{"report_id":"9988ca28-73be-4955-9404-9485ce176ccd","version":0,"status":"done","tags":[],"date":"2026-08-26T10:59:12Z","url":{"schema":"http","addr":"thefirmbrokers.com/","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"172.67.134.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"thefirmbrokers.com/","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"title":"Firm Brokers","dom":{"size":206680,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23394)","md5":"324ba40c4df6361702d142fc9ceb76c4","sha1":"9ed030c82903c9dddd191ecde17857f3310a07ee","sha256":"e842aaf389df12e3a28319d9136bd29b89b49c1edcefbc123ae5350019631cfe","sha512":"495aebc71519b38b4ad68a8622019b2f55b65dc801b15b1d0393f1493b7693366f151df4af45bc82973dcdadee0e88184bf47a20e713be2eb1288fe63437d9ae","ssdeep":"6144:dGmrq4JT0as7wf3s6RYproS1JXapoG/XitZFl:brd0WT+Xavwl","tlshash":"e2148b326d06283f7127d8cde305132fb9e1515fe346adde36ad32e887cac645869c62","dom_hash":"domhashe36725cc37a0db38344568153ec7e9a8","first_seen":"2026-08-26T10:59:14.763578Z","last_seen":"2026-08-26T10:59:14.763578Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thefirmbrokers.com/","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"172.67.134.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T10:59:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"thefirmbrokers.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-25T19:28:40.370914Z","last_seen":"2026-08-25T19:28:40.370914Z","alert_count":15,"request_count":15,"received_data":773082,"sent_data":6856,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thefirmbrokers.com/wlcheck.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d976b3a537f27ca6526520d1c4731ce0","sha1":"bdaec1a8b732bb554454226af5862883ea6e8f50","sha256":"e282fb4f3cf3c7b7c7ac9118a9ecb60ee066536e074de0bb54b8841b2933931f","sha512":"3d984e8a309b89d734c1d607281b24bb00a7b896a0f84f02e6fb36b606edc40a1b4e03391f5f6ca6363a4cda4dc2f6a8d1eb95cf1f9b168e99c4b1dbb62c62f8","ssdeep":"192:Ce+HGa0hb7BtVLD9NE/yWhtgY7o0r+gvW5sLvnTie6wVDJFQpmUMiyQapUHSI5Pd:Cept9TEDp7Zr+g0En1pviqmQKR","tlshash":"6552a3155e73133659a3e1bd279f9163f321c1276005ca483a5d83584fc9b7892febc9","size":14195,"data":"","first_seen":"2026-08-26T10:44:19.706341Z","last_seen":"2026-08-26T10:59:14.772315Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/city.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66a9cdd2252415af8fefc3ac55f0238b","sha1":"b4fc88a5057058a6e512e3d5093ff089386c7b5d","sha256":"49f79116e81a1f8344e1defec070576ffcbaad9ed63acb972ed2d64f97236c05","sha512":"8727c3cf2ede71ecec74e985781928fc6c0798091e6be7211403665d022d715c97d177e6a116958dbb56c198e59b4e6aac2fcee514c112dd2ef16df9898b40f3","ssdeep":"384:4Er7GK1Md+VEdb6Q3IPR/+VQtwmOSmeFbqfbSgguARAK3Y4z:4E3cdBNVI8VbguAKVQ","tlshash":"e7a2d7127ea2273d94d3d4f447df6a96e32190171829ec68390ed3241f2b174c2bebda","size":22209,"data":"","first_seen":"2026-08-26T10:44:19.70194Z","last_seen":"2026-08-26T10:59:14.771194Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/lobby.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"049c001cd64a9f6d3a623b8cc6758ca3","sha1":"3330d0de264d0028fb2a0dffdfb12d303474a6b0","sha256":"d6c1494ece95d5ab98ecd644fb56cb7e24c78749e440de1e046f9c9b6585081c","sha512":"ebcacce6f1e6b889d3d6affe37ce3f1569b903dc42ae3fab69efbe3c708791727e0bcfa82c824ffa55483f3be5d8c9570c291b990a4919d484b8f32375c3d771","ssdeep":"384:o38ZW0NXFxaFxseOcNschFtRgas1oOLZvYs/+yPjy01veAR2V8YW7HG7sDJnEeBh:7JFIxGKs8fqfd72Ib6k","tlshash":"0bd2d9272f03233629a3e6a4634f238bf321905ba2569954359e435c1f4e7bc46bf6c7","size":29158,"data":"","first_seen":"2026-08-26T10:44:19.693957Z","last_seen":"2026-08-26T10:59:14.767931Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/flathero.