{"report_id":"a78ce561-5c0a-40c1-94d1-962d4bc962cc","version":6,"status":"done","tags":[],"date":"2026-03-09T18:45:30Z","url":{"schema":"http","addr":"ftrustinvest.online","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"title":"Financial Trust Investment | Your Trusted Bitcoin Mining and Investment Company","dom":{"size":63745,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1728)","md5":"4ddbf1d943e905ec88dc05f29b661561","sha1":"0a76aa803aac71c168c9f5c8a2a7c61e7d18a2b2","sha256":"71daeb3f21fb23c63ffe5f452d0199f1731d6b688566800fcb05800bef3ca5d3","sha512":"4df9a2582887c5a07870c69b0050da3f6a5d5780d6d0de1fbd91e1f8d6f31161dd4cd9ac60a59e005dffde4cac36c4628c4e195695e0ae7afb26c1f2a8ceb193","ssdeep":"1536:afis3PLp6hiu14ut5uEiuo4u55uDm3egsJKlp4LRq9lc9yC:afis/Lp6vvJK4LRq9lc9Z","tlshash":"3d53b3109ddd4c33002781c690b66b5da1eb6eb6e6234891b7ff037537cad91b80b99e","dom_hash":"domhash705d61dbddb4212c06782eb2d22d773a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ftrustinvest.online","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T18:45:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.tidio.co","ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-03-04T20:54:36.029677Z","alert_count":0,"request_count":1,"received_data":584,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widgets.bitcoin.com","ip":{"addr":"18.180.147.21","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2008-01-04","domain_rank":0,"first_seen":"2016-11-28T05:55:58Z","last_seen":"2026-03-02T05:02:49.269368Z","alert_count":0,"request_count":2,"received_data":393,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"index-api.bitcoin.com","ip":{"addr":"104.18.28.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-01-04","domain_rank":0,"first_seen":"2018-09-04T17:22:56Z","last_seen":"2026-03-02T05:02:49.576482Z","alert_count":0,"request_count":2,"received_data":839,"sent_data":1086,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ftrustinvest.online","ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":142,"request_count":71,"received_data":3239380,"sent_data":32695,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]}]},{"fqdn":"blockchain.info","ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-10-15","domain_rank":12007,"first_seen":"2012-07-04T10:31:09Z","last_seen":"2026-03-09T05:05:41.580053Z","alert_count":0,"request_count":1,"received_data":4871,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":2483,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.bitcoin.com","ip":{"addr":"104.18.1.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-01-04","domain_rank":855986,"first_seen":"2013-08-06T16:26:26Z","last_seen":"2026-03-09T18:41:01.118559Z","alert_count":0,"request_count":1,"received_data":1121,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":1,"received_data":13083,"sent_data":554,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ftrustinvest.online/js/ion.rangeSlider.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7931ed50463c063934ba032039f944e5","sha1":"77bc0acbe31b2db5392ecb9601cd2b46835df183","sha256":"79405bfca3af9343fbe9b3ca24420c356a88caec09157b36417c3e90b4022cad","sha512":"6ec0af8717807514b253af236a1a0da8778ab1c699556dd921f4d243380053733512fed3f62daa28ccb83a42b306bf238a02739b42e1efafa243f9273a6395f0","ssdeep":"768:f7lVntiNtix6RmNvIUpSvtl1F70/AcYl1Xlqv9d:f7/nYNtix6RmNvIUpytl1F7vLlXqv/","tlshash":"e60330562265b7814592d0d4240d1b0b5b33f66eb35280bc7dbecbdb4daac6870be738","size":40975,"data":"","first_seen":"2023-03-12T18:18:24Z","last_seen":"2026-04-24T23:32:40.892205Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6cb955a35b02d9e5669f08bb3f324a9","sha1":"52eae5e40922c862403de6a5386a5d01368a0dc0","sha256":"d3d19cef6edcd6efbdf6264c4631bfbaf0cc0bdc1d0503ca79293ebff907580b","sha512":"d8d6fe4479589e289a571353241ad0de0af37b5ab1bbe55f714a0f52e9ee4b3cd67559672b9ad39dbc00ff1078bcc9325d66e02dba8b24fa56f4bedcd670c7fa","ssdeep":"","tlshash":"b0019e04b5f4a1f00c73b42a23bb6a5c19365053b28ce74c387d86842f243d09dc368f","size":791,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.927944Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6bc6d878fe9187023f8eb177c7db626","sha1":"28e54da47a94416a31e45ac2a119ceac3ae9a9c9","sha256":"fdbe0dff21a80ba255565c3fcbd4e327d0cb95f68dfc1fca2769f02498637921","sha512":"eca830168b9095f349843f9c2dabccb7e5000f5155b9ce73e5b38a86189d17c25c575b77ef60b2c4f7af950c1fe35ffff00c6f3ac6d049d8a545f6e7650cdbf1","ssdeep":"","tlshash":"d6d0a98cfcfe92000673b6f90c3b1808293a70ba371b5698b16c18a01fe9308002a8a8","size":223,"data":"","first_seen":"2023-03-13T11:19:22Z","last_seen":"2026-04-24T23:32:40.928905Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c79629d68a7b29647fdac41eead3f281","sha1":"34527060097fea82c1985a2d2634f835219b8104","sha256":"fa5b0bc22b60d0f56f46a04646e67a96fd4850980905c7cccc40df421523eb0a","sha512":"ffb7f1007bf7db5b217f09ce63bd1581a33d650cfb39c5846f9ec97a691382e60c7c015e496c042df90202725e08111bb89f201723fae6a9c277819e42527c32","ssdeep":"","tlshash":"a0a0228afc0880a0823033ec020e800038a2080b3fc0c000e8c000b0a88ab3220a2e08","size":63,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.929663Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery.form.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","size":43811,"data":"","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-04-24T23:32:40.881255Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ebe656b672dc45f63014175b5207825","sha1":"621e3b890a2c09ab7989a1e5c62239f3fd56981d","sha256":"f512023fcc0115929ebe626239973fdab1ebdb39df4f3134f6ed1fc049799c98","sha512":"09f5c0b01e79e049dd34723868b25ca88b0e62c2a2e0ec9948e9a073fca80b308b88b39646eb577341a4c53486327fdcbd189947753013025ae0f50b6b3cd9ef","ssdeep":"","tlshash":"3fc08c6cb462c90803362c308b3f9a4c1a9d3967e54cda8831154888eb74acba03b4cb","size":163,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.930225Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e84512b176882f7bf446a6f887f398e","sha1":"791db523e075f754f9d5e713d7b2aa9c9536367f","sha256":"93ffe629bab4886e36abd42d80d6730bebd76b0dd0c91c802eeb869de2ece7a2","sha512":"e0ef6d8c582fc189fa4c0223578aa6bba7eb05e7bd6412afcd36b9a3c820582d9347faba3047d7fd696cd9fc4c4b3d361dd0bff7f5500dcdf90c1638bbbdd9e4","ssdeep":"","tlshash":"699002087dd89080402634ec491f00085d225685304e550518815ac89f25619445170c","size":51,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.930743Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d319be03ef0d4cb95c5c38ae608ccc10","sha1":"68e104ecfb6753accae00c6b43501a73e99ffc4d","sha256":"279619ac6bba4754c3348e161766f8d7b57e66352eb92568f25dd1ee0200d926","sha512":"7fca0bab37c28899ebadd366186bd044e2db57d1bb316450a6994c515f2ab59d738fdfb9a09b6371b217e7a7f11412342632a12615da8533126d6bce3db3113a","ssdeep":"","tlshash":"4690020664015100463416e96586faca2a91d16600210d61c5cc44a504c00618711bc8","size":54,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.931591Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery.fittext.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40635054e327b749517fbfc876906d27","sha1":"ed913a5402b9eefb57bf8c869f6746bdc1d264a9","sha256":"c499a934a3a4111346993c847d1b0ecd309295fb2d3f0e57b9d44ecaac732e17","sha512":"cb5c9f5d6bdb5e0828b3583c6d986da6b95ef56763910b56ae49594244e9b2043183e6f981d7a58c9f88ea2b240eadf0e79ae7775c7a6ba5bec47c0066ecf5a1","ssdeep":"","tlshash":"d211c29e387525203a1f67325b9f514cb620c6836676f400f48e43c4afd1819596b7d4","size":1074,"data":"","first_seen":"2023-03-07T12:02:58Z","last_seen":"2026-04-26T10:02:21.77717Z","times_seen":855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/slick/slick-animation.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"993930401917e0f967afef1fe6138f7f","sha1":"535f6e1f2c002576d1107b567489188870dbdcd3","sha256":"1138fb0dac3902beb24680d9e7a7083a58a6683bd5c4b98577a5e1dbc023d963","sha512":"b28c217fb1ee2e244d7f4d644f5c1f82d04c37980f4c56fb37920d40d8e08caebaa501205fda18b37b484c04d459a77294749d2a8e2a4b01dd526f6f6e57e586","ssdeep":"","tlshash":"d631998c7c4314a2a39706f7001f2058467369e8e9344b5aac6ed8bd06ad42c7b5bf7a","size":1774,"data":"","first_seen":"2023-03-07T14:51:09Z","last_seen":"2026-04-26T03:38:18.757621Z","times_seen":761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/particle.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fea79b611e901ab1752082da00d9800","sha1":"3bb3b4612fcb3e3d218c4ccb212cb5ebd56ca6df","sha256":"01c680c92dac220fa46e54485a5706edc29702c10d3240b4daf4a62abe8f6eb7","sha512":"d2e35b82106f1a83c36299ecb9d90f541255367385a9f44191b39772d6ead7b8ac8332f4e758118f3ef6a0c15d871daaef85252a4a78fa0961e2e2eab96e7980","ssdeep":"768:VJuZaeTJUI8t3SGbbtMErGwuYgU6vWB0qQGuhsxrOJ2Lk:KZaeTJB8t3SGbbtMErGOQ5hUrOJ2o","tlshash":"6af2311e52f22d3a63b6f3a08eddc110db6761a7278208b1be3c52689f3545253adf64","size":34844,"data":"","first_seen":"2023-03-10T22:28:39Z","last_seen":"2026-04-24T23:32:40.909705Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6efcdfc2622e7f12b24328bb00482208","sha1":"b6f189f13dfcba484b686ebe905df3fd5776fb47","sha256":"5cc6b1aa2ef7d3dae8bb328a97970f613477c5f67dec5456498fa5a7fe993e98","sha512":"8dc13c864628266483957a596ae77ba99753fd82bd291d294031e741c31e775e8d28867dea5f48149c4eaada3c2784334e742c7314a0b89bea4d0d99eb573dae","ssdeep":"","tlshash":"898004503714031c45fc114d1d55c4d0100401d411045550f57714c104d0131054d0c3","size":38,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:55:52.013614Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c747679c2f3aaaefc91e862a8593065","sha1":"aae7f853361c3527aaf735d8a4388b788a79bf33","sha256":"a48a130a47ff79e045eb542ec0244c5b09c85e67ed2208c4bf7bb7fbb7b1280e","sha512":"09d932b177f6e0976bc123f6cd3256cee3d2dd49501ffdf8a77cb98d6f7d3760b53efe2d914049a8f503b9f3b16b098e60929c28a9cf23200424f7abac6a41c0","ssdeep":"","tlshash":"58f0ec51f8b94e22747431224b9f05c9d7d665bf83028c5d72ad64e59f40d2c541a0f6","size":460,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.932781Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/slick/slick.