5d04ece3a2490","sha256":"f5222b4e2e2a65fa9c39d6e3c8bd66dfbb5fd1d9e99413b7f62adffc4a8744f9","sha512":"b533a739c34bb5c178874170f50af16e9d97bf98ccb3bc812b656e6503d559aeab29ed5252c1ed34344c3349e81141b5c568e8d43718992c0dda108252c9aef2","ssdeep":"3072:lPeQzE6KCcONNCNnYO7/PHMD3cGSWirAXWlg/:lPlFN21//Qid8/","tlshash":"cfa3f223ea78c261f91d13d93a5b8ccf5d817f28309e663d83671d8f6252a500e5f3a6","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:44.970351Z","times_seen":157,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.019Z","timestamp":1786325818019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"581712668ae095b5d8f678a6ea34ae0c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45ca98c95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":1751,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"581712668ae095b5d8f678a6ea34ae0c","sha1":"b25b29f31300f4d63e6dec685339e0bed3235e8f","sha256":"5107df35262814ad822e242e2f510be7dfa6b382f7a00211808dafe85bf77d3d","sha512":"b51bc3a2e92f0e472ba8e7a2f09bcbe35996175e6731e349f9c192f7b58fb320b6eaa7a3757a4363df8ac952c0ebdcab7b751c8ee96a17fbb319a579cc6d0706","ssdeep":"","tlshash":"134183d936e8f9b6834318e1043fa056f6353976097be8c0531dd4f5bc78849815afb6","first_seen":"2026-07-08T23:24:03.879117Z","last_seen":"2026-08-10T04:46:25.319513Z","times_seen":3764,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold/css/custom.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.061Z","timestamp":1786325817061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold/css/custom.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1604\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6565,"size_decoded":1913,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"f43e26436484462c278ce5af42179e9f","sha1":"78666a78782667f1387436e2efe58858610a0921","sha256":"eaa6a619d350c505b420d79e422825d36b7a44bece825529138505e7f20d3cbe","sha512":"2048e32b8b973522589bb2a038a2eaeef0bcdb34a0a2ef32a769973a2740adc96a27d66912eb56e5468de7d7c557ba47dabb838cfb89e78eb6184bfb22c3d239","ssdeep":"96:sykBceJkkF8ORMxiTgsCj3UAw99bFK2900O3lK3QMR4ts7phhTrA4A:sHBVJkI9ZCj3UAw99J5O3bKfM","tlshash":"99d11239e91510453237ab38a7f29b99af351053db020bbdbacd21694b6438c4b63edc","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:39:38.692493Z","times_seen":10,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190b56702e1664192693.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.340Z","timestamp":1786325817340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190b56702e1664192693.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2779\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2779,"size_decoded":3045,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"1577318eb452e319977e7d6346ff3ea4","sha1":"fb099085229f8b07aa48063f9b6da255162f102a","sha256":"86d035c72c6fb57c3f90ca73f8bcfc064059e400d3cb053eefdefa4ff855156b","sha512":"a5dc9be73b26abdfc602edd91432adfb9c08d83a31600dcee6157996f4865e20d3c3920e7f74ce76507f5db63cd3fd9202d4739dc410846e816108957429907a","ssdeep":"","tlshash":"05511a2e6a6787e4fc0e43a1c9242d80f5e7db51b7d055592ef097b29230c448959b06","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.8409Z","times_seen":135,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/team/68797358c9a8f1752789848.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.359Z","timestamp":1786325817359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/team/68797358c9a8f1752789848.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Jul 2025 22:04:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35285\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35285,"size_decoded":35552,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 280x296, components 3","md5":"a28fcf2eb7f66b8a5a3281f970e5b552","sha1":"770d8fa6d9322efed33ca5119e49ac60f10cf41b","sha256":"d5ffee2b642dcdf5a275d05ea4ded2fe9776241fc9c957c43eed76cfeb1a9c12","sha512":"9630671936d0d2bd546f26da45b4785cae22fea10c10f9fd1dbc6fabecf805725b0674a6e193a09b3cb46da4ddb56324cc65f43ccc84cfe2f35541aa22da099d","ssdeep":"768:/Qxc5KYxzUq0UsxbIYqFjkCMa9AKh0XG5ev7qO2G:/QxW2q0UsVvCMqAqP5Z3G","tlshash":"f9f2f23f3869a1d86b549806cd263c800b6612d372e5f1adbabc7f8b8531153fe04b4d","first_seen":"2026-08-10T01:37:37.92919Z","last_seen":"2026-08-10T01:37:37.92919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaZrEtFpBI4f1ZSIK9d4LjJ4lM3OwRmOw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.554Z","timestamp":1786325817554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/exo/v25/4UaZrEtFpBI4f1ZSIK9d4LjJ4lM3OwRmOw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 14:17:55 GMT\r\nexpires: Thu, 05 Aug 2027 14:17:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 386342\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12264,"size_decoded":13077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12264, version 1.0","md5":"02937a1785441f2ea3a18fb652872c02","sha1":"7c7e177a3d0d02036fbb17ba638d4e8ddea24d3d","sha256":"54be207d1f76e357721a5a6f203e5a2e62cdc6857b6ac2fb529ff675cfc337cc","sha512":"1a0b4f3ad34a2dfeda5070bf64cd234579517722d68d249bd99b4c785f7d0315dc11957288651c64ca83db5d7908fb82690799f9bc705181961b462224179911","ssdeep":"192:591I3+HJCIKim6la215/mwEdNR4Z2U3DZ4cEkDHg0Y9OnOnFPFlkcznDwTP+2x5z:/rEtol5/mwWs2U394c89OnmLn++2IBRe","tlshash":"8442c0525088b45bbd8613e77c0ae3e8a7914f94e09769d897cab634c08ea57d83790c","first_seen":"2025-06-21T22:25:39.97851Z","last_seen":"2026-08-12T01:44:43.306389Z","times_seen":487,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":2,"connect":30,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/planCalculator","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.971Z","timestamp":1786325817971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"POST /planCalculator HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 78\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":78,"data":"planId=5\u0026_token=IHH8Vca1Rxb552pp6ciMZmsgZGfmTiqmG6K1v1Sd\u0026investAmount=10000.00"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\ncache-control: no-cache, private\r\ncontent-type: application/json\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlFIYlp2R1cxM2tJWjhCL2doR2tZS3c9PSIsInZhbHVlIjoidFZDY3NramYwbUNFTGVka2Q2RjR3S1RWRnVlUytMWlpJSmJUM1BOL0F3amRENnlCb2NmRWtMUXYyQlhIWldBclM4YURtMEIrNm40VjVMdnNTSTAyUTk4Z3M5QjVyUUpxNWxXQmhHZlVWQlFMa2haUmQ3SHN2R0Z3SUk0R1BUOVYiLCJtYWMiOiIxYmMyOTFjNjk5OGE5NWZmOTM0YzY5NzdhMDMzYzFkMTAyZDUxM2Q2YTkyZWE1ZGNhNTIxNjQzMTRmZDk0NjVjIiwidGFnIjoiIn0%3D; expires=Mon, 10 Aug 2026 03:36:58 GMT; Max-Age=7200; path=/; samesite=lax; secure\nlaravel_session=eyJpdiI6ImZLZEE0cmxXTDgyVFAwTjc1WW9vUnc9PSIsInZhbHVlIjoiUDdGVVhYVE5Qa2cyUHR2dUlaSjNialpKY1ZOTkxMaWlLaTFKQVFOMDNBQUFWTThQZWFRRVVqSGo5cmVvbkJmME8wQm9oenNSV2JVRjBQUlJ1Y05ydkk1akNPOTMwZW9xblRIZDQyaTRTbFoxTVRjc3RpbzF5RzRBWlR0bjNWeUgiLCJtYWMiOiJmMzVjNzQ1NmI1M2Y4ZDJhMmY4NDIxMjJhYzVlNGJjMzIxM2NkZTQ3NDg1MDNjNTZiYzUyMzc2ZDVkZjMxNTUzIiwidGFnIjoiIn0%3D; expires=Mon, 10 Aug 2026 03:36:58 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 109\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":123,"size_decoded":1240,"mime_type":"application/json","magic":"JSON text data","md5":"a5dbb605ce2447babfa88c072e2e1b66","sha1":"0612ad7224d4a29ee888e81d6bb645aeed2e3072","sha256":"0c9d85ac09d726fb94a97fcb482ab5a2d21987a0dbe4d6dba113ace8d9ee6171","sha512":"4f32b4ae103c192b254e5cae1441aa18e74b06e597a93bf94370f19a42ba9d3fdc94e5cc20c6aadb855b80f0a6a4cfda651ee69138d8c0685af7d28717c50084","ssdeep":"","tlshash":"f3b02b4e345e04813204068077031d108324027d0a50e24044954b0884da2b1563300c","first_seen":"2026-08-10T01:37:37.99883Z","last_seen":"2026-08-10T01:37:37.99883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/preloader/67f79194e6fe01744277908.png","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.327Z","timestamp":1786325817327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/preloader/67f79194e6fe01744277908.png HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5746\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5746,"size_decoded":6011,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"d1bb2b11e5621fcd17ad9cc44c3eaea7","sha1":"bbefc17d252e1e4142fcdc6d885f8679b1bbcca7","sha256":"5eb88c8bc62acaab98f446ebda6d8f2eceaf417c7f905acd206d1978370eb1af","sha512":"3debdb0d06b8138e6017eec80306a60354b402e947fe958df603e082dcda1f2140743257f34bdf5dc7effe61d9251b001cd4c3e6b90558090a63906285d48aba","ssdeep":"96:Jjrrrf0Zy5eOtpaBXUxJRfWDx/YLBSMiFMopKpaLL5ESPKs13pGIHT8opQ2AC3+s:75eOAXq9W1QRiF/NLFEMKqZRHhzAC3+s","tlshash":"4ac18dbb814fa48ba3671e191d0b9426bd76c17d3b0f08149f464eaa7a4fb43241d685","first_seen":"2026-08-10T01:37:37.999851Z","last_seen":"2026-08-10T01:37:37.999851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190d1715f71664192721.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.344Z","timestamp":1786325817344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190d1715f71664192721.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3322\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3322,"size_decoded":3588,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"a038178137e3edbdcd610bf2e910e517","sha1":"2c0567c2a5b9eb0dd38da778a487029541b5bf7b","sha256":"e2a45ced8d3d6878e8ecdc4b711e69fe51a7430377e8b572be9035d6028d6a6a","sha512":"314015bf46f57b5ff2e6d15f8f2d1b3f8e052eae5b52705aeb582515b58da4b67301e09c0829c9965e53dc6326b7c46b205aa7853a71473a3fde73e8857a6c1c","ssdeep":"","tlshash":"36614be4dabb66c4b41281b5b55e0d3048e56992e288a6c9bbf73fd1f1609c010d8f10","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.875036Z","times_seen":134,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190e5aa7371664192741.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.349Z","timestamp":1786325817349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190e5aa7371664192741.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2584\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2584,"size_decoded":2850,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"16c3aff53d4578caa8c3ce683471261e","sha1":"7c2f1c97c7015847c34e86692d794b4c7611a4db","sha256":"9aea4a31c9acf31313c2d08bf860c70fff89052e8d3d6563d32837c7f71faa10","sha512":"0785ebf2cf052c6c9ccc865e157cd9b4eb4075e9c836fb11487e90ad8017ffeb2e1d02d1013007cfca3c2162fcb09084065f1f355c53b6d05f83097fecfc8ff4","ssdeep":"","tlshash":"355109af564a83d0bc7e9377cf11ad86f4f84e51b0d068922ae19e818891fc9c88158d","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.820954Z","times_seen":137,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.310Z","timestamp":1786325819310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: W/\"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 783601\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d2a907a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22356,"size_decoded":7330,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-08-12T07:40:20.607647Z","times_seen":39621,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//css/main.