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72bd037351e9864070db572664d28c33","sha1":"120596f2fac8f36335bdefef39d33cfdc5e20879","sha256":"8dd7b2231135131421edbcfb9cb4631c4f3a2607d8c0da9593754f138d1d77ca","sha512":"7c01e0b08f9fddef3a8fb8d8b5969aaa08f655d60ed39c1656d688ca553acf5d652783feba14c219efe425302a57c9e10a7264000c0d657c6c13d8c4f9d08c99","ssdeep":"192:vnKNeMwV9qp6FPqDs4zTqNLCI0mvc2/z0aPY8rsWkpKhiQmrNUggQiGGLP/8DQy5:vnFFndYgh9bYKB07JUggtLypwLJUPHnl","tlshash":"ae72c7262e7313367037d1a9ab1f1192f232a0137405da5938de82585f8da79c2ff7d9","size":17511,"data":"","first_seen":"2026-08-26T10:44:19.680636Z","last_seen":"2026-08-26T10:59:14.764902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/xapply.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b0d9bdfbbe0b2ca5b2f7b7fb735b685","sha1":"667f2302d1a6e53f754dbfe1fb40c78728f9eca5","sha256":"7e2138ac28a04c0522b998043f35902ed378776ef957c3a6af05d82462e728d9","sha512":"246ce75bd4631666a1d4ad0702e84c75d6b1939306b70d7f793ada684a37f7e843118ca08864e582bd4dc687dfdbb16ca1d89f2cea7ea02377270e3d7b253e4e","ssdeep":"384:2Mrr21WhhV7pbL0aqyv+t/IFZrog/hCwoYdXz4X4yv:TKWZqyvQY/M4d8Xlv","tlshash":"e5b2b5076e73023a5577e0a9635fb0b7f351412b1545c888398ec7a81f9982682ff3ee","size":23877,"data":"","first_seen":"2026-08-26T10:44:19.708265Z","last_seen":"2026-08-26T10:59:14.766766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/level.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74893733095cfced9e5e235d8bb20941","sha1":"1a6e226497a4758ee4899061f3970419a4df7bff","sha256":"38f8b2ce118c3a3e332fa4d1387f4cfdd07f7d4cd2df19396d6dd4885061cd9a","sha512":"deeef7dd996f406ae344bd0e89567d0b61508abc8edb97d421d0e92d076aafc01df454c28095d6faa41ca43228797abfdf668e0bf93b1a1c1d233b3dc9d2ad4d","ssdeep":"3072:Rah4jGHSRAcHUe89h/IWgj1RmbT2yGbmrLYKl4Tn5t/9wPhbt/:RaHyRAcHUe89h/IWgj1RmbTgbmQ24Tni","tlshash":"ae04f72667b31331487380e9535f72a6f761c41b6216c9443a8ec7982f8ac3591ff7ea","size":180313,"data":"","first_seen":"2026-08-26T10:44:19.703436Z","last_seen":"2026-08-26T10:59:14.768473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/config.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57a7d580d00f1112cb004072d3666fcc","sha1":"32454f3c8378577f555f3c57871eefeba3f8319e","sha256":"95c924b39de27757e87aa1c73a91ace2aa24bcd986073a76c117e537700d0bb4","sha512":"f2b7fccd1b4ef35bfbca6e26bd039736b7c2ad8650e2e9101f8da4ed9e8580c3af32b1d4664272d660b0533341c0336ecd7082a40beb22432d5be3ba84eaa07f","ssdeep":"","tlshash":"046176e3535a02715fc145eeb34e32d2b72c417a9b66f1a6705f420c4b1a07a977a0d7","size":3201,"data":"","first_seen":"2026-08-26T10:44:19.698771Z","last_seen":"2026-08-26T10:59:14.77065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/firm.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9eb27afc5b9c07eb874770661fda4c1","sha1":"b6ae55a5f4591c8b58548aa2340773504a7533e3","sha256":"8232d563448945a2b1d2666bd338ec34dbb515c541d7c67fe6b19a80dd3d6358","sha512":"777a5b99eef34de144475804ad23bb1977c12a462aa9b9834540605bd8455ae0ec9efcd25f8276ff8385f758f098e0bf57ccf1144c7ae4aabf0dc6a8a15a3542","ssdeep":"384:V1DHNM/iX5YMCBtIFzdKPTqwmHJ6iOs3dujR8SiaWZsu3d62l2Y:VhHNjpY7elo2uWayFN62l2Y","tlshash":"50a274902efb21308163f2bc569ba125e236e2076684dd543f5c53506f59838e2febed","size":22355,"data":"","first_seen":"2026-08-26T10:44:19.704634Z","last_seen":"2026-08-26T10:59:14.766163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"thefirmbrokers.com/flathero.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.436Z","timestamp":1787741925436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /flathero.js HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6568\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-446f\"\r\nexpires: Wed, 26 Aug 2026 10:10:02 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: B15C:3D9B15:1250F2:13B5FB:6A8E00F6\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696825.122092,VS0,VE110\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 