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99cf8430b8d81c268269760118ec31a4","sha1":"3fec23eeb6e45407f1fa1d38cf1cd3d463dd1f7a","sha256":"430f384b0fc496d9650c747cca458a7eae062530c718aa7a896d99031fbbae8d","sha512":"2af966001fb0c74ccb4117bb842173070c9a53f02f6f03e8260c5f059ea0f9917d301318e18028dfe0727171f645cf9f0cf6d9d1f26c8b701f393990619127f4","ssdeep":"1536:dXnrWutGI2R7H+e4yMibroAOGJATcY4sWlgN:dXnrlGI2R7H+e4yMibroAXJATbN","tlshash":"5283fe0b55e6131684a731b96bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","size":84265,"data":"","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-04-26T09:24:49.805866Z","times_seen":5729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0652da382b6fceb033dfe2b6c06d4d11","sha1":"002da8cbe90fcf32fbdebb72386125079e3805ee","sha256":"7fa0d5c3f538c76f878e012ac390597faecaabfe6fb9d459b919258e76c5df8e","sha512":"b329c7b3eacb836583544f54d281d52544430a2a9fb7ad06716396eed5f24b2f2822bd078e5dcaf60bfb06afe04a3e0d0d5a5ce6f9ac364306189eadd95a5430","ssdeep":"1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTdl:fY8MaW2b+UELKTqnAdiq","tlshash":"6f9308ddb1c5b02287bb71a950af540bf236195e280c4450f268d8f9fc74a4ea27bf6d","size":93068,"data":"","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-04-26T05:02:28.474554Z","times_seen":3936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9bb145fb4d2729f076ae7f1fc9ba09f","sha1":"075959d7928cee4c3b3fab2b31f988801f32cc52","sha256":"a0579f32134cca24c67c2f6d4502633e5ee6ef3dd78a85c1faa83e06ea4876e1","sha512":"f6e6b83a150ad39b682e37490bea8c2ab70595cdfddc7b46ef5555ae805529531725710038fffeda4b08af73c3faea8605574f06714e5076fd9c097c4bbd5295","ssdeep":"96:CnEvlc6l7fMlvI0G2xljlXrUKA/C4oX2yohpVA:CnEv9dfM/G2xltrUn/C4q2yipVA","tlshash":"baa1cf45fe8ce4a1c2bfd1631e9a0288d1bd22b5e001dd85392c9c8d5b91d28966ef7f","size":4824,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.933396Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery-modal-video.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"112016654b5abd2be1fc15ed3d9e2d1b","sha1":"df060208f9f93bbe68430208b48441afcae40b72","sha256":"c2d2256172b7e7b9fb65f534cee912887b442a9aed11b6c47e4cb8c2693cd3d2","sha512":"e2139e60ede267a9eaf0d3040e16a16677f011e95304f9eec30f09768ce37247e7b9283cf51f132d50f4ff58dfd45eee42b20fa60c067326195028f1440aec42","ssdeep":"192:DGK1Z19TRXnRkq5YKWMKJr+6cmGXwE3ztZecGmU:DTr/4MKJr+ZpzxGmU","tlshash":"c4e1194532b0b8f7599b24f5292f980ab1372a9be44ae5e0757fccd05fa4c4f1282f64","size":7387,"data":"","first_seen":"2023-03-07T13:23:23Z","last_seen":"2026-04-24T23:32:40.907247Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/new/js/jquery.fake-notification.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe98987e8326587807d92e4317477e92","sha1":"c2c1a540315515df7b62c59133bf526a6f1be1db","sha256":"4f6e4b88a7e598a9940b6e555a9014cf118a4ea2e064d7408e3e47feb808b4e4","sha512":"4a05a4246cbc87f321f70a0a28727ccc7b9c1457960ebc47285c0d6b72e066787c81c66457bfc547e37ea5bc5c813d229cb5c88881e8dc4e3be391a40aec70e7","ssdeep":"","tlshash":"7f7152df2211601e53d7d03aa9dff4c44632161ecd46066a291ad06e9ae577c639ecc8","size":3574,"data":"","first_seen":"2023-03-07T12:09:44Z","last_seen":"2026-04-26T05:52:20.211508Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0da21925703de4ca2a2993b2b634a31c","sha1":"95139ae3da5f0a15b7cac56a44bbacc52a9d338a","sha256":"5af8267bc2ab39e4490024cbe3f02e0fd057e3cc3b70caf41cee5d3bc6ac0813","sha512":"397a0ed6d4382a3f8516f8ddc76d8326092d0d5c53e0548227c25c5c3a0f8ff6b28b6f634ca39f0a72de7ea15f3c45db9ddf2b230d37e74fd64eae768f45cc57","ssdeep":"","tlshash":"18014913d964503a8657211b8d6fe2032bc3b0537c4e7a96f5c422881f0e12df2fa5e0","size":661,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.934003Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/widgets.bitcoin.com/widget.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b77a9c0e62a93582e983ce237bfc6f5","sha1":"12344b2b6c0d96c147c085c1b068022f023f4d03","sha256":"68d5e95132af0204557c423980e263343a5d73ada03080675e314b96343cc2d3","sha512":"be8fa48aaef84f2816df51b601490b64d324deecf25c24ad161fa2b6a4f788fc2e567fc9550a43de3b25b0293673f53716b9f537e4099a4e976ef758f947ed53","ssdeep":"3072:3b59vEbxata0HKl4OYSZE9yvtOI8xed5tqre8s:19vEgtZH6VZE9tpsvqrbs","tlshash":"cc241bcdb5d2b02243b711a4006f460bf2792859640e8898f268e8e9bd7cd5e617bf7d","size":216474,"data":"","first_seen":"2023-03-07T01:20:32Z","last_seen":"2026-04-26T04:24:29.460806Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"65cfdb39f6e6a623d2a5cd7b510d801b","sha1":"84adef795688f0752de815739ab0ab0da0debf42","sha256":"8acace15cff4453e300c0b8b34526b8c30809ef7464c3516017cf735aa0d9c96","sha512":"afa6d3025fab8ac4bb7e25b2e103e73d2e7ef6f25b5631691bfc3fdfb86fd4ca978528ab407d5a16da2e6846c1778f8906af7a0df40c0450dbf4be1a32dad510","ssdeep":"","tlshash":"71d02e2895904002a0bda020cf3b235c131830a9f25b0b4a0004ace87ea913aaa61acd","size":250,"data":"","first_seen":"2023-03-10T22:28:39Z","last_seen":"2026-04-24T23:55:52.016654Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa7a53ce087cb67f3a01174df473e103","sha1":"6a0009ce914d281d776436468ba5237d3d4d560d","sha256":"04cea3df7bd779de9fa2d333f69521b69f57eebd486ec255a38ba0bd95ee0084","sha512":"f82cc3b7450f4a63f45e12743a893f50306d3fcae2ff55804c1905b2b44d34029ee10747c963d8aca98d5d60b4a8ee0b8584ab69c84c5b27d18392880f32150d","ssdeep":"192:YTGyGf/DndaSKOnkWcq1zFsUHBIcNEHDi9GrspEhcAwvWQ:YTGyGf7nj3nkWcq1B6DqGgC4WQ","tlshash":"3f32a5e9fa34b83e52d98566303a5608f3273d5cf206a5e8b6a0e8c015bcdcd5522f7d","size":11797,"data":"","first_seen":"2025-12-19T04:09:52.078713Z","last_seen":"2026-03-09T19:14:12.101402Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-26T08:22:44.617681Z","times_seen":2828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec1ad382dcfdbd07245811a9c8bd8897","sha1":"8469cafb4d87a8064c2de6e17a6a8141e5342391","sha256":"d44458e930bbbb0ae91a2a753164a7855e50a9f5a507ca84382bb6a30bf678e7","sha512":"b23914fa829a3ab779bf009fca02482f4423906b7b3334688d02e6e580e0d342e8c0dc46b029b34f19403595dadc6751fbff2f4fee515db52bb8e29b2811383c","ssdeep":"","tlshash":"9221636626707dbac153b082a6bdbb0314355c3322222da3d2fcc9bca5fb96c2315587","size":1149,"data":"","first_seen":"2023-03-13T11:19:21Z","last_seen":"2026-04-24T23:32:40.935129Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/select2.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b848d65128492980f9699ba74871e0a8","sha1":"690495f55749fffc77c8c4e2e81db886e2cd350d","sha256":"185fb3c656a0e6732d3c3298b856ede02d9a5a930c182c8edc6934b7aca4976b","sha512":"1b013c66ea454b6359821a50523abc8c30025de216cc81de93dba9fd9c8d8068632baf7176cfdf670dbc1db52bd94a2cc49ffaebfe7b17e518e3ac41e488d28e","ssdeep":"768:f2oLNdg5pTFxxoiQduQLCyXiXCYGbk0QTeeUBo47RTeqX5+nZprIf/ny0RfS9KH+:hr2xOiQduE88QSkqJKHrAvf2KHHe","tlshash":"a273c94db953723545bf21e6607f010a723a9b7e600589acb468c9d879bfc15322bf3e","size":77456,"data":"","first_seen":"2023-03-13T11:19:22Z","last_seen":"2026-04-24T23:32:40.902655Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e35cbca78af53422f8a88acc5893c623","sha1":"06cdf0f52c2c63762744b09ffff3ba55ff5d90ca","sha256":"4414b924b80fdb4028047c3d7228ab13ab5ef0d007ce0fcc5801aa21bdde0eb7","sha512":"0d55c60594fd7868ae3b7308771b7d7a7e40666e8c7290afc9facfe2292f7e24c1f6f9d3610aaa1882bfaa520f1c299ce9ae7de63baed09eb3785066ff96d3f0","ssdeep":"","tlshash":"4be07d06249a185c02af1037572ee20c311a124fa8048d60be8e85145f30dcb14a929d","size":308,"data":"","first_seen":"2023-07-11T23:31:47Z","last_seen":"2026-04-24T23:32:40.935656Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa7a53ce087cb67f3a01174df473e103","sha1":"6a0009ce914d281d776436468ba5237d3d4d560d","sha256":"04cea3df7bd779de9fa2d333f69521b69f57eebd486ec255a38ba0bd95ee0084","sha512":"f82cc3b7450f4a63f45e12743a893f50306d3fcae2ff55804c1905b2b44d34029ee10747c963d8aca98d5d60b4a8ee0b8584ab69c84c5b27d18392880f32150d","ssdeep":"192:YTGyGf/DndaSKOnkWcq1zFsUHBIcNEHDi9GrspEhcAwvWQ:YTGyGf7nj3nkWcq1B6DqGgC4WQ","tlshash":"3f32a5e9fa34b83e52d98566303a5608f3273d5cf206a5e8b6a0e8c015bcdcd5522f7d","size":11797,"data":"","first_seen":"2025-12-19T04:09:52.078713Z","last_seen":"2026-03-09T19:14:12.101402Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66d457235701fe212074bdc10a7673ed","sha1":"09cd141c5e3cd69b01d458c3b795c8a5a636e7c8","sha256":"5bbe89c0f402ab923ffb69b9d71b860539ccc404a4a91cd4c768933fa76f2e08","sha512":"8de6c5bb13e93a0c5d72a95d0c58a42f6f2153ce2a72ee52e128305e91f100296986884c3af3c21b21cbd9d3236198aaedc5587723c8cfd863acaef40756b7b3","ssdeep":"","tlshash":"3a11c2dbb25ca04d0f937535462f2d55eb3f027c581b12a6376b683c09ce62c5347852","size":1059,"data":"","first_seen":"2026-03-09T18:45:37.845876Z","last_seen":"2026-03-09T19:02:52.485105Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery-ui.