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.059Z","timestamp":1786325817059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold//css/main.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11321\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80873,"size_decoded":11631,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"cd5945e67d777b667bcf309f6d2e1eb5","sha1":"3874d65a6672b30a66b4419498a29548aa8ff68b","sha256":"b3918a74e50aac4534ddb7ea494e38e5bf491a0cdcd3beb5c0ea6ca60a6703c6","sha512":"adb9e97b270e34fa535b1a81fef64d55365f45ad751a6e5c8ffac4ac85bf033ac71e862e96643e3391de3bf66e9ccce091976f606b6ed4ca2da0ef3450cf37a4","ssdeep":"1536:nnLZFS0Gq5RzRhx/LZFS8LZFSzvLZFSJLZFStKLZFSPojLZFS0LZFS9ZLZFSqLZp:nLZFSZq5nLZFS8LZFSrLZFSJLZFSkLZ6","tlshash":"9283a863ea551494732be50cafd9dbbc123e71535d2e0eeab280353d83853e81563e8e","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:37:38.002618Z","times_seen":7,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/css/iziToast.min.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.310Z","timestamp":1786325817310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/css/iziToast.min.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9933\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41500,"size_decoded":10242,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419)","md5":"ca2f839e9a41207ce4d486b75b0dc926","sha1":"398acaa4eca2baa749a90175fe24d3c2a35f19ca","sha256":"20b2776eaee552defc7c9b25bfef14a891f0dd4a12ac7320d689d749e1ca0fa7","sha512":"d9feb978fe3c1c26cbb2efb380a70eeb7501f5631343a998abfc84766f9a6d2f1e521cee40bcff6b381515a7a1d8fb4726af583502ee23549934757766257f5c","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppGf1oWQA1","tlshash":"711345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:39:17Z","last_seen":"2026-08-10T21:27:40.59695Z","times_seen":2419,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633190c81d2361664192712.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.343Z","timestamp":1786325817343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633190c81d2361664192712.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2456\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2456,"size_decoded":2722,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"5556b750e44ef70f78060deb0540e07d","sha1":"ce8a97101fe2e29431e88d35d4caa86db5ea21dd","sha256":"879eacdbc9635df543821318cd668a0d8591091d254f07b4f2fb8cf9701eb1e7","sha512":"ea91eedcf0696dcc4defb6424dde3085ed70c1bfe2d2396c68ff094ec969645a2b14cdcd6044bea9eba89d8928f5dafff3dfda6b7c9ec5a75599032d3d51c5a4","ssdeep":"","tlshash":"3c511b0e063142e03c2b41feaa576c82d6dc5fc7795016a231e12596dd37667f84980d","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T01:51:44.857642Z","times_seen":112,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/team/68797b37f3d161752791863.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.706Z","timestamp":1786325817706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/team/68797b37f3d161752791863.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Jul 2025 22:37:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 314473\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":314473,"size_decoded":314741,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1920x832, components 3","md5":"2e354d727d91fffbbd2a23aec25cca6e","sha1":"7f4f56dec8b3aa5eb88cd45b12f85ede432ef692","sha256":"42ebebf5ffc8f60de2c0a70d3c7b5093f152062474ffbf8151f242fa2414d1b9","sha512":"fcbe662be932dd64752dacf6b98a42db02502d59fedfad0f3eaaf9056a09a0e95b7ff52e51b00ce890634634d0a49996f56f7c55d71efdd38ae6b3cd20266e1f","ssdeep":"6144:NlLmPM3rU2LuGwzykDN7cM0x3kS5OAi9ZMi/NspbmiAKXemnYuVbUX5ZeOkoxT:jmPM3rUGRwGkDNIR5kgj2Mi/qSi9xtTo","tlshash":"db642269524cf038e626c795a8a74b3a78f20737111b7257d64e821ea06df83247e3fd","first_seen":"2026-08-10T01:37:38.00443Z","last_seen":"2026-08-10T01:37:38.00443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633191261ce231664192806.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.356Z","timestamp":1786325817356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633191261ce231664192806.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3198\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3198,"size_decoded":3464,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"003d8e81311eb7421b2eda148229ec9e","sha1":"8fdc514cf36739195c8626b9455b828528af8491","sha256":"4cfcf75805d0423bdcdd052eb9fdf1c799e9c862b86727d53001550f4e4ba8f9","sha512":"9dc816df4984653854447b0612497f7f4e0e3fcb6240a4050d566efff24fbd818080ef8cfcdc2157d67391165ee54a809a802fc15e21ff90cdf822107065ea06","ssdeep":"","tlshash":"02614d3663c547d1b163c4fb8c156cb5dae98be67ec9375a1ee004448273ecd9160e4d","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.04622Z","times_seen":139,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.678Z","timestamp":1786325817678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:11:05 GMT\r\nexpires: Thu, 05 Aug 2027 