03dcda76fb1f2c8cfdf770947003fca8761a8948\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyAgNL69NxWP7k6o06XGYzCmuTt6o%2BolRSXTHhVlE9x4ZA7lof3IvVyb3JOv3%2BjCyOUFg%2BQV49UDauWHLb%2FpmijkWLiwapwNK3qIDPXEEzO9yArGaucJ79dZ%2F6IVUjSO1urOeUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9f82d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17519,"size_decoded":7735,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"72bd037351e9864070db572664d28c33","sha1":"120596f2fac8f36335bdefef39d33cfdc5e20879","sha256":"8dd7b2231135131421edbcfb9cb4631c4f3a2607d8c0da9593754f138d1d77ca","sha512":"7c01e0b08f9fddef3a8fb8d8b5969aaa08f655d60ed39c1656d688ca553acf5d652783feba14c219efe425302a57c9e10a7264000c0d657c6c13d8c4f9d08c99","ssdeep":"192:vnKNeMwV9qp6FPqDs4zTqNLCI0mvc2/z0aPY8rsWkpKhiQmrNUggQiGGLP/8DQy5:vnFFndYgh9bYKB07JUggtLypwLJUPHnl","tlshash":"ae72c7262e7313367037d1a9ab1f1192f232a0137405da5938de82585f8da79c2ff7d9","first_seen":"2026-08-26T10:44:19.680636Z","last_seen":"2026-08-26T10:59:14.764902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/favicon.png","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.911Z","timestamp":1787741925911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 10552\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a8dec88-2938\"\r\nexpires: Wed, 26 Aug 2026 10:22:24 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: REVALIDATED\r\nx-github-request-id: 8DAA:3CE285:14F512:1691DD:6A8E16C0\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1787696832.188563,VS0,VE114\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 7ed4f69b87e9c57b19a340bf7a2c869f7ac2a444\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ja5EgAvc85LjC1340DpASRBTjzOn2wSOfhk5AHO0u9nkRqnaLduIJAkkqtjpT5Abx2X7eQFbjW0Yf9ADblt2frD3b9eLQbSyTMyvV%2BzZsgQ5g8SKbgRRGcoublbJpltfAO3inDc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252bceb9f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":10552,"size_decoded":11666,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"0d38dca3cdaae3f2f9ddc09d03430b7a","sha1":"183adab1b3289b8500b190d3fc0db0e0f53d6fdd","sha256":"0dc96a4c190da302ed08b6efda41d5012b0474237103707516b04c4c0b023311","sha512":"60f86919f5b4319de76df3b5cbc0e4154a79f9093ad019e6cbc1efeda189519944569adff3548685075e5018868f10ed6a51bafd14f226e25e4e8ea5ee77ba55","ssdeep":"192:9aurm4QzIE10P0EioyrtviUTsSAuLqQHXuYTkFWMpWeVrNvi8EC7u8u:9TmHcEKP0EOhiUTsSdqQHAJVrthECuH","tlshash":"542290a2875c081cd1ef487282d977c58f868dfc1a9628d337159637286336785dbcb2","first_seen":"2026-08-26T10:44:19.682487Z","last_seen":"2026-08-26T10:59:14.765523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/firm.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.428Z","timestamp":1787741925428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /firm.js HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 7045\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-5753\"\r\nexpires: Wed, 26 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: HIT\r\nx-github-request-id: 4FE4:148376:1282D3:13E756:6A8E00F6\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696825.125131,VS0,VE132\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2deaca39e8acc2ced7488df42ecf01f7ce766d25\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lX1m8StOaJLODEmhMbQ6a2qKN7YJc0IcAxXRS7kez9qedSQEsCUKMzcLZo0lSxNzzpLpLFPuz0cKnTQmeilSTAvd%2FNwwHoUxpSaOPYsZEIBrcNShoDIF4RPdskQD7UQEv4xkU6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9e81756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":22355,"size_decoded":8203,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d9eb27afc5b9c07eb874770661fda4c1","sha1":"b6ae55a5f4591c8b58548aa2340773504a7533e3","sha256":"8232d563448945a2b1d2666bd338ec34dbb515c541d7c67fe6b19a80dd3d6358","sha512":"777a5b99eef34de144475804ad23bb1977c12a462aa9b9834540605bd8455ae0ec9efcd25f8276ff8385f758f098e0bf57ccf1144c7ae4aabf0dc6a8a15a3542","ssdeep":"384:V1DHNM/iX5YMCBtIFzdKPTqwmHJ6iOs3dujR8SiaWZsu3d62l2Y:VhHNjpY7elo2uWayFN62l2Y","tlshash":"50a274902efb21308163f2bc569ba125e236e2076684dd543f5c53506f59838e2febed","first_seen":"2026-08-26T10:44:19.704634Z","last_seen":"2026-08-26T10:59:14.766163Z","times_seen":2,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/xapply.