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab5284de5e3d221e53647fd348e5644b","sha1":"75c20acdc6cbc6334fe2b918ab7afeec007f969e","sha256":"4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d","sha512":"2462acc237c0063263b52527cfecbc5d4063065c0cd541cd966d9924dec0d9af475184f732c92af9269cb08df993896893eff37ad4b18598ca4b7af7b5f02742","ssdeep":"12288:1vemHFgymzYDdHCcmM2/W/CCeS/QRzbrVDDdRO2:vDdHCcmM2/W/CCeSIVDDdRO2","tlshash":"f3b4a6c9f39c266a867a32595c2e42cdb23c8075d600587fbc5d59dc29a883c43bbf79","size":520714,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-04-26T10:57:45.776729Z","times_seen":14363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ftrustinvest.online/images/912465.jpg","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/912465.jpg HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 181195\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":181195,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x810, components 3","md5":"b92114d251928b63dc6ad5ffef6f9a35","sha1":"55a84e760113f8cc00d3dfded50b35014b938505","sha256":"a64b5e86fe9eb98e0263fe09feeb165fc0896505f4f2dcacb00cbee25c32c5b7","sha512":"f9ab4d71e4aa2e6b71be3984811f84e1179dd3bca672a2b55e4d7a1073713542dfd6d3e69f57f023588962f7d0222f29d911d9b530b151948fc9db60bdace3d8","ssdeep":"3072:T9ux8ALm5a32ZoMZedA3AXPOeXIQdBpPf3DH1KNvuUEOwkg2FhTz34TSfS8:IxRmaJME+3EcoBdL6kOQOZz34eff","tlshash":"520412ca501bbd8d808f713bf8331384afd49443fa5c1cbb99f8477e6644a5838daa85","first_seen":"2025-08-09T18:25:52.671037Z","last_seen":"2026-04-12T03:03:56.195175Z","times_seen":16,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/5511597007223.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/5511597007223.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43867\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43867,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"47089e1ad89e0a1719166cbf8d47488c","sha1":"5a9bbfd506fc4e4616713f6719ed4577dff79652","sha256":"2ca4851a098b92a17917363d02500c334f82df88757523fa067269f408cc467a","sha512":"8adc3be6abaca453b8ec92cb1ba4cf2d33fc8148761f37172f597a08905c166532340cc9144831d23391710d463a76da9ff14f478d153619500ce915c9661bdb","ssdeep":"768:e+WI8rWcvMGwIkxW8In8ZpulrGnDrDNgwunKa0vqefPouOIfL+XpNHabiHtcSryi:e+WI8ZwIkvydGfkKhroCj+KbiHt9","tlshash":"6c13f196e7cba7d4303d04f0070a698bfdc5584e79dcf05069e161ae76e9a0ecf51b24","first_seen":"2023-07-17T18:30:40Z","last_seen":"2026-04-12T05:36:19.951491Z","times_seen":43,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/ticker","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":"Blockchain.com Group Holdings, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /ticker HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ftrustinvest.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9d9c3c2f1807120a-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: origin, content-type, accept, authorization, cookie, x-wallet-guid, x-wallet-email, user-agent, x-app-version, x-client-type, x-device-id, x-signature, x-hmac-signature, x-auth-client, cf-connecting-ip, cf-ipcity, cf-ipcountry, cf-ipcontinent, cf-iplongitude, cf-iplatitude, x-real-ip, x-payload-digest-alg, x-payload-digest, blockchain-ipcountry, blockchain-ipregion, blockchain-ipcountry-google, x-campaign, origin, blockchain-auth, blockchain-origin, blockchain-csrf, accept-language, x-agent-id, x-session-id, x-sofi-jwt-aes-ciphertext, x-sofi-aes-iv, x-sofi-aes-tag, x-sofi-aes-key-ciphertext, x-datadog-trace-id, x-datadog-parent-id, x-datadog-origin, x-datadog-sampling-priority, x-datadog-sampled, x-request-id\r\naccess-control-allow-methods: POST, PUT, GET, OPTIONS, DELETE, PATCH\r\naccess-control-allow-origin: *\r\ncache-control: public; max-age=60\r\ncontent-encoding: gzip\r\ncontent-security-policy: img-src 'self' data: https://blockchain.info; style-src 'self' 'unsafe-inline'; frame-src 'none'; child-src 'none'; script-src 'self'; connect-src 'self' *.blockchain.info; object-src 'none'; media-src 'none'; font-src 'self';\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: price\r\nx-blockchain-cp-f: 04z6 0.005 - 4d9933c5a36a61f3f52cb4b988fc746b\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-ms: true\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-original-host: blockchain.info\r\nx-request-id: 4d9933c5a36a61f3f52cb4b988fc746b\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 09 Mar 2026 18:45:09 GMT\r\ncf-cache-status: EXPIRED\r\nset-cookie: _cfuvid=CUW.HnnwetkAo.MqijuCoCDA4uJ.bDFw4DGRBQZ0RzA-1773081909763-0.0.1.1-604800000; path=/; domain=.blockchain.info; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2763,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"55d4b63e5ddf9009cb92b55478855118","sha1":"c984dbe8cab90222cdfe37b3541e5d78cd18b8c2","sha256":"c7174683574e9803a126015dffec6f20c22d94ff12d3ef99513bbf3c6210ea66","sha512":"f84987f4ea380e87e57f6fa7ddce901ac52351afa23b247b8986cc7b7b2aabbbbd29b34b8f548951f2ea1593f9ca8e503cdb6eed88aa27b7e901dbc839fe3b73","ssdeep":"","tlshash":"44516803b2b9f6db162cc4e35d19a6d804f9231f86a6018df4d030d9d28db98762fb38","first_seen":"2026-03-09T18:45:37.70157Z","last_seen":"2026-03-09T18:45:52.929365Z","times_seen":3,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":52,"dns":37,"connect":1,"send":0,"wait":155,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/1532345115h7.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/1532345115h7.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2617\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 97, 8-bit/color RGBA, non-interlaced","md5":"0e91475b41c30343e41037fb236bb160","sha1":"59df634a0bfa11b7976960dd8d15954ba8553cba","sha256":"9ba9d895b64a52ba98b8fdc50a04685c8632d80fc7ebb4d4d282d33cba260b34","sha512":"00de32176db6ba270cca062795fa74b97e65c42683a7d12147e8422884bbd70d4d82437eef1cf05254865b44b79c9cd03ecf92101e8a8a130d67c801aa42c03b","ssdeep":"","tlshash":"ca51f84fa38170f2aeaed490ee4f6efc39564400104b6d04f6578e5131b8ccec4ce868","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-24T23:55:51.90887Z","times_seen":159,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/translate.google.com/translate_a/elementa0d8a0d8a0d8.html?cb=googleTranslateElementInit","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8a0d8.html?cb=googleTranslateElementInit HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 31 Dec 2025 10:40:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 797\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2588,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1596), with CRLF, LF line terminators","md5":"3918b2ca0e5a105f3ed520012a87f8ab","sha1":"a7de1626526c8679385b82dd2392c531d9234be4","sha256":"1f045bfb0716f281eb80cc763fd4c37a5bf7d54b92a2e5bf91086875a51c8f7b","sha512":"35c08574f77ac498ec52295833614c68cfa3fc0e475bf37399ba686c2726ac8d6e9e5ca3c9c5d3ce98c3c352cf9468c87e3a635921d404b34d6c589f3caa85be","ssdeep":"","tlshash":"0351a7bb3d9a10af282bc0e1d0d3154872698d80b275dfd9774cc63efbd9a4920355c5","first_seen":"2026-03-09T18:42:19.163142Z","last_seen":"2026-03-09T19:02:52.340655Z","times_seen":4,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/payment-options.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/payment-options.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2658\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"14bb6b183271d05eaaa1f79c4a1b0b2d","sha1":"071d0eb2a752e18645e4c58ecd304ea050fe8358","sha256":"e6e672bebf8bdff4e7964275033c6c65512d5c20a483bf32942830805fe3734d","sha512":"6a892bc7f44df2f8032d088e01afa281ec31e44cccaacee57fbd0d650896ee60ecd7ea1fc1fb4daa336d96f675d246cbd24613da6a872f0bf3a6c97980ab09b5","ssdeep":"","tlshash":"72513cc9f134a4419908e7e23ad3b012b348058097cd55beedced80a4eba1a34a191ef","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-04-24T23:32:40.92315Z","times_seen":289,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/high-liquidity.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/high-liquidity.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3013\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"001e9c56a2141a9a9cfff2f2345b2b7a","sha1":"5f6ea2212fbf46397aef52d60a4f7066f13bca43","sha256":"69d8f05bf7d183bb934370c75eab1cd74480582ff61df2e4b1fc68cf15c05931","sha512":"0dca22014145c4db891b0c84fa7bc719df758dd1c08b11782418822cc87eb9bfa3ab118b577e38a3aa12fcbea907b8f2d1044cb63c23c4921e90528e26ee3b6c","ssdeep":"","tlshash":"c9513a4ee9545402829cea8b98f39117c72efc00a6e0a199d9bfd8129874123610c1af","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-04-24T23:32:40.881971Z","times_seen":288,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/css/ion.rangeSlider.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /css/ion.rangeSlider.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 746\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"ebeaf8ee0e04d67d172ee639713fad1b","sha1":"81dc58f28df7ca458306d493ae9c78c8450d48f8","sha256":"e5ce02a6caedb279a23c84d2f04055f556fc03a44f3fa6f92f038288fbc70484","sha512":"af5caa3b30e71adbf92d03500ec05c2df30a843452b62a98fd6804d0b9c255f97ddf2df8d982b9cf4f4766f718b33c7e210efda23af522a8c7638ee03b9d6f63","ssdeep":"","tlshash":"3d619b195da31640780af6f06f967b9e7630b00fdb07dda87e4d6204cf4b389a692f91","first_seen":"2023-04-07T11:16:34Z","last_seen":"2026-04-26T09:01:39.829194Z","times_seen":741,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/css/ion.rangeSlider.skinHTML5.