13:11:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390352\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28528,"size_decoded":29341,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-08-12T06:43:52.862545Z","times_seen":10348,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.206Z","timestamp":1786325819206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"e4f17b44539cdb517c1475424aec5722\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nage: 920970\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\ncf-ray: a28b45d208f5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11888,"size_decoded":4542,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"e4f17b44539cdb517c1475424aec5722","sha1":"6f02d2f55076fd3a4742f18bc41abe2ab11fdbd4","sha256":"c0be6022318db42025ee57c3ef987e375f0591db734457caa0ad249df1202f67","sha512":"2bb5554affecc7a9c5049cf93876876c49f2f36aea08e4ef1ea87374af28b440573078e2c934a850218c45f9e47aa058b0861a3ce19c4e6162dbde3772b35c15","ssdeep":"192:0H9Ma6RIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:K6b9HkS316xAFKpLZEh","tlshash":"2732a3c6e8c7b9564227160451efa128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-07-08T23:36:09.661392Z","last_seen":"2026-08-10T04:46:25.332366Z","times_seen":2169,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.399Z","timestamp":1786325819399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"1419f2a1837ad0239c12ed0298d67590\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 920971\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d3390ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102656,"size_decoded":23013,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1419f2a1837ad0239c12ed0298d67590","sha1":"45d8dbfeeecc27db2ef5707a1f3808a66c1d2b9f","sha256":"6dd414390ef7f11315507ed32ddfef2b85d3f9a683db2bfb8cdef66b6264ab70","sha512":"c41f632c69630b0f20ee3523e6da536d10fe5e109b8a2ec2fc3305c3b8f0b7185695d980229e6ee57db83823a1ab2f120c9677670a555dd9a681b3b2f50c3a19","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBC4ikauV3cGiH27PNWE98MGfU0nPROpmi0m:xfuVLmi0V0Z+tKaK","tlshash":"41a399b2e56710cc7363c22692c1faac1029e370c757caa9f827767d4bc25963562f9c","first_seen":"2026-07-02T06:23:48.069239Z","last_seen":"2026-08-12T08:25:32.039808Z","times_seen":3677,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/6331910d5ef4e1664192781.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.354Z","timestamp":1786325817354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/6331910d5ef4e1664192781.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3137\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3137,"size_decoded":3403,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"324f9d80f04152347961f6bdc66848ca","sha1":"556544b6657758575d066cac0e4f79989d7e683e","sha256":"74bb7bff37f73260d8fea32b25d41adf859980e979d1eefc5cd3835fc9270b1a","sha512":"e0d02ed98905635164bb9c155a3daad17c5c2fce08b7b8ecf2377a24e703266335b4406350a4c14bb7bbb47e3375db13106681fb4c773ac62aa9ee9d7efd1cf9","ssdeep":"","tlshash":"59510be2261abbc0b997d0367ce54c65c3dcd6b72161c5af26c14b46e8f0694b5481cd","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.021897Z","times_seen":138,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/633191199cfcb1664192793.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.355Z","timestamp":1786325817355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/633191199cfcb1664192793.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3165\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3165,"size_decoded":3431,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"d3e0f9b478c6a3d0fe80656b1a239eb5","sha1":"cb6d074d49dcee5934c73a7588310f61083b4c8b","sha256":"763008dca306d128101fcee51ff04114f6228a4f99b613aec86893d5235602aa","sha512":"7db6aca0c520a798a8a1734d916d931aa33dc0caca47bc419a7ea5e1629357be83cd18fd5affc7b2984a695885c5d32fd1c11ae34590b28437607a56aae2646b","ssdeep":"","tlshash":"c2512b7e3b93b7c93d3c4f66d0127c5662dd03823dcb120274e58b90d7a07889889aa5","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:44.962454Z","times_seen":136,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/team/6879770dcfda41752790797.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.360Z","timestamp":1786325817360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/team/6879770dcfda41752790797.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Jul 2025 22:19:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33550\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33550,"size_decoded":33817,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 280x296, components 3","md5":"4e8730fe50224dbb8107f82b2f4e4d2b","sha1":"a86aeebd592ecaacc288d3e52a075668c11b7270","sha256":"067220aa003e360877185f41b44418b14eeba0287b567c371ed6aaecac6ff317","sha512":"6389a0406688089ff811938b0495c2f50c99af3749dbbcedc4d0f4f091f56f033c5496b7a3f30b0f8f30158b451a085d070ca4e2a3956054e8c6d6e804a34e4f","ssdeep":"768:/ndUK6UmoRMamp28fjXi1r1D7L6onu2DV+:/KFsJqTjXUrhUz","tlshash":"55e2f197eaa8d970be507acf4a103fa451b20931fb64afb31ef285c9dbd14c49409db4","first_seen":"2026-08-10T01:37:38.024688Z","last_seen":"2026-08-10T01:37:38.024688Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/fonts/la-brands-400.woff2","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.683Z","timestamp":1786325817683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/fonts/la-brands-400.woff2 HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 