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.437Z","timestamp":1787741925437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /xapply.js HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8008\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-5d4b\"\r\nexpires: Wed, 26 Aug 2026 10:22:23 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: REVALIDATED\r\nx-github-request-id: B096:3CE285:123C4F:13A0D7:6A8E00F6\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270041-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696825.122991,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: fa43eb1b6d3f7c6f55b771e7d8e5473629bdded0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKXlGof0A2lwPr4vgpA6HDHbrlxxUzYpACIGQkszEFqZwJf7yl%2FAyltpKNcV8%2BthezrfQlEgpo4sWMEKbINuvbDd3E0%2B8%2FuC8RK%2BGesAem3RtBdTekho9ND5IeNTYrhH8HVyYco%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9f82e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":23883,"size_decoded":9203,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6b0d9bdfbbe0b2ca5b2f7b7fb735b685","sha1":"667f2302d1a6e53f754dbfe1fb40c78728f9eca5","sha256":"7e2138ac28a04c0522b998043f35902ed378776ef957c3a6af05d82462e728d9","sha512":"246ce75bd4631666a1d4ad0702e84c75d6b1939306b70d7f793ada684a37f7e843118ca08864e582bd4dc687dfdbb16ca1d89f2cea7ea02377270e3d7b253e4e","ssdeep":"384:2Mrr21WhhV7pbL0aqyv+t/IFZrog/hCwoYdXz4X4yv:TKWZqyvQY/M4d8Xlv","tlshash":"e5b2b5076e73023a5577e0a9635fb0b7f351412b1545c888398ec7a81f9982682ff3ee","first_seen":"2026-08-26T10:44:19.708265Z","last_seen":"2026-08-26T10:59:14.766766Z","times_seen":2,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/fonts/press-start-2p.woff2","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.632Z","timestamp":1787741925632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /fonts/press-start-2p.woff2 HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/level.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 4704\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a8dec88-1260\"\r\nexpires: Wed, 26 Aug 2026 11:08:45 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: HIT\r\nx-github-request-id: F568:354FD1:12CBFD:143097:6A8E00F6\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696817.096928,VS0,VE122\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d5f15fcacd385980b413093a07bdaab2eab1d108\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJt9hCcz%2FBgZ34LhmZrmMcDRIBXzcdI%2FRcwuCzUU4FRy2siM66Csfe5%2BWmLE1c%2Bm7xIq3jyKWg%2FPfso%2BTUOqn9x2pXA1UcLL2NhhYwdXnV6%2Bj3HtQGcanfi4R6h1HvLgrzGF7OI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252bb397856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4704,"size_decoded":5842,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 4704, version 1.0","md5":"05d166028ceaf11d329a91bf215f7c40","sha1":"f58741b64ddf452a25c934643e95d4a50afab795","sha256":"42144b97bd2942ea606e5d880684eae0f7be5c804bdd57b1faac5a8d7699ae6e","sha512":"95eaf3d0f777f3e1994dfba739f4a7e88e22052a86137261b7b1de72dac62c958dbae0ddff4564d84f5799a0eaae7c8eaa6e90f470b84743c16f0e97ff12a087","ssdeep":"96:0YqXvPh/Giy0tpiIzuhbcto5dq28Uxol36Fjq/nfvgS4mYL:Ji3hOiye6hQkq28UxVFjq/fvyP","tlshash":"bfa17d01518c8bc5d96324fc0c6d57fbe4e86305e32807c3e8264e051f17d2508faee9","first_seen":"2025-09-27T19:17:48.336899Z","last_seen":"2026-08-26T10:59:14.767387Z","times_seen":173,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/lobby.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.434Z","timestamp":1787741925434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /lobby.js HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10419\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-71ea\"\r\nexpires: Wed, 26 Aug 2026 10:22:23 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: HIT\r\nx-github-request-id: EAD4:2A593B:12026F:136724:6A8E00F5\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696825.111127,VS0,VE103\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3fce00772b482b3e0ef49bc810c76599e93bb894\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4tYm0WXIsHwDV5ANTURWBSjVGXxfyIX7%2B2cgYgWLz248gEnscEZMyqxA%2FyTbI3vsUIYLOeCkUlFDkgAgtZ2jhsgcfMxHiyTR%2FJawkTvXARhoJLcVE3gnkTlYFxGTf%2B8hl649ZZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9f82456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":29162,"size_decoded":11584,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"049c001cd64a9f6d3a623b8cc6758ca3","sha1":"3330d0de264d0028fb2a0dffdfb12d303474a6b0","sha256":"d6c1494ece95d5ab98ecd644fb56cb7e24c78749e440de1e046f9c9b6585081c","sha512":"ebcacce6f1e6b889d3d6affe37ce3f1569b903dc42ae3fab69efbe3c708791727e0bcfa82c824ffa55483f3be5d8c9570c291b990a4919d484b8f32375c3d771","ssdeep":"384:o38ZW0NXFxaFxseOcNschFtRgas1oOLZvYs/+yPjy01veAR2V8YW7HG7sDJnEeBh:7JFIxGKs8fqfd72Ib6k","tlshash":"0bd2d9272f03233629a3e6a4634f238bf321905ba2569954359e435c1f4e7bc46bf6c7","first_seen":"2026-08-26T10:44:19.693957Z","last_seen":"2026-08-26T10:59:14.767931Z","times_seen":2,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/level.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.438Z","timestamp":1787741925438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /level.js HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 59610\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-2c05d\"\r\nexpires: Wed, 26 Aug 2026 10:22:23 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: C6F8:216D37:12C7FD:142CB3:6A8E00F6\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270039-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696825.120837,VS0,VE119\r\nvary: Accept-Encoding\r\nx-fastly-request-id: edcbe14c94ebc8aee8ad5b4cc1fc9ab40811ea90\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHCpDJR3%2BMSkufoKGpgSNGIJY54Gq4vseBmufg2MuPgFPRV6ty0ltdHQFKovI3f9dWsRtaVdzVpiU%2FOUbz%2Bnknr%2BqeZ0%2BLlIzuGin1yuBwjQ%2Fl7Hy9nB4tEzfmI6CcN7T8ozR%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9f83056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":180317,"size_decoded":60783,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"74893733095cfced9e5e235d8bb20941","sha1":"1a6e226497a4758ee4899061f3970419a4df7bff","sha256":"38f8b2ce118c3a3e332fa4d1387f4cfdd07f7d4cd2df19396d6dd4885061cd9a","sha512":"deeef7dd996f406ae344bd0e89567d0b61508abc8edb97d421d0e92d076aafc01df454c28095d6faa41ca43228797abfdf668e0bf93b1a1c1d233b3dc9d2ad4d","ssdeep":"3072:Rah4jGHSRAcHUe89h/IWgj1RmbT2yGbmrLYKl4Tn5t/9wPhbt/:RaHyRAcHUe89h/IWgj1RmbTgbmQ24Tni","tlshash":"ae04f72667b31331487380e9535f72a6f761c41b6216c9443a8ec7982f8ac3591ff7ea","first_seen":"2026-08-26T10:44:19.703436Z","last_seen":"2026-08-26T10:59:14.768473Z","times_seen":2,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/fonts/vt323.woff2","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.736Z","timestamp":1787741925736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /fonts/vt323.woff2 HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/level.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7192\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a8dec88-1c18\"\r\nexpires: Wed, 26 Aug 2026 10:22:23 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: HIT\r\nx-github-request-id: 9BAE:3D9B15:125100:13B609:6A8E00F5\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696824.924807,VS0,VE102\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f1c9c5122f826a0207707fff13cb4676b1b98384\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ov%2FkA8RPaJ%2FvCJA6B5mEPCQX2xVXLcPVLKuky%2BYEodaYERHvBC%2Bd70JQ3Ms3tLOYq25jRcp0ax4snT%2FwtLoAGlr%2F0Getcl%2B3VEazlnA4VQr2q0yHMmM5vualR4ygkF3scFmScKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252bbda4456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":7192,"size_decoded":8330,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7192, version 