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /css/ion.rangeSlider.skinHTML5.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 787\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2881,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"7527c2a31899e27ddbc0fcba8dfc3b8d","sha1":"2bfe9183e5bb96bc47182777db08e6b21b5feee6","sha256":"1c66f216c5a9d7f0302d8fc6f081e44405b1d7b0365b802bb03356647da46c49","sha512":"fcf4dea5c2515fd8fc549848e155dd01df6ece39e49e769ba75a1de5bfadf81da1f6665c14b3a5c05c2973dbe1fbed9b4cc2b6d8bbc330b2daadc93ca2df2ebc","ssdeep":"","tlshash":"67517af2ea6f1c897511c1e03755ceca335a794f9006e9a9fbec756c5f013c4a4b1908","first_seen":"2023-04-11T04:10:40Z","last_seen":"2026-04-24T23:32:40.924752Z","times_seen":190,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/widgets.bitcoin.com/widget.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /widgets.bitcoin.com/widget.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 68504\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":216474,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32041)","md5":"4b77a9c0e62a93582e983ce237bfc6f5","sha1":"12344b2b6c0d96c147c085c1b068022f023f4d03","sha256":"68d5e95132af0204557c423980e263343a5d73ada03080675e314b96343cc2d3","sha512":"be8fa48aaef84f2816df51b601490b64d324deecf25c24ad161fa2b6a4f788fc2e567fc9550a43de3b25b0293673f53716b9f537e4099a4e976ef758f947ed53","ssdeep":"3072:3b59vEbxata0HKl4OYSZE9yvtOI8xed5tqre8s:19vEgtZH6VZE9tpsvqrbs","tlshash":"cc241bcdb5d2b02243b711a4006f460bf2792859640e8898f268e8e9bd7cd5e617bf7d","first_seen":"2023-03-07T01:20:32Z","last_seen":"2026-04-26T04:24:29.460806Z","times_seen":131,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/fonts/museo-sans-700-italic-webfont.woff","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /fonts/museo-sans-700-italic-webfont.woff HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37730\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37730,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37730, version 0.0","md5":"8eb5d4d2940ab46ff33fd07e1072c286","sha1":"e5dbf9a65fd8a3f4918b0eccd277f3a42ec621f3","sha256":"7a9d72abce9a1f581c7e895ac4949a019129593311d9c8285cec7b5e11128e50","sha512":"e0806b95c5edd3c6910cd544b467110885105b8fb1ff6425c64a45aa637498be0d0bdfa4b1a2f84aa19f19fd9897ee68d55896ba2d2f680a4fe4dc48e4695222","ssdeep":"768:IwLnWoS/A7cSINX5GATQSypTAwoElMV49QRb:XLnWoSP57pEATb","tlshash":"e903e06d7c9aa83dc69278aeb01eaabcecbac840f78f441116c3d54945ec19492d90e3","first_seen":"2023-07-17T18:30:40Z","last_seen":"2026-04-12T05:36:19.964522Z","times_seen":75,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/5b55bb652af1a.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/5b55bb652af1a.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5617\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 98, 8-bit/color RGBA, non-interlaced","md5":"aa54e3f653a0e65d03e0f57b5104f885","sha1":"d922ff4b83d97a520bb74d915f2d4cff9a77733c","sha256":"ba9da982836bdc4e784fd37726fafc21951ab8c405e6ccec262af39d77cfd72e","sha512":"ed59631ff89a4ba5a3c684b4b22796fa1063db9b471e00f507ed33cbae5057aa1f57f2bc86a174836a7f3e58066d07c90c944e8894ecba1f107610eb59e85e20","ssdeep":"96:SK3hOG0MEQGpjjUDf67JoUDdS7iA/V4t+9O+g66aVhIKoQEZtk3vQrAiJuE6u:SK3J6jUDi7JpwWAN42zg66aV+7PG3vC5","tlshash":"e0c17d5722d0cffce17a17e453110ee77c621d98a292d5813a73e05aa59fa9993003d8","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-04-24T23:55:51.968436Z","times_seen":187,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/css/main.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13840\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2612), with CRLF line terminators","md5":"29c9d841b62ba19ebb24e8676d9f8e14","sha1":"36bac8727259576d8f1b79620151bf421d3b3b7b","sha256":"14a54c4f8e9975654767242b325cd80cabfc849da362bd474017936d2b3231d9","sha512":"2be9754b1167de119cb42cb8d08ef3b1a525c6777975e272bd8df28cc16da09ee6883ea57f4f90ed143f833205a4b0a9260ea386b286a0140aa11bbb4ac2e502","ssdeep":"768:ITjEWEEIkwfJ2JcpiWzsv1Plo40PO1ZiEesTR5Rtsp40//7biuiWDABP8MsYZGFf:UQjPYWz01tFiMftaGOmm","tlshash":"9e63d8369644224d633bf654f7f18b65ee7d0023ab0b09acb7947720d7974ac62b2bc4","first_seen":"2025-10-08T17:53:05.096963Z","last_seen":"2026-03-09T19:02:52.393556Z","times_seen":9,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/logo.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Feb 2026 06:41:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2089\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c150be1cfa2568bbe71fdda8b0a8a191","sha1":"b26fed333fa4cba27f9e934bd378e12a2ec41797","sha256":"079469a1541ef59c4b3d38e19bf575f8f1874d0d6de19409e6363931cfc70a5b","sha512":"f3426e37d6c3b59c5dc108323b5db3fae5f9b3ef34b3643aa0bf10cbc92774075029c9ce9db1c06da37a6f85fc345a19e896a3dd774b00c3b24370c4764afc27","ssdeep":"","tlshash":"8241b5ca9af0c985cf8201507a9268d19c3ba717d1a3c4833a8bc0e58f24ee4d42dbd4","first_seen":"2026-03-09T18:45:37.727541Z","last_seen":"2026-03-09T19:02:52.368704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery-modal-video.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/jquery-modal-video.min.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2798\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7387,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6591)","md5":"112016654b5abd2be1fc15ed3d9e2d1b","sha1":"df060208f9f93bbe68430208b48441afcae40b72","sha256":"c2d2256172b7e7b9fb65f534cee912887b442a9aed11b6c47e4cb8c2693cd3d2","sha512":"e2139e60ede267a9eaf0d3040e16a16677f011e95304f9eec30f09768ce37247e7b9283cf51f132d50f4ff58dfd45eee42b20fa60c067326195028f1440aec42","ssdeep":"192:DGK1Z19TRXnRkq5YKWMKJr+6cmGXwE3ztZecGmU:DTr/4MKJr+ZpzxGmU","tlshash":"c4e1194532b0b8f7599b24f5292f980ab1372a9be44ae5e0757fccd05fa4c4f1282f64","first_seen":"2023-03-07T13:23:23Z","last_seen":"2026-04-24T23:32:40.907247Z","times_seen":216,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/5761597590797.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/5761597590797.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 61266\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61266,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3f9f8c7bbd46ac95aded8f8eb4019cca","sha1":"b0189916ccd33a1a304a3fd66741e1f393d4e51f","sha256":"cb91cb4c745853de2533f1d8dada1d886ed8994a38262896509863b270af9ea8","sha512":"6ff166ad1ff67de4ed0b57480397c59fda7397cc3c6596a5f3a4674be3852699cc736e1f57d80abe1facd0dc4762b76def97cdea6e48308c4718ab99cf399948","ssdeep":"1536:eQAuc//Dr35z/6Tp4TvYyINRGlOCvV0ljeZtMZ:YhDT5z/8Ovcy1V0ljeIZ","tlshash":"bd5302de8bab0e51ff1640f75448ac170aeed593b40c95aab3edf400b9a54075c8c6ee","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.976551Z","times_seen":47,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/6961597006775.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/6961597006775.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 46436\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46436,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"223d0068c3f6b44c998a600c9d4152c1","sha1":"346ec567eba49724ae5953cb58df6cc799bb074d","sha256":"804fb0d577009621ab9e926bbe887016b5c45783630d30d28348251699a3632a","sha512":"14b0bfeac1a27ee5a348a15ac719ada9668d3bc6468fc1b7c7ea21c37cc1870534cfcf07c90121e4f10a2253c0678a3225fec52e87c11813be7a1c466afd5a54","ssdeep":"768:ecYIHz2XEyjMf8pMIYlI1WWpcs1v8nLnKCPtTRN4w1JEysPm7ohJCP++Pe+zqGBy:ecYITCEyIwMIYlIIicE0LKmRN4WJwm7S","tlshash":"ca230236eb8cc089b70e8e636e00dcea8c903914ad87d9fc9f5b49d2e5d078566857cc","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.923431Z","times_seen":44,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/select2.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/select2.min.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20155\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77456,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62922), with CRLF line terminators","md5":"b848d65128492980f9699ba74871e0a8","sha1":"690495f55749fffc77c8c4e2e81db886e2cd350d","sha256":"185fb3c656a0e6732d3c3298b856ede02d9a5a930c182c8edc6934b7aca4976b","sha512":"1b013c66ea454b6359821a50523abc8c30025de216cc81de93dba9fd9c8d8068632baf7176cfdf670dbc1db52bd94a2cc49ffaebfe7b17e518e3ac41e488d28e","ssdeep":"768:f2oLNdg5pTFxxoiQduQLCyXiXCYGbk0QTeeUBo47RTeqX5+nZprIf/ny0RfS9KH+:hr2xOiQduE88QSkqJKHrAvf2KHHe","tlshash":"a273c94db953723545bf21e6607f010a723a9b7e600589acb468c9d879bfc15322bf3e","first_seen":"2023-03-13T11:19:22Z","last_seen":"2026-04-24T23:32:40.902655Z","times_seen":149,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/new/js/jquery.fake-notification.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /new/js/jquery.fake-notification.min.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1151\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3574,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3236), with CRLF line terminators","md5":"fe98987e8326587807d92e4317477e92","sha1":"c2c1a540315515df7b62c59133bf526a6f1be1db","sha256":"4f6e4b88a7e598a9940b6e555a9014cf118a4ea2e064d7408e3e47feb808b4e4","sha512":"4a05a4246cbc87f321f70a0a28727ccc7b9c1457960ebc47285c0d6b72e066787c81c66457bfc547e37ea5bc5c813d229cb5c88881e8dc4e3be391a40aec70e7","ssdeep":"","tlshash":"7f7152df2211601e53d7d03aa9dff4c44632161ecd46066a291ad06e9ae577c639ecc8","first_seen":"2023-03-07T12:09:44Z","last_seen":"2026-04-26T05:52:20.211508Z","times_seen":50,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/lwnj5meoqnctorwgrtlxhro6nn8ohdgr.