84772\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84772,"size_decoded":85039,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84772, version 1.0","md5":"54b0b4e7de85711c3796882b2b19eb00","sha1":"89f4f0d9ee3a2bde5fa250bbe6dc4a4804e1a863","sha256":"ff70c9bc4650cf5e6b12d1feaa7af29ebf0681993fc0c5ffe3658cea0dbd5403","sha512":"38490f72deaf75fd7a82a23919fe479b5a5a0d0d7279aab96e153dfe413c1ee89f2095111dcccdc58470c17622f6bb44ea4d63a8da6208c973bfea7035a37a21","ssdeep":"1536:5W447cpQ00eKOVGTZUbT3g4SAXjZoUANGBem/V1R6WsMpEEeOWeB:5zSiVGZUwEXjOvGws/WweOhB","tlshash":"e7830284fb35e9e4718ecb30d58432a9d5e9a0f8b91a0456f1c7c07bce2d6fcb196492","first_seen":"2023-04-10T16:26:38Z","last_seen":"2026-08-12T05:50:15.763679Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/how_work/631ca042137ab1662820418.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.703Z","timestamp":1786325817703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/how_work/631ca042137ab1662820418.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105104\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105104,"size_decoded":105372,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1920x832, components 3","md5":"3f1372d7687c782c89cce05f163bfe40","sha1":"72b18ba7d26f8c03d3ca6d2c2fd5d04ece3a2490","sha256":"f5222b4e2e2a65fa9c39d6e3c8bd66dfbb5fd1d9e99413b7f62adffc4a8744f9","sha512":"b533a739c34bb5c178874170f50af16e9d97bf98ccb3bc812b656e6503d559aeab29ed5252c1ed34344c3349e81141b5c568e8d43718992c0dda108252c9aef2","ssdeep":"3072:lPeQzE6KCcONNCNnYO7/PHMD3cGSWirAXWlg/:lPlFN21//Qid8/","tlshash":"cfa3f223ea78c261f91d13d93a5b8ccf5d817f28309e663d83671d8f6252a500e5f3a6","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:44.970351Z","times_seen":157,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.016Z","timestamp":1786325818016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: W/\"2fecc9d90ae6ad7f85d676e274e5d4a5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45ca98c75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":348923,"size_decoded":117185,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-12T08:25:32.073129Z","times_seen":10017,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.210Z","timestamp":1786325819210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 14:56:38 GMT\r\netag: \"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 863827\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45d208f8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":1079,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-12T08:25:32.112439Z","times_seen":49947,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/css/all.min.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.049Z","timestamp":1786325817049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/css/all.min.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12370\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59305,"size_decoded":12680,"mime_type":"text/css","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-08-12T01:18:04.439802Z","times_seen":47531,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/js/jquery-3.6.0.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.301Z","timestamp":1786325817301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30266\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89500,"size_decoded":30504,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-08-11T23:10:44.209941Z","times_seen":21583,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/js/iziToast.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.311Z","timestamp":1786325817311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4784\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18481,"size_decoded":5021,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-08-12T03:17:50.052266Z","times_seen":3429,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/global/js/firebase/firebase-8.3.2.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.313Z","timestamp":1786325817313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/global/js/firebase/firebase-8.3.2.js HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 238467\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":859901,"size_decoded":238706,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"3aeb031c1d596281cfb0bc798ad68c35","sha1":"f3cbd0c473069e581705448366b33fcf71e0fdb9","sha256":"c6129ac86f15d92723bbb81e97f5ab4bcfd97f0744ea5898d2402087520c532b","sha512":"5fcc9700c5c7842dcd0f7c18a1028d6a6bc00536d03ced45d83c4ad7ed7b8530ddde45ec402f4fcb79c8ca87c4541af9786fed00817fb5437e08a4c75e9817ce","ssdeep":"6144:K8YqbosMLHtk4OLs/8wWaoFwApF+GzJXZaGQqdxQUdcujbva18nsLDMX4teWXs4v:nYqbrKOQ/YRQp18nl4sSG+z","tlshash":"5305b5ccb692b062439360b5507f410bf33b685da40e40acf669e9d67cb954e923bf78","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:26:57.884388Z","times_seen":195,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/preloader/67f79194e99781744277908.png","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.329Z","timestamp":1786325817329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/preloader/67f79194e99781744277908.png HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4265\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4265,"size_decoded":4530,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"754045ee5ea7507af519c8d889906d74","sha1":"c87f7d1e6df5f7fb36d8ce2e137c58e881853bb1","sha256":"7542686dd2c39239f814dc6d0a9066a80aea60bfef8db145bc69b4c346ae5941","sha512":"9b07305f448319f93fac719dd30e2a33c3a963c3de73d439d759adae908045712fec3784d8c1013e8ae2369afa59468ebb2475e338f6aa8485ecf25db0e5c89f","ssdeep":"96:AZZZ17+kM9nG+wHfPo3oPxlaywTjNQF1TTxBIKn420l5vaLCXJ3BZZz:i7+kgsno3EzONQvTTxX42mC6J3t","tlshash":"c1915bf5a5b7ee2e8ca50350563f10e91cc882c23066c4be4284e2bbd50c7be7571eda","first_seen":"2026-08-10T01:37:38.037911Z","last_seen":"2026-08-10T01:37:38.037911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Josefin+Sans:wght@300;400;600;700\u0026family=Exo\u0026family=Playfair+Display\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.426Z","timestamp":1786325817426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Josefin+Sans:wght@300;400;600;700\u0026family=Exo\u0026family=Playfair+Display\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 10 Aug 2026 01:36:57 GMT\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8065,"size_decoded":1420,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"867b159d8d99792f9c667fa92e69274f","sha1":"95ed086a3c081babf53f273d6604278f02cd8718","sha256":"669dbd06ea2bc5bf8699b6e5ca1cfc85445ba87dd36502d52e0cb8f667a607d8","sha512":"6e9652244e7bdcffd3f73541db99f11f61ddd0dfa0a6ebbe148b6d1f5d32459612945557949c3a7ad1346512ba8b9224dda2fa75223fde54196e7e30de8ac9dc","ssdeep":"192:c8wgrKKCjXzrjj+zNFj0zOmjb8Hu2S2pUu2Shu2SYVu2SW:c1/mQ8O2SuD2S02SP2SW","tlshash":"5df100e1042ae650db831dc223ce7e329e9ea1557440c979affd18ccec5ec296365b0d","first_seen":"2025-09-22T09:55:56.170849Z","last_seen":"2026-08-10T02:37:45.032648Z","times_seen":205,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.690Z","timestamp":1786325818690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 08 Jul 2026 14:56:39 GMT\r\netag: W/\"17fa2497bdae7324a17eaedfe6fc8650\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45cec8ff5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11596,"size_decoded":4366,"mime_type":"application/json","magic":"JSON text data","md5":"17fa2497bdae7324a17eaedfe6fc8650","sha1":"27bce6a96d49d0077bc16228801a3089fce5be2a","sha256":"cce37a30801a132937edb0ac257f4ed917559c00d6a648716bd9ac406cfc62b1","sha512":"f4155fcb97d0180daa46cb293cd70f01b984c39f9895f76a0acc098b0c5f86f883378620e75f8fb79b0e0b1e5033e4ace16046bc48ca2a9c2127053ae48be305","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"98323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2026-05-13T09:28:21.606546Z","last_seen":"2026-08-12T08:25:32.082535Z","times_seen":11413,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a4e64e9f0d/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.694Z","timestamp":1786325818694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a4e64e9f0d/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:36:58 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 08 Jul 2026 14:56:39 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45ced9015ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10839,"size_decoded":4359,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-12T08:25:32.01017Z","times_seen":29131,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//js/vendor/wow.min.js","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.307Z","timestamp":1786325817307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold//js/vendor/wow.min.js HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2572\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8415,"size_decoded":2809,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-12T06:36:07.08619Z","times_seen":14374,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/we_accept/6331912f34a631664192815.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.357Z","timestamp":1786325817357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/we_accept/6331912f34a631664192815.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2819\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2819,"size_decoded":3085,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 75x75, components 3","md5":"8458f2fe9b3d56d757e11e994e2abfbb","sha1":"d687bd10ae0188612b39df71786e29f50a055fa0","sha256":"cea548b76552263c7ea70c76c474f46f7c442b9416f03239931cd48e6a070c15","sha512":"ebb16b7453f946704e41dd46a16160037a8a4475a73c1342956842d204a3007421e9cff26665f0a7b5e179b2957c5c18757c6e6fcacdd9d47245013b0fe262dd","ssdeep":"","tlshash":"57510b9f17463ee1ff25e657eec56e1196f9870832a8736d9be0010809b0f86924886c","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.029846Z","times_seen":137,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/team/68797ab5d3bc41752791733.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.366Z","timestamp":1786325817366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/team/68797ab5d3bc41752791733.