1.0","md5":"098f3ed5f67608e362a32a3dbfc1a0f3","sha1":"baeb41f086f22837da4f13cb6a1fe4b38a18bf74","sha256":"043a60145af2ddbcd0a6452625cb0bfc4e18b222c76dcd1d4a0106715472faba","sha512":"02b6d262d161a4ca4e020812fef5a16d31b7896986e8ca87bdf32d6990f59c6e272b6f5a5556b66dde03f98fbd4fb7df8e9369950331d3f4d1a072c2b581c5ed","ssdeep":"192:IR2aYXgArZQgUJOIekyrETSHV7Wuwkc5qdAlYRxoA2zSQGo:IRMXhK5oIxyI6V7Ds8WaRo4o","tlshash":"65e19d2b87a3e4f9cde580fccbc02bb905e26fbce2c542c4ca49661352ad535361661e","first_seen":"2025-09-19T11:10:05.464845Z","last_seen":"2026-08-26T10:59:14.768983Z","times_seen":136,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T10:58:45.067Z","timestamp":1787741925067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=0,i\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHvNpfRtsOWwevKtgTfzypmemE%2Bs9YfdnGCQzoTwJcuV1HSwpHrNlkHh3GCyZPX2w5ZTOobVsqYemh%2BtrYNvUDwgnSWZlvc50Q%2FdgAA2f2iygHqOH7NfgV0tZiAvtDccYXhwjvk%3D\"}]}\r\nexpires: Wed, 26 Aug 2026 09:47:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: REVALIDATED\r\nx-github-request-id: 30A6:3F5144:3DB58:419E6:6A8EBC07\r\nx-github-edge-region: swedencentral\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787741925.153924,VS0,VE110\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2144d98ead824dba9d62bf9993d878be982c3bf4\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a31252b7fd3d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":3889,"size_decoded":2768,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d355ca64e2b8ae4c8bd36d63400a5f4b","sha1":"39983ced4994348ac993e5d49b18ccb315473c93","sha256":"61aa4500eed9d77ead3018a1951034b498a54f0587cf7c131d85b17bba42bc6e","sha512":"41957b39dafbc26a9afe3be2b15ad0d445d1a7fee29b606e87494e5417b046197deb24334ba1c07e392a1c10f54f29de867a6d2ec1a47ab7203013d2904d7322","ssdeep":"","tlshash":"5481a553fa8c813f429049816aedf208d675c20cc61cb480f5bd45890ff6f4d886b5e4","first_seen":"2026-08-26T10:44:19.696145Z","last_seen":"2026-08-26T10:59:14.769483Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":21,"connect":21,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/level.css","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.424Z","timestamp":1787741925424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /level.css HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 50831\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-61ce3\"\r\nexpires: Wed, 26 Aug 2026 10:22:23 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: HIT\r\nx-github-request-id: 2B20:29B798:152E7F:16CB20:6A8E16B0\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270046-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1787696817.864650,VS0,VE135\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b04c359868ac41e481826dba68caa91f2f802f9c\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7EaW%2Fc2WhnvQAEITSgveMvR3qMsqbNd13Ialo3RWKDMDkJzUzbqi2g117K4eMY%2F8Aj8OSuLb6lEnv5tbjblewgjlcPdX55jim9YxQUaLEwrs9EThrWNU%2FT25svdsYrty4Wn5Rk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9e80b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":400611,"size_decoded":51982,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (9138)","md5":"6734380ed1ffcfc7c140885476e9b900","sha1":"65f67d556c8bd3fc49b44a4c3cfb130067aac4af","sha256":"c7ce2b7e18552ffe403dae9b46ba1c7236c1b909c10b62b01ea1386845c7f2cd","sha512":"8b043692e1ca58012044d789df3cbeed83dbdb888275648e6d751e2fce197c93117b57963985bf4929c48358a0e498ba0fa842199902a47407d3fe039d1983b9","ssdeep":"1536:a2EiXCZPddMVlFKXFjBAKxgjWdc7dl8iCJgelFwlXibToy0HemNsVjX6TqoHaH3I:dEDqsACOeowgwdjBVNmcjn6","tlshash":"0184eeca182dd6fcec0bf08a1b0ee21d635a72216c26f5e7059a577b82c07f48d6617d","first_seen":"2026-08-26T10:44:19.713054Z","last_seen":"2026-08-26T10:59:14.770088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/config.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.426Z","timestamp":1787741925426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1667\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-c81\"\r\nexpires: Wed, 26 Aug 2026 10:07:25 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: REVALIDATED\r\nx-github-request-id: 34CA:380758:122130:1385AF:6A8E00F6\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696825.104040,VS0,VE106\r\nvary: Accept-Encoding\r\nx-fastly-request-id: dbc607cd1dfb1959fff08fd218e9f32f339e8734\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JozLb7lE9Pxy7UGoZH0FSucKZgzBr3kTek5yTIITMnPekR7b1zjer%2FQCG%2Bj0ITsC%2Fx17dyd8LuX%2ByPZT%2B0yY%2FEJcqytGy7I5YWsTz910TeraUKbRW0LcW4cUZHBwfZyAteYfjbM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9e81356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":3201,"size_decoded":2842,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"57a7d580d00f1112cb004072d3666fcc","sha1":"32454f3c8378577f555f3c57871eefeba3f8319e","sha256":"95c924b39de27757e87aa1c73a91ace2aa24bcd986073a76c117e537700d0bb4","sha512":"f2b7fccd1b4ef35bfbca6e26bd039736b7c2ad8650e2e9101f8da4ed9e8580c3af32b1d4664272d660b0533341c0336ecd7082a40beb22432d5be3ba84eaa07f","ssdeep":"","tlshash":"046176e3535a02715fc145eeb34e32d2b72c417a9b66f1a6705f420c4b1a07a977a0d7","first_seen":"2026-08-26T10:44:19.698771Z","last_seen":"2026-08-26T10:59:14.77065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/city.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.433Z","timestamp":1787741925433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /city.js HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8091\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-56c1\"\r\nexpires: Wed, 26 Aug 2026 09:45:19 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: HIT\r\nx-github-request-id: DF22:277D77:42260:460DC:6A8EBC04\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787741025.898888,VS0,VE104\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 1a26224fd20e6be1dec809d19e3fd63283d57343\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGalB8derfxgddhYeiRqcoE5Ac76KmY9fp0pkpcGyquhGA%2FucVN6pVBj0lATEv1HDxz%2Fakhd%2BUNd%2B%2B1GkZ0AwpI01vsrLLgKp9RPjv%2F4JThrll7ncbLtwLXWD5%2F3rcqg3XNb%2Bn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9f82056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":22209,"size_decoded":9282,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"66a9cdd2252415af8fefc3ac55f0238b","sha1":"b4fc88a5057058a6e512e3d5093ff089386c7b5d","sha256":"49f79116e81a1f8344e1defec070576ffcbaad9ed63acb972ed2d64f97236c05","sha512":"8727c3cf2ede71ecec74e985781928fc6c0798091e6be7211403665d022d715c97d177e6a116958dbb56c198e59b4e6aac2fcee514c112dd2ef16df9898b40f3","ssdeep":"384:4Er7GK1Md+VEdb6Q3IPR/+VQtwmOSmeFbqfbSgguARAK3Y4z:4E3cdBNVI8VbguAKVQ","tlshash":"e7a2d7127ea2273d94d3d4f447df6a96e32190171829ec68390ed3241f2b174c2bebda","first_seen":"2026-08-26T10:44:19.70194Z","last_seen":"2026-08-26T10:59:14.771194Z","times_seen":2,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/favicon.png","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.912Z","timestamp":1787741925912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 10552\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a8dec88-2938\"\r\nexpires: Wed, 26 Aug 2026 10:22:24 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: REVALIDATED\r\nx-github-request-id: 8DAA:3CE285:14F512:1691DD:6A8E16C0\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1787696832.188563,VS0,VE114\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 7ed4f69b87e9c57b19a340bf7a2c869f7ac2a444\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cMDrNCrMqB8fkTeIjKpHybwFK2mNq3daKJ3%2F9EWKvrldvY8Wp9YBE%2BPOBmwSoioLtrmeRFeYyhnmM0gvTrcGrwnuhgSlSeL%2FGQrK7Ul2R7dz0kd3vKuMOYJs6n222XVeyd6nwg8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252bcfba256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":10552,"size_decoded":11662,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"0d38dca3cdaae3f2f9ddc09d03430b7a","sha1":"183adab1b3289b8500b190d3fc0db0e0f53d6fdd","sha256":"0dc96a4c190da302ed08b6efda41d5012b0474237103707516b04c4c0b023311","sha512":"60f86919f5b4319de76df3b5cbc0e4154a79f9093ad019e6cbc1efeda189519944569adff3548685075e5018868f10ed6a51bafd14f226e25e4e8ea5ee77ba55","ssdeep":"192:9aurm4QzIE10P0EioyrtviUTsSAuLqQHXuYTkFWMpWeVrNvi8EC7u8u:9TmHcEKP0EOhiUTsSdqQHAJVrthECuH","tlshash":"542290a2875c081cd1ef487282d977c58f868dfc1a9628d337159637286336785dbcb2","first_seen":"2026-08-26T10:44:19.682487Z","last_seen":"2026-08-26T10:59:14.765523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/xapply.css","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.425Z","timestamp":1787741925425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /xapply.css HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1692\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-1529\"\r\nexpires: Wed, 26 Aug 2026 10:22:23 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: B09A:216D37:201E20:22BBC0:6A8E79BC\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270052-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1787722173.963047,VS0,VE131\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 0acfbe13a4570adb48d8b2de99f8014dfb706e74\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HaaI73vMe7aTU729GuRgZ8FqP%2FRQP9j6is5CK0oyIC8cqnlVl4e%2Fg9gVdL2NCy%2FNrOzixLPtG%2B1VsFSZpjdbKBJmY2cz%2FqurU67J23c2QEuezM5GH8%2FjlQS%2Fq0O%2F3VUa%2BoHXxIw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9e80f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5417,"size_decoded":2875,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"fc5d1c85038b251ab806cff45208c2f1","sha1":"b54f784d51c50e625e3b1144270d7ce974c4262c","sha256":"e17977969ed0913628694eb9ed4cc24716ed711ec27e86e34fdca42c097db95c","sha512":"cd3ba7b902d6683accdb449f12eb1d589e27e497d7e49b66b823a3e8c4b19b40f34d20ad1739733238122cfb7e8dfbe54f5789e3cc5953e07eb36f09e7051fd3","ssdeep":"96:Q/SPJrXSxiS854BhmAsL6Qj7zZeoyS3VXdFmIpK:BlXF56hieQjfAoyQW","tlshash":"2ab17442171351b4fa63bee5bf5bbb2b73189622e10a63bc1d941448c5ce3b812f7388","first_seen":"2026-08-26T10:44:19.691878Z","last_seen":"2026-08-26T10:59:14.771747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thefirmbrokers.com/wlcheck.js","fqdn":"thefirmbrokers.com","domain":"thefirmbrokers.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thefirmbrokers.com/","date":"2026-08-26T10:58:45.431Z","timestamp":1787741925431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thefirmbrokers.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:47:41 GMT","end":"Fri, 13 Nov 2026 17:45:13 GMT"},"fingerprint":{"sha1":"70:BF:2B:87:70:CB:DF:07:C7:A1:6D:D8:61:5B:CC:1B:EF:E4:10:8E","sha256":"3A:13:AC:7C:F2:F8:85:0A:E3:87:0B:00:EF:8E:C9:01:E9:15:19:23:08:0B:FA:F2:98:3E:BC:ED:EE:48:5F:4F"}}},"request":{"raw":"GET /wlcheck.js HTTP/1.1\r\nHost: thefirmbrokers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thefirmbrokers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:58:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5318\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Tue, 25 Aug 2026 19:27:04 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6a8dec88-377d\"\r\nexpires: Wed, 26 Aug 2026 10:22:23 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: HIT\r\nx-github-request-id: A5E2:3CE285:136135:14DEA1:6A8E0A91\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270054-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1787696825.121525,VS0,VE106\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 0c6d95b43dd19c759e2db0c588e2cdcf301304b1\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7YLCQh7HzoB39f57vCCfMGwYQLnsuzaQDBW6ePGXHKMIZJsKTVEqBNwyD2lzlRQqlRCCk88nQXKKJuspRv9Kcy6bVa9OXzFyRSpgTNY9avCSK01YRChAaTpxtBJFnCGPflyECU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a31252b9f81a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":14205,"size_decoded":6495,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d976b3a537f27ca6526520d1c4731ce0","sha1":"bdaec1a8b732bb554454226af5862883ea6e8f50","sha256":"e282fb4f3cf3c7b7c7ac9118a9ecb60ee066536e074de0bb54b8841b2933931f","sha512":"3d984e8a309b89d734c1d607281b24bb00a7b896a0f84f02e6fb36b606edc40a1b4e03391f5f6ca6363a4cda4dc2f6a8d1eb95cf1f9b168e99c4b1dbb62c62f8","ssdeep":"192:Ce+HGa0hb7BtVLD9NE/yWhtgY7o0r+gvW5sLvnTie6wVDJFQpmUMiyQapUHSI5Pd:Cept9TEDp7Zr+g0En1pviqmQKR","tlshash":"6552a3155e73133659a3e1bd279f9163f321c1276005ca483a5d83584fc9b7892febc9","first_seen":"2026-08-26T10:44:19.706341Z","last_seen":"2026-08-26T10:59:14.772315Z","times_seen":2,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"thefirmbrokers.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}