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /lwnj5meoqnctorwgrtlxhro6nn8ohdgr.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public, s-maxage=480, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLEIuV7rbPu%2FtIWFilo71vx%2FMTv3jpSKRJYZnZ1mh%2B270Qwt6iX65TdfmUB3SN7FNb4inHZAsaWJUh23EGHKD4hnlO3PMP5RZyVUyw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d9c3c28f8d8f375-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":11,"dns":22,"connect":8,"send":0,"wait":172,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/6981597591504.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/6981597591504.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54880\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54880,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"a87cc71469aee85bb4457d007edfec10","sha1":"e3450046096cc2cbafbe902f9c285f2f3b8ad9b7","sha256":"0aabaac0b2f0991616bb3bba95c90f4d7cc68011230fb70d3c8eeda372f5a0d8","sha512":"612bcf9bc500a139ce3229fa73f19d0eaca4a3f2c704368a2c314a1e4fee954a750c0efdd017da29f92b1a2b9a70367f59c7ec3c0474f4545ccdde5abbcc4579","ssdeep":"1536:eRiYWDodSdv2wdTyVfStujIL4KV1Z5kP59g+:wiDo8dv2wdTyVfStuC/IzX","tlshash":"f133020fa3d40184ef42b5bb4bd95e22c6c1980c6de2469e45c96b7cf327b04ec7a65b","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.901702Z","times_seen":50,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/1532345051h7.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/1532345051h7.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8640\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 97, 8-bit/color RGBA, non-interlaced","md5":"f42e758fa06d469ece0d4fa1fb8be1b0","sha1":"c36ff830a02d16038223b12dce64717a67564076","sha256":"4edc66873fd2660752f7813bd18189c895a83ee4466b15a5ad3449cd9a4290e4","sha512":"7502b94d82bdee0578c7fba42783c2a8405943904d815a5f185ba25770f3f886fddc0a3215cf24f2e5ab5a360fd63308cd77f1b2b9db0293eb8faa76f9869ee1","ssdeep":"192:hjwqBGZqa3ILk4YPHdiwqnwU7byXfoL+7dH1qG3eb:hLBaqaek4UHdivpL+hH1Beb","tlshash":"b502af9da0e09b644e6cccb1f32cc591e9b97756c230df0d3607b7a80b0378f54a66a6","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-04-24T23:55:51.91177Z","times_seen":184,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery.fake-notification.min.html","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/jquery.fake-notification.min.html HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 656\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1550,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"6243c84fb7dae82e10303cd041256e73","sha1":"b64d18e36d888421650de349a3f52eac18321da5","sha256":"23c038149f5a5e2b948cfbf51e2eb9d452d7d042e2ca19ffc73fb2468e92b722","sha512":"0bad4a225e7a42d199f4e6cba5c0db9c6d089e68e1ef100289a260b31dae5f4d05739c3aef710ebfc97dd30c7a369f05732059cd1f2d8886abe09671e2069c60","ssdeep":"","tlshash":"a931753ed2c2064a84230164fbc0ea9416798251a0860fe1379e756bf9cd1bb87977d8","first_seen":"2026-03-09T05:05:45.012238Z","last_seen":"2026-03-09T19:02:52.399388Z","times_seen":7,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.bitcoin.com/widget.css?46","fqdn":"widgets.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"18.180.147.21","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.bitcoin.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:FE:5B:1D:66:34:2C:8F:5F:86:06:FB:E1:98:C6:18:E9:6A:0A:57","sha256":"23:2A:07:D5:A5:E5:A6:62:FF:49:4D:A7:DA:A4:F1:CC:7E:15:C0:C3:DF:84:A6:34:50:16:9F:33:EC:03:16:42"}}},"request":{"raw":"GET /widget.css?46 HTTP/1.1\r\nHost: widgets.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: awselb/2.0\r\ndate: Mon, 09 Mar 2026 18:45:10 GMT\r\ncontent-type: text/html\r\ncontent-length: 134\r\nlocation: https://www.bitcoin.com:443/?46\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":2153,"timings":{"blocked":936,"dns":88,"connect":280,"send":0,"wait":280,"receive":0,"ssl":565},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.bitcoin.com/blockchain.json","fqdn":"widgets.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"18.180.147.21","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.bitcoin.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:FE:5B:1D:66:34:2C:8F:5F:86:06:FB:E1:98:C6:18:E9:6A:0A:57","sha256":"23:2A:07:D5:A5:E5:A6:62:FF:49:4D:A7:DA:A4:F1:CC:7E:15:C0:C3:DF:84:A6:34:50:16:9F:33:EC:03:16:42"}}},"request":{"raw":"GET /blockchain.json HTTP/1.1\r\nHost: widgets.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ftrustinvest.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: awselb/2.0\r\ndate: Mon, 09 Mar 2026 18:45:10 GMT\r\ncontent-type: text/html\r\ncontent-length: 134\r\nlocation: https://www.bitcoin.com:443/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":2108,"timings":{"blocked":915,"dns":76,"connect":276,"send":0,"wait":277,"receive":0,"ssl":561},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/fonts/museo-sans-300-italic-webfont.woff","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /fonts/museo-sans-300-italic-webfont.woff HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39606\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39606,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 39606, version 0.0","md5":"ace543631fab4cb1f7178b64c7e95123","sha1":"106a9fa2352a8b1387c1a9abef41efa3e7671789","sha256":"e02a6905cc7f96e588007fdc8b0fe9d0a320ba243017c2c6ce99ff29202e3d7d","sha512":"d3acbd7482e3561a476af987bd86968acaf6540b1d72aa898bcbd06cdc3b32abc20d2c3b7da355b8fef4998574064b0eb951360613c295fb6488d7f8e5843d5e","ssdeep":"768:yWiGDKYWsjOkroGlgOxjrFwcQXKU4b7DD+7YhPw:yWiyKSrdFKX34b7H9I","tlshash":"6a03f16c6c413f8bc6b7867ac3136f480d140359a21ad0972bcbe7e39b62b727e51647","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-04-24T23:32:40.896732Z","times_seen":95,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/add-bitcoins.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/add-bitcoins.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3266\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3dd7c27dba155bb636097e7178895349","sha1":"dd95a6eba0f9e5e422eeb7fcf8dda39f8608424b","sha256":"67d5be7b9e96c63b241186a95d4518006e7baa0931794529bb85ea4bfcbcc16c","sha512":"ef273128794ae260c0f72ff59656bdee83c19bf4ce2efd2f15ef0c813a6a44fde9de6f3cfb23d80ea44e437e072ae65d8c452a59db390f98a9d86dcfbcc1305e","ssdeep":"","tlshash":"94615d18e341d412c792945618ea8d39ff1f4690d583fa15ed17d822ed743b61b7e8c3","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-04-24T23:32:40.89394Z","times_seen":316,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/4111597591055.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/4111597591055.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 61168\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61168,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"c1ba5c7cbb54bc8060c42ac5640b8251","sha1":"4e34d0e9dd034d48f6e16344e2741999ac3e3ef4","sha256":"1caf07b423e7a1acaa41a9f75f727436b27cc2f2131f8f5bf1774a7faa975f8e","sha512":"f93548fc8c095edae291c17dd61e0d9578bb31d7752cd642f1c8609530b47ad6aa949ddd01ffdecb7e9582939799e0a74a970d0198ff65215718c83b04c086ab","ssdeep":"1536:eWXrzKXlfqudxyxY4JH3X/w1vnz5+7jfz3SQ:vXr2XF5dx293XCzcTh","tlshash":"98530262bf3106e89eb4e91556492cf6aae1f45911b4e96fa3c40db247dc329333063b","first_seen":"2023-11-06T03:47:35Z","last_seen":"2026-04-12T05:36:19.910095Z","times_seen":42,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/favicon.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76610\r\ndate: Mon, 09 Mar 2026 18:45:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"d7d232f24578a064dd836683e09a77bc","sha1":"02ca8e79e0bf1e7e55b4b823b468e66f5906cc5a","sha256":"6bc2931834d6f56c4dc331b8d189eb7f612c2588fbbbaaf1953816f66c108c69","sha512":"0237ae16d23565bfa0b167e0f4656f56d91aa7f5b9d415e91c11dfe491314c2e30e9b3851507e1d547e6b6fc2be6899ea576836c13d67f0823eb85b8dca637ea","ssdeep":"1536:G5CdGpSul/lDQMrSswqcJhWJbFGUQCqfBka1BU/+qU8OTZQqG3zeXb14pmzv8dq:GQEl/BQgT7SKFGv3FLuzcz8I","tlshash":"ea7302a4ee884c12dfa95c7c78e0a53f7feaa42fb64b917252ed003775a523d0ed1510","first_seen":"2026-03-09T05:05:45.002519Z","last_seen":"2026-03-09T19:02:52.410046Z","times_seen":7,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/dotted-world-map-vector-1.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/dotted-world-map-vector-1.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41091\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 600, 8-bit/color RGB, non-interlaced","md5":"53c92f8675bcfa038f2311450e460ea2","sha1":"1f971425afb157fc3d50d03870d74067f300c97a","sha256":"6f51b25246871a0f5730eb52959d16f90c7260444836a00881608c6859e01110","sha512":"0d7f00d4d22d0fe528eb6626b0a7340549cd01c101e7e64ea32cb2270d59aa21d7fa583a59c6c59310bfcaa6fd2f94bfecf0ccd81df6f698f7305621a52970e7","ssdeep":"768:kN/3JiODh2OIeQ32F1rmKLr50yfKrMyDy5lnOV6kHufqNT:YLE3YOmKgyDyXMFufqp","tlshash":"2703e1682574e2b4b80243719a177d8f0e666cf4c0c592abcb3963ac2cb7c76179786d","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-04-24T23:32:40.877977Z","times_seen":93,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/icon/icon-192.html","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/icon/icon-192.html HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 31 Dec 2025 10:48:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 688\r\ndate: Mon, 09 Mar 2026 18:45:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1820,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"ee19f9b927f5acd73f7aa99272145790","sha1":"cd4b6b97e035e2666d787ac5a6555185350d05ba","sha256":"1c9db382c0e773e9a024cfd04289f2364d57446a66d9eb8b134c4f937ba39411","sha512":"51447439d1aa07d5baeab1716bee4b1604d322fcc65f5eb94051cb50b6241b8a68990c1c76902045c544463742968b2a337953a0598feae4ff1b4306f43fc508","ssdeep":"","tlshash":"2231952dd28a45ab4a230154fbd4da5453298191f44a0ff1374e605ef9cd0aec2a33dc","first_seen":"2026-03-09T05:05:45.02008Z","last_seen":"2026-03-09T19:02:52.389688Z","times_seen":7,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/913441.jpg","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/913441.jpg HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Dec 2025 10:48:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 404464\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":404464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x844, components 3","md5":"f8adf265f98a7d702a222f3ad9ac6a3b","sha1":"a132280c2bbe0c75be05e38984ebdc6eaab7487e","sha256":"c91539211f26775f71a241a981fb12411377efa1ccf122ea1ce5ca195b86391a","sha512":"9feddb05dae6f7d4e23e56c1352418eb85bd35ff2cfe6fa6970dfdfe97b02b331cccf62a9e2b80f00739f3c63ea4a8ec65541e0fa502b938e97f51dc9bfefc38","ssdeep":"12288:uIdFAgGu18XkzigIDawco2aa98D5VyP0a6SYmh:uqFnGu18Uzi/dyP0LSB","tlshash":"748401be2331595e91cfaa11e2754bd6abbb5389d08f1032e402cad75b3b3927721d4c","first_seen":"2025-10-08T17:53:05.043662Z","last_seen":"2026-03-09T19:14:12.101877Z","times_seen":13,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/4941597591323.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/4941597591323.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56152\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56152,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"6e308f6f4ac815b002747dc0e1186f0f","sha1":"76c7f01502bbaf665219f5a6d9e6a37274aad2c2","sha256":"7594f7b6536705efb663a22e3248575128011a36b610065071c6c297612e57e4","sha512":"22c2a3a52018609b77a4f57e6a52084cec0fac0415d18914efb79482c193027d4d26f5dde1591cd4cd103738cc6f5ea935321a860d58a62ffb377cf27a3243dc","ssdeep":"1536:e3LIoPHLGEP+WhVODil7lo56a2vgNC6K/5n9:eLIeRmoVOm7lodaQK99","tlshash":"3a43f10742a3725a212441637ce6c284397a5bc8aedb31e8d7f79bf719e27f0976121c","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.972631Z","times_seen":49,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/particle.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/particle.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6636\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34844,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1007), with CRLF line terminators","md5":"2fea79b611e901ab1752082da00d9800","sha1":"3bb3b4612fcb3e3d218c4ccb212cb5ebd56ca6df","sha256":"01c680c92dac220fa46e54485a5706edc29702c10d3240b4daf4a62abe8f6eb7","sha512":"d2e35b82106f1a83c36299ecb9d90f541255367385a9f44191b39772d6ead7b8ac8332f4e758118f3ef6a0c15d871daaef85252a4a78fa0961e2e2eab96e7980","ssdeep":"768:VJuZaeTJUI8t3SGbbtMErGwuYgU6vWB0qQGuhsxrOJ2Lk:KZaeTJB8t3SGbbtMErGOQ5hUrOJ2o","tlshash":"6af2311e52f22d3a63b6f3a08eddc110db6761a7278208b1be3c52689f3545253adf64","first_seen":"2023-03-10T22:28:39Z","last_seen":"2026-04-24T23:32:40.909705Z","times_seen":140,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/new/css/fonts/fontawesome-webfont3e6e3e6e.woff2?v=4.7.0","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /new/css/fonts/fontawesome-webfont3e6e3e6e.woff2?v=4.7.0 HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/new/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 31 Dec 2025 10:40:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-26T11:04:11.71219Z","times_seen":438786,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3878\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11797,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11796)","md5":"aa7a53ce087cb67f3a01174df473e103","sha1":"6a0009ce914d281d776436468ba5237d3d4d560d","sha256":"04cea3df7bd779de9fa2d333f69521b69f57eebd486ec255a38ba0bd95ee0084","sha512":"f82cc3b7450f4a63f45e12743a893f50306d3fcae2ff55804c1905b2b44d34029ee10747c963d8aca98d5d60b4a8ee0b8584ab69c84c5b27d18392880f32150d","ssdeep":"192:YTGyGf/DndaSKOnkWcq1zFsUHBIcNEHDi9GrspEhcAwvWQ:YTGyGf7nj3nkWcq1B6DqGgC4WQ","tlshash":"3f32a5e9fa34b83e52d98566303a5608f3273d5cf206a5e8b6a0e8c015bcdcd5522f7d","first_seen":"2025-12-19T04:09:52.078713Z","last_seen":"2026-03-09T19:14:12.101402Z","times_seen":11,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/new/css/animate.min.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /new/css/animate.min.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2503\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16755)","md5":"7da1b41592f039eecd65d604482c10e1","sha1":"e966ec2885d74306b80253ef057ea77546b2c149","sha256":"0add8fcb5a583b1c16238fbe9d0de17c6272726b42be17fdcd9b4686ef5287d1","sha512":"d7e98c416ba684d035ed581279aa30fc4de291d8c15686336bca6f4df677c2ae3a50de16ca56a3b8a26f2f07f20f8ef3c063385d49772f70835707372aabee4f","ssdeep":"192:Byq6Vn0u6SBWTRNS3DW5WfW4vLYz3i6PSz/hQQHL:BV6VHTgH4vLYz3i6PSbhTr","tlshash":"46725d4c4a50105941a60773dac89fac863dcbdb68722cef3396588f4b457ee23ea617","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-04-26T08:36:53.864208Z","times_seen":2180,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/download-bitcoin.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/download-bitcoin.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2676\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0f2b8069e3a60e3b937617e941fda05c","sha1":"851af569424fc14bea65f49c2441fb62032e19e5","sha256":"e37b52ca61cf380ae491e4ddd7c1ef10d4cee012e696b3ee5d7deb7584b6b8f5","sha512":"d322e64807a3ab29bd8da86cc44b7e3ffba4f0c510e96f39c96fbfe4f7356d8c3a09508200b71faf1e97924b4d02f0096a649b03dddcca803d6abcfc392a17ca","ssdeep":"","tlshash":"2f515c067e64ad803841058310abe4f1d979c7a1a090fd13a9dedf0a8da20fa207d0f7","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-04-24T23:32:40.875389Z","times_seen":321,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/css/modal-video.min.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /css/modal-video.min.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 508\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2069,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2068)","md5":"600a28ccac67fe6edd2f9d19f3d84ba1","sha1":"e53bb05eff5c08fd76e6c8fb3b1023a5038c09b9","sha256":"a6bb15a4ba4beb9df438b7a9d80fabb63b8133c414b993b355cab1a2d22c933b","sha512":"2f4f5667216a6f9a08844cebda4df778757fe614992ec1b6347bda57fc82f1b76b5b53a965d4890218ee3fd3454866c5083ef6aadf402894d43cb96ab6f11387","ssdeep":"","tlshash":"50416e998d143155907bc346abc74b68073cc2e174310ede735b195f8ad628c62be685","first_seen":"2023-04-09T15:38:40Z","last_seen":"2026-04-25T11:03:15.479848Z","times_seen":492,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/8671597592136.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/8671597592136.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57164\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57164,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"e0d51278dbf083c5a4e84de76fb75897","sha1":"70cc2902c5e4f7819e974ca77fbb5f7a7cb0dac5","sha256":"6375de1b657889a0b298127c46d169bc9e4d595d0616453ef49af6a35d42c5ba","sha512":"12ce8f143f88c4087a317249b52c0463b010b565fe66024a144e24ee400f48b7c94c0f1240ab8d01586b25203b96d4728ff396962656da62870a2f8db876964d","ssdeep":"1536:eh978qw8nDsVrtuFtgPaGqDtDO9YSxpur/hD4EpeC59hP:m97/wxJuNtDEARTpe4","tlshash":"384301c8574c2fd1394fc92718c26c6da8f6a99250c4b1e5a1f5a015c783a3dbddbd28","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.932163Z","times_seen":44,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery-3.2.1.min.html","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/jquery-3.2.1.min.html HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 653\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1526,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"e659f8b498a3d0d955c515f987141c5c","sha1":"f83d015585a33ce9640f64ccee180f7f56cb98d2","sha256":"bb4cc07bb94fa94e5920b3022aa0810ce1202e401990469d034545103517b33b","sha512":"b57cd83e856e93ba3c27e0972ed46a5371c36dcc35eae70c47804416d89d36ecd784f64d27b1f1196000772a5da49fec753bddc806a8449c1c406d08e3da51c5","ssdeep":"","tlshash":"f5317339d282164b80330294fbc0ea9416788291a18a4fe1375e756bf9cd0bb86937d8","first_seen":"2026-03-09T05:05:45.085123Z","last_seen":"2026-03-09T19:02:52.335154Z","times_seen":7,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery.form.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/jquery.form.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11763\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43811,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-04-24T23:32:40.881255Z","times_seen":504,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/mobile-app.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/mobile-app.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2490\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 64, 8-bit/color RGBA, non-interlaced","md5":"e0aee317274edc9a1144d7ce8cee7193","sha1":"3afc320f00b0bfcc662ac894d4f3c615610b97aa","sha256":"d2c0d0d03eb2bf7031db3d32dc5a3c497d438f60f51419b80a57a8a38a330a38","sha512":"a775d2d68c21346333805e023e326628ff736455aa987018a66a50304699ceef9083253dcabec5459aea4b50ba396e89a9dfd30f3daa59401493adc077095697","ssdeep":"","tlshash":"40511a4add0e78866482859309e650329f76c982d4f1af27f3c2cc1ad8d10b9d96d5d7","first_seen":"2023-05-14T08:44:13Z","last_seen":"2026-04-24T23:32:40.897857Z","times_seen":317,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/Bitcoin-12.jpg","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/Bitcoin-12.jpg HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49045\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49045,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 640x639, segment length 16, comment: \"Lavc55.18.102\", baseline, precision 8, 852x480, components 3","md5":"26a8547e1eda21f830293fd63ae75953","sha1":"a6b1ba16140da3470e5f7b073837d5fa1a8e26cc","sha256":"ca7fc0f2644535087def2d4f2504d1c450fa4212aaf3e7c669773d1909783ca6","sha512":"84ee842a33c5752bf6194267020d7c970bde702d46eff4957b1e83b3d7333a1db874f2d9c2bf5bb33883a4ea38d55f08cc4ee6f5f132c4f12187acda54276f70","ssdeep":"768:q+ChGoW5U55Zokd/+vcIjfTERkswtO4aEt3VARVWiWbALvoleS7CDwBT+SQL2AFy:q+je5oG+0Ij7EWsw04BJGRVWiqleSOcl","tlshash":"6223026d4a8bc6b12215ce76928f9fcde27ddc490d8c2d20a572a5ec36a2312017672f","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-04-21T04:26:45.640879Z","times_seen":66,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/diamond.jpg","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/diamond.jpg HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89005\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89005,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2018:08:23 11:25:12], baseline, precision 8, 1500x844, components 3","md5":"2d070c14871655535abea5a79108551d","sha1":"9cc157b2c8f4c71f63a397808156e0eb0ddf4fcf","sha256":"aadc7d713b86ea72c8326cae0b0c436d7471c9883eb0b3b1d874011861eaa54e","sha512":"564099fe0027f7245f379507f4635f7d4d65286c3e0a0934824aa4ef584f50bdb932fcdee8de23e99920f7985e8a9f120f85a39ed6099d87e9b8260d56617382","ssdeep":"1536:AZIx64WS0aVV+utlEkYNyMYWT6b2siwkduPyhsXhJN:WoeYtUJP6d2u60","tlshash":"03936a35af6d0bc6c8c639371a00cdb593b64fd1439722eabe7c331a636dd50982466b","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-24T23:32:40.877322Z","times_seen":88,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"index-api.bitcoin.com/ws","fqdn":"index-api.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"104.18.28.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"index-api.bitcoin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 16:33:33 GMT","end":"Wed, 22 Apr 2026 17:33:31 GMT"},"fingerprint":{"sha1":"88:E5:E3:53:4D:8D:5C:94:A8:92:4F:8A:5D:FB:A2:AD:A4:69:78:39","sha256":"1A:8B:18:D0:BE:C5:0D:D5:20:95:F2:39:E9:E6:B7:24:3C:D8:C7:32:E7:CF:21:E9:8E:D4:CA:35:76:D9:6C:E9"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: index-api.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ftrustinvest.online\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: pB1pxjIJp9rANeMDOU93fA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 503 Service Unavailable\r\nDate: Mon, 09 Mar 2026 18:45:09 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-Ray: 9d9c3c2f3d2035a6-OSL\r\nCF-Cache-Status: DYNAMIC\r\nCache-Control: no-cache\r\nStrict-Transport-Security: max-age=2592000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":50,"connect":49,"send":0,"wait":184,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/slick/slick-animation.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /slick/slick-animation.min.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 603\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1774,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (746)","md5":"993930401917e0f967afef1fe6138f7f","sha1":"535f6e1f2c002576d1107b567489188870dbdcd3","sha256":"1138fb0dac3902beb24680d9e7a7083a58a6683bd5c4b98577a5e1dbc023d963","sha512":"b28c217fb1ee2e244d7f4d644f5c1f82d04c37980f4c56fb37920d40d8e08caebaa501205fda18b37b484c04d459a77294749d2a8e2a4b01dd526f6f6e57e586","ssdeep":"","tlshash":"d631998c7c4314a2a39706f7001f2058467369e8e9344b5aac6ed8bd06ad42c7b5bf7a","first_seen":"2023-03-07T14:51:09Z","last_seen":"2026-04-26T03:38:18.757621Z","times_seen":761,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/world-coverage.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/world-coverage.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3921\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b278a9ca96487f885ce54e83a91d18df","sha1":"293a0cca75816f14bb6e6fec79538bcce279291f","sha256":"e34c25320923a041bb5365fc894419f86fdaacf4fca7676a3d3bc5a24fa9be48","sha512":"7f79c4f4c5d02ea2db5ef99125bee57e26b8fe3f199c9b7867c7965e86cd7485a43c7ffe4d2dee33ce45068d02099a7970de50d196f0bc7fdc457dd354104144","ssdeep":"","tlshash":"6d814b4afb322442d24cdc8336e9906acbc41588e0f5e197f9cfd827e9a531a590c7cb","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-04-24T23:32:40.914939Z","times_seen":294,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/cost-efficiency.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/cost-efficiency.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2769\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b873a7da38bf955f39ce92839bfa14da","sha1":"8cfd6108be017c4997690c3ff18da325f60694ac","sha256":"17cbbcc5fe7275156ab97be0a10259d9055415cbb41f90302fcac1064390c5a4","sha512":"934a5036e2561f417bb246940b5d4239d56282d05a072018576f6c033352439a5c213eef7e6678a99ecaaf2c027409571b783a3bcce48e2f930808eb5237abfa","ssdeep":"","tlshash":"94512b946e223881f064f089d7c235ab96560c41ced9a5fadd8fcc032da96bcc9de1c2","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-04-24T23:32:40.910315Z","times_seen":286,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/4991597591857.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/4991597591857.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 93829\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93829,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"000f799d1d56c257e0b45b95211d56ca","sha1":"8a9a914aa330947d26750b9274ad9e9ada893751","sha256":"02fd2576809a085b89e5f6b13e3654cb709e2d50d99f5ca6faef6756ca9a91b2","sha512":"6b2baeba747b9525680e60d72cc96c9050527e924c850ec1e741caa8e40ba07748e94c7aab5f1cf42e5fa599a96828909da388e3c8507dfaf4aaa11c6dadd7cb","ssdeep":"1536:ew0kcJ9olZnTGjEvB5z8nAE+rnY4Z1xEL8P4cAaZlG1Srvvivy6/H6UIYy6NxKDC:t0n8xTGEZ5zqA/rMO2J7jIKKC","tlshash":"6293129e59f0b2ffec6d35c90936af88c9827c8271304b8722ccc95e5f258d6361451b","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.971863Z","times_seen":46,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/5321597006964.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/5321597006964.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44561\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44561,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"144075ae595f2a0102a790632729320f","sha1":"7e1ee0766ea9ee0f085ecf937958cf7506fb0921","sha256":"71bdc7a98b31da278c6433b99dc34f1bb16d5b18606a00d2fda32687859d66ea","sha512":"3352005d814c3f990d97a5c6ebc85f8ac5320105e1b503b5f952bf231542eb79c330db998fa5cbb6ae4b6a5e1587361f2ae86983f4a340cb1809f734baa841c7","ssdeep":"768:eWnERNaRBRNqSPM9FF8arEzjMor2PlkwDzTcN6IQW4361nq0pPPJceOm5LFtz4:eW+kTRESPQxrEPxbC/CmWDZJ5Omx4","tlshash":"3013f191075276e0a8dbb0d929ff3e5cf3a3c419198d2f8590a05b60673c73b839866f","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.905559Z","times_seen":44,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Oswald HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 09 Mar 2026 18:45:09 GMT\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6935270cbe7bf7b3212d51f3582a2af4","sha1":"09b01e6ca7abe871056181a763f1cf6df183cafd","sha256":"9bd52388b5ab746935d9be5f8bb33a5da893e97a3520c4a567153ad8af77233b","sha512":"befad05ae005d97ee75fc1864cd2d36ebe64aa7a0e0671e4de8f6a0980b38650478509a0d5b051f42bbb7034d395f6df65fd9663c065131818ab8cf90b4f11ae","ssdeep":"","tlshash":"9531bba2482b94806b4b1cc733de3d319a4ea216345589219ffd1c6cdcaae261319b9d","first_seen":"2025-09-11T19:44:11.722281Z","last_seen":"2026-04-26T10:56:09.721361Z","times_seen":4088,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":308,"dns":1,"connect":58,"send":0,"wait":78,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3878\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11797,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11796)","md5":"aa7a53ce087cb67f3a01174df473e103","sha1":"6a0009ce914d281d776436468ba5237d3d4d560d","sha256":"04cea3df7bd779de9fa2d333f69521b69f57eebd486ec255a38ba0bd95ee0084","sha512":"f82cc3b7450f4a63f45e12743a893f50306d3fcae2ff55804c1905b2b44d34029ee10747c963d8aca98d5d60b4a8ee0b8584ab69c84c5b27d18392880f32150d","ssdeep":"192:YTGyGf/DndaSKOnkWcq1zFsUHBIcNEHDi9GrspEhcAwvWQ:YTGyGf7nj3nkWcq1B6DqGgC4WQ","tlshash":"3f32a5e9fa34b83e52d98566303a5608f3273d5cf206a5e8b6a0e8c015bcdcd5522f7d","first_seen":"2025-12-19T04:09:52.078713Z","last_seen":"2026-03-09T19:14:12.101402Z","times_seen":11,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitcoin.com/?46","fqdn":"www.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"104.18.1.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:10.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bitcoin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 04:30:49 GMT","end":"Mon, 18 May 2026 05:30:45 GMT"},"fingerprint":{"sha1":"8A:41:55:AC:E0:3B:F6:AE:CF:4C:45:AF:C9:75:C5:F1:0F:9C:10:C9","sha256":"8C:9E:B7:D1:7B:D6:92:83:AF:9A:3D:43:75:D3:2D:95:09:B6:F6:2F:EF:14:31:7F:1D:4D:1F:A8:7B:30:76:16"}}},"request":{"raw":"GET /?46 HTTP/1.1\r\nHost: www.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ftrustinvest.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 18:45:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9d9c3c362bf2b1b8-OSL\r\ncf-cache-status: HIT\r\nage: 3049\r\nlast-modified: Mon, 09 Mar 2026 09:36:08 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 c04417bae552ee23bdd9519ac6fdfa34.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: efvpBsJUkpaWDOuKQezt9QFzZ6KihWdOBGfEzsQpe0fmCOyLORTMMQ==\r\nx-amz-cf-pop: CPH50-P1\r\nx-amz-meta-mtime: 1773048925.286768049\r\nx-cache: Miss from cloudfront\r\nset-cookie: __cf_bm=7uWrcZNOcQYbrCDHqcI1ouHrJaLnSOwF2V_k24eI2PU-1773081910-1.0.1.1-XJrmbxvRxm9vXbq2tyv4N392A66oiEBRg8paYNaB1ZMFTr5aIT3K.6um7JK_TkZBL1XaUYihlHetWqXruaZGhwJ.ZJmAcMTRacvPMUFppFk; path=/; expires=Mon, 09-Mar-26 19:15:10 GMT; domain=.www.bitcoin.com; HttpOnly; Secure; SameSite=None\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: frame-ancestors 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T11:05:10.648958Z","times_seen":14223184,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":42,"dns":21,"connect":1,"send":0,"wait":167,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/css/animate.min.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3148\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41626,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41626), with no line terminators","md5":"90dfdc0d2b77dabac8cd9afdb19e4385","sha1":"71200fae11e960fc37e95ad961384e91da162dec","sha256":"acd4dcf96c8b5f8b2ff506897cbc8f07ba0d30248b6f19b58c66d5a70f132821","sha512":"c327d4c4a089aa54c53dcf6a272df6f00c91de0d1c63c9bfcd0e9240974303540c57e656447291b6686ff78ea28e9799504c85a73a387482d95ed928693fb4b2","ssdeep":"192:1bcxbwdOslxFG5wQ1oASkND/3fyx5PrYee0nTv:/OqG5wQ1oASkND/3fyx5PrYee0nTv","tlshash":"451387aa48e1228554260e55cbcc8fa84b3dc76764b14cdf3396384f8741bae23de767","first_seen":"2023-04-05T07:49:39Z","last_seen":"2026-04-26T10:57:55.502873Z","times_seen":576,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/css/select2.min.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /css/select2.min.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1663\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10424,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10424), with no line terminators","md5":"90bf5137b0998ca2c71a0caa66136164","sha1":"3ec93b1bbf9797a9cac340eead5e17aebf5514ba","sha256":"78755e39fc27987b8e94c4b4e9cbe4d48eebd2927250ba13c30d8df5bc92ab82","sha512":"457a2fcf0d4f0616bbeb8bebe77796dc1d887e6f8f94e9f4b969f674788c9250bcbd6387b6752a8a8016c42c2631558400ccd10ec2e4d2c893c31ff0d0c0972e","ssdeep":"192:ON5InTfc3aMlw8X8SV2KaECbjOZW4VcSvGuh:YITfXMhb8pEHZWUL","tlshash":"c322ba297ecc6234a07e8d7f5cf670a05638ed4fd4142bcab9aad954c9e1031178b60f","first_seen":"2023-07-17T18:30:40Z","last_seen":"2026-04-24T23:32:40.906107Z","times_seen":70,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/5221597006888.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/5221597006888.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48695\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48695,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"2ad6db8bfbcde316b9a95bd57fe15323","sha1":"9f80312a8b6850012fcc53fef25b2cf429b3db01","sha256":"c21d9df0519ff6960931b8c4c2f4d3c84fe793f412ef77b47f10fbfb5c60b754","sha512":"c84df27dfb60bb22f26c262bb88fd1a9909055fd6d94565c5b199681635c685f2ba5e5219a399ba0d6249ed3e8db9243e0e287a121d765c4c675bd15a3a55acd","ssdeep":"768:eV7nxhHyrW+o2F+G1iBZlOY+deA3rdRchkbtYADmpwtoFmdDaalNDaFdKGfeUf+d:eVTjyrW+oQi/jBWchOHDGOFhNDaFdt+d","tlshash":"9a23f1ec64158cd86dac67b3c75c50d7a7c6b1a878b9b44e2046063333e09ff7e5aa84","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.907643Z","times_seen":44,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/slick/slick-theme.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /slick/slick-theme.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1166\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5370,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2f7f8091774b722b3802abf1a438a57d","sha1":"18e42e6bf32d5de1adeea8ca1b56ffb56cd00e63","sha256":"2e0e2bbb9aefed2cc4abfacfac18566fbff341171f635359cdaf5ec784f990a1","sha512":"def3f0a14299ca5510130c43d5f5586c64506c066fc16dcbcc7f6ce00bfbe1d3adbe6b55a1734b7d428f12a9fbc8227c8b4d92bd691d4dd4608ee717b9c2f564","ssdeep":"96:uV15CEXdql+MeDpaX806FjAf8YwkKbZk5PueS/Fj93:iP3XdcTGp6804Af8YwkKbZk5Pu1l93","tlshash":"56b113aca506e1c6163388803fa30755eb9b30431f110eacffa413545fbe0ac5ad9b9d","first_seen":"2025-04-07T11:44:39.851784Z","last_seen":"2026-04-07T05:23:25.326927Z","times_seen":29,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/about-us.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/about-us.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Feb 2026 06:39:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6651\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"ce242dbebaf83d13fca5fef5d2aed043","sha1":"398773a89636ab247837e5f38c54dd94016a651c","sha256":"33b5ee9f84e69b9c15dc6d8fc722def078ebf8bdc76747a1fd475f82f1ec5172","sha512":"90ec970700ddf49907df60df86ecb9c75805b28e39b4a284162c7f4a26ee553e4455611429a1f1a2d60b8f458e5896f533a4f4f6ddd562f3f619ee52ed4faaee","ssdeep":"192:xOoRTjfMrB5uH7LavFD3bStsD1ACZoZwC:IyT7cuH8FzbS25deZR","tlshash":"4ed17ea4356faea14af27684178d83ca00340e7d4e1288136edd6f136d4656e19d66ce","first_seen":"2026-03-09T18:45:37.790985Z","last_seen":"2026-03-09T19:02:52.316134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/ion.rangeSlider.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/ion.rangeSlider.min.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8789\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40978,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (632), with CRLF line terminators","md5":"7931ed50463c063934ba032039f944e5","sha1":"77bc0acbe31b2db5392ecb9601cd2b46835df183","sha256":"79405bfca3af9343fbe9b3ca24420c356a88caec09157b36417c3e90b4022cad","sha512":"6ec0af8717807514b253af236a1a0da8778ab1c699556dd921f4d243380053733512fed3f62daa28ccb83a42b306bf238a02739b42e1efafa243f9273a6395f0","ssdeep":"768:f7lVntiNtix6RmNvIUpSvtl1F70/AcYl1Xlqv9d:f7/nYNtix6RmNvIUpytl1F7vLlXqv/","tlshash":"e60330562265b7814592d0d4240d1b0b5b33f66eb35280bc7dbecbdb4daac6870be738","first_seen":"2023-03-12T18:18:24Z","last_seen":"2026-04-24T23:32:40.892205Z","times_seen":238,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/6391597006127.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/6391597006127.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67491\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67491,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"569aa39c9d307462d03a0f9df6ec61e0","sha1":"0a2343cec9b253da0cc4dfd012d81d992139ceb5","sha256":"514fb1e0282970f29b633b3bf40232f62f0745a949eab4d603cad5e6d6ddfd0f","sha512":"88e489e50b9258359dc0f535021997effd980eecbf35fa88e424d50dd24cfc77a2e02541e563a566d713b260c64cb40a59187a12abb5e4b8384a492a68e54cd9","ssdeep":"1536:eGB859xt0dcTbvoSGtRXLiZf8DAgkDKnmRm3Ui3MWp04CsDeaQw6hRM05fE:RB8HxkcTbvo5RXKUbWmHyXWe66hRMos","tlshash":"9a63020073292ed0791389aee7de47df40d44817b5ebce2959c1c8e8b9c28adeb5d198","first_seen":"2023-07-17T18:30:40Z","last_seen":"2026-04-12T05:36:19.974979Z","times_seen":43,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/code.tidio.co_443/otwbgiiwdwrvwtqpxa8w1vxnhubg35ch.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /code.tidio.co_443/otwbgiiwdwrvwtqpxa8w1vxnhubg35ch.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-26T11:03:45.153373Z","times_seen":121192,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/new/css/fake-notification-min.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /new/css/fake-notification-min.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":978,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (643), with CRLF line terminators","md5":"0f46a238cbd11ecd4c34398cd88fe05d","sha1":"904d82352b0f45cad8d98cc7416c265a0cf0e1be","sha256":"27ef53faac17a2fcf938097d718cbf926cc54f9b35d79815c26ea0e219156d6b","sha512":"a99c4ee17e2837697af6a564f0a1eada3eca0eed1fc73dd9e4ecf5c26e4b6485c0631e1f9395539665f15335f18ee9370beec61665df928c8b7b7d852ac1dbc9","ssdeep":"","tlshash":"c21144528133a0c675b5827b35132df57033854e7f131490eb93af21c146b9a3b4130d","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-04-26T05:52:20.215855Z","times_seen":567,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/slick/slick.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /slick/slick.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14115\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84265,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"99cf8430b8d81c268269760118ec31a4","sha1":"3fec23eeb6e45407f1fa1d38cf1cd3d463dd1f7a","sha256":"430f384b0fc496d9650c747cca458a7eae062530c718aa7a896d99031fbbae8d","sha512":"2af966001