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Jul 2025 22:35:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 42527\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42527,"size_decoded":42794,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 280x296, components 3","md5":"39f3b709e9fd5a494b8de427a958a259","sha1":"d88ede7d516c88f263429313bc170c48e8ca80cd","sha256":"53693fed941c0e425e50aaaaa25270ada3e2f377b8a9136d7401c3caf486110c","sha512":"8a8c4c695fc4a05aec951c26243a2d052fe9e005e2a17508e6db9f129f7328c6e5bb17f46413f34235e19029cc78cc92432707d721377eb98f10797a8c8de88c","ssdeep":"768:/8RayVuIrWEbpv4d10IG1h09WCkC7I7RWDOZUZJz9CC7B/WNQc+o/tdGqdjq:/DywIjbCdC1C9WRSysDOGj9Brm/tdGqY","tlshash":"8813f13e06c465fcfebe201661784fb516936d877281dfa6c8fa0b60fe046fa205a491","first_seen":"2026-08-10T01:37:38.041665Z","last_seen":"2026-08-10T01:37:38.041665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/about/631d85749f9311662879092.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.700Z","timestamp":1786325817700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/about/631d85749f9311662879092.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 360836\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":360836,"size_decoded":361104,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1920x1281, components 3","md5":"27b22a640d3aebec098ae9bf49951e37","sha1":"3d32d94252232850bbe58be804e2cdfbceb4a846","sha256":"a60e4c6615d9623f9e88bc915f213d68a96253194fad6d8633e06d6cca4148c9","sha512":"0d60f1459f57e87f7afead75e769d5dbcde8ee15652cc0ab9dac821a5e012b6f42986436f04c8c93f3d46eeb329f505b293d5040f46b6c4f107eab1834e6df2b","ssdeep":"6144:SoeEdXVhyFi7skEqU+JEOjNYaUhINIh2fNXpfT7pq2vj0a5C4ntWne:WEdFhnJztJxYXdoNXp77pTvj3FtB","tlshash":"6474122f5812c39bf80903e4b9174cac19786b6cb9a36f9f13235ccbb574b251d87296","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.017722Z","times_seen":100,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb25.tawk.to/s/?k=6a792b3b99118c5a8a07bd50\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2N2U3MTg0MDY5ZGEwZDE5MWM4ZDRkNGIiLCJ2aWQiOiI2N2U3MTg0MDY5ZGEwZDE5MWM4ZDRkNGItZnh2ZjI0RjZvMnIwdXdNQmY0VDNkIiwic2lkIjoiNmE3OTJiM2I5OTExOGM1YThhMDdiZDUwIiwiaWF0IjoxNzg2MzI1ODE5LCJleHAiOjE3ODYzMjc2MTksImp0aSI6ImRVaTZiY24ya1lZREdCWXNNbklwZCJ9.DHJ70EA0dn7pbQfhckCsvpkjVW3puLCag2m8WY0b_5UCR3ObPE9uG6yEUqnJzcNx-RpoVeuLK2xCKfdR8aZ_YA\u0026EIO=3\u0026transport=websocket\u0026__t=P_fKDz6","fqdn":"vsb25.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:59.234Z","timestamp":1786325819234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /s/?k=6a792b3b99118c5a8a07bd50\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2N2U3MTg0MDY5ZGEwZDE5MWM4ZDRkNGIiLCJ2aWQiOiI2N2U3MTg0MDY5ZGEwZDE5MWM4ZDRkNGItZnh2ZjI0RjZvMnIwdXdNQmY0VDNkIiwic2lkIjoiNmE3OTJiM2I5OTExOGM1YThhMDdiZDUwIiwiaWF0IjoxNzg2MzI1ODE5LCJleHAiOjE3ODYzMjc2MTksImp0aSI6ImRVaTZiY24ya1lZREdCWXNNbklwZCJ9.DHJ70EA0dn7pbQfhckCsvpkjVW3puLCag2m8WY0b_5UCR3ObPE9uG6yEUqnJzcNx-RpoVeuLK2xCKfdR8aZ_YA\u0026EIO=3\u0026transport=websocket\u0026__t=P_fKDz6 HTTP/1.1\r\nHost: vsb25.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: MAICRwd1SHNxhwR1cKbhbA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 10 Aug 2026 01:36:59 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: xDmgR3R0qPDJdY3bZ0PAPWlyDNU=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a28b45d25bcd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":18,"connect":15,"send":0,"wait":599,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:37:00.576Z","timestamp":1786325820576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 10 Aug 2026 01:37:00 GMT\r\nage: 3417280\r\nx-served-by: cache-fra-etou8220049-FRA, cache-bma-essb1270063-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 39460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":40204,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-12T08:06:02.330687Z","times_seen":51558,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":10,"receive":8,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:37:00.597Z","timestamp":1786325820597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a4e64e9f0d/css/message-preview.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 01:37:00 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45dab9c45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":94436,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-12T08:06:02.343274Z","times_seen":35912,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/banner/631c9810cbce71662818320.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.692Z","timestamp":1786325817692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/banner/631c9810cbce71662818320.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 219903\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":219903,"size_decoded":220171,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1920x896, components 3","md5":"8ef22d7ea798ddb160cc19372608927b","sha1":"b80d370ca8a99c630225e6d534022f7b234633cf","sha256":"659de9fc523ab33209184a47ab6bf197fa080b4bd757f053fc24cc9d5627c02a","sha512":"682b369edca619c5752b57c54231ab8d0cafd6562a72d8ca4ca78fbc6a45afe13236a2d25c8b68b4bc7a2eb7fe647ef4bd6a7dc81bf0767d7fc1cfb2334634df","ssdeep":"3072:omHD0QsgFu6SFi/91DLMYXhdvVQpafG/slGxDJuwPRmh9ryLqPYH+vIyhCyWs4Ro:B77FzSFi3DYYXhdvIKlsPR2wGPAjjRJi","tlshash":"5c2412624a049193f2161efcf97b2f538c9cf5cc0e6363c3a6660a1fdb11055bee5a92","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.041577Z","times_seen":99,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/templates/bit_gold//css/vendor/slick.css","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.055Z","timestamp":1786325817055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/templates/bit_gold//css/vendor/slick.css HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jul 2025 06:22:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 483\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1776,"size_decoded":791,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-08-12T08:26:43.825319Z","times_seen":73825,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/67e7184069da0d191c8d4d4b/1infbdglu","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.319Z","timestamp":1786325817319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /67e7184069da0d191c8d4d4b/1infbdglu HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6a4e64e9f0d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a28b45c6584d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":1214,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ed2f310c872de31c048235bb3cf6e594","sha1":"108d8a2afe7e0a207da9c007a5baae59ada22d81","sha256":"a6123cdf9292389ead31298df0656cb7cce08f31367c3b44d36d6725b58185a1","sha512":"55bd744fd9a5e4db1ad095d4d4139c994f40574d4e3ee3c76f1911be10ae5e2c9f5deea221a71b95deb542234117b6b6debbe89e1c85e5d278952afbd82b0c98","ssdeep":"","tlshash":"404111e75f4f1862d32420d84caef98eb47b72e648d85c964708040073557ad3a8ee3f","first_seen":"2026-08-10T01:37:38.056664Z","last_seen":"2026-08-10T01:37:38.056664Z","times_seen":1,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roninx-trade.com.crystalforte.com/assets/images/frontend/team/687978df11b5a1752791263.jpg","fqdn":"roninx-trade.com.crystalforte.com","domain":"crystalforte.com","tld":"com"},"ip":{"addr":"162.244.94.12","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:57.361Z","timestamp":1786325817361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lnotrex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 02:18:14 GMT","end":"Mon, 28 Sep 2026 02:18:13 GMT"},"fingerprint":{"sha1":"42:96:99:99:2B:86:10:8E:F9:EB:67:D4:E3:39:4E:41:15:93:FB:C5","sha256":"65:42:E4:EF:DB:54:8F:5D:B8:7A:20:60:A5:07:7D:81:EB:8E:0E:66:B6:EE:26:45:86:3E:EC:14:20:EF:62:0F"}}},"request":{"raw":"GET /assets/images/frontend/team/687978df11b5a1752791263.jpg HTTP/1.1\r\nHost: roninx-trade.com.crystalforte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBNaFBNa3F6WWtNaitLbG5TcnZWdGc9PSIsInZhbHVlIjoiVWJTZStNL0o4YTBVWml3K0xvUTBxSDZQK2NpRjJkN1owU05IWHEvTHlVRVFLeUw0L2ZqbHBHRDBzcWpicTdENnVYbEdYZ0YvMmlyaU1jMzUzYnhzclRlckNqQktLQ2U5Nk5MdXhKTzV5SzlqNjlhdUlVTnFhRUVMVm51My9FMDUiLCJtYWMiOiIwZjExODlmMWM5MDQyYTM1MjVjM2ZhOWJmNDQ3NzcyMDQyMzEzYjMzMDAxMWY2MmNhZjJmOGI5NWYxM2ZkZjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRBOEFDdjZYcFBkbkl3dFNQUmpVdFE9PSIsInZhbHVlIjoiMjYvdlBHc2FWTTJ4bE5rOFJLcFlORlZzTnJhUnFuVmVsYXh5b0s1V0ZZVlllc1FDcHBpcDQ5Y0NpZWo5YmtHb3hDbW5ybDNBYXIxQWJ3RWZOamFsTit2RE9qT1ljSCtYSnl3dDhqS0J5aWI0VWxIU3JkWnNRS2ZLVmRoOU1hL0MiLCJtYWMiOiIxOTU1OGJhZTM3NjAxNDZiMGU2NDBlMzhmZDYxZTE0ZTFmMjEyZDZjYmQ1M2UwMmYzYzhhMDUzMjhlOGE0Y2ViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:36:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 17 Jul 2025 22:27:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30468\r\ndate: Mon, 10 Aug 2026 01:36:57 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30468,"size_decoded":30735,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 280x296, components 3","md5":"099a2ca8e5b2ba5457f5826ee9040bc0","sha1":"1d5b353c097c96b6602d0d2267cca6e595456793","sha256":"52bb81e95b45981f4548a21d9d06d32f1a079f55810046059e5da310a05b3947","sha512":"35a06c297776e415c0787c3d9859fc43d0510d82000d994ab83ad2f837ac3589cd5368ac3da70b25ff5cfba32c4febbb07807d2458282b9f08de7a961d3c18fb","ssdeep":"768:/kTRsm7K3oTLONPGoCqBrcfm2fe2AWCgJoJU:/kCAKvN86Qfkw1JoW","tlshash":"cfd2f151a2887de73bb5187e47132f0462dacce1f8db9d5476c082a6dd47a0af4ec850","first_seen":"2026-08-10T01:37:38.057549Z","last_seen":"2026-08-10T01:37:38.057549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"roninx-trade.com.crystalforte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=67e7184069da0d191c8d4d4b\u0026widgetId=1infbdglu\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roninx-trade.com.crystalforte.com/","date":"2026-08-10T01:36:58.683Z","timestamp":1786325818683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=67e7184069da0d191c8d4d4b\u0026widgetId=1infbdglu\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roninx-trade.com.crystalforte.com/\r\nOrigin: https://roninx-trade.com.crystalforte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-g2h4\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-3-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 10 Aug 2026 01:36:59 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: a28b45cec8fe5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3252,"size_decoded":1964,"mime_type":"application/json","magic":"JSON text data","md5":"d80543a28813e99f98844a94bbea0e6c","sha1":"ff6fc6fd0bd31ccd67d7373de1012200a7cf8430","sha256":"3ea5e41877e2f8b43bc5e1c906366e3b6119ff3f23c09be7a93c385a6f8cd2d2","sha512":"a30e2b27c2b637d2e679077f326f4845748886f45c206904856695f77fd0b2301f03e5e526100f591f70ef5ec69623a43ff19956f7cdedc51a85a0a62bd87634","ssdeep":"","tlshash":"9161332a8915dd7953c9c34371df3a27a93dd023e384595ce098ae2883efacc221178b","first_seen":"2026-08-10T01:37:38.058494Z","last_seen":"2026-08-10T01:37:38.058494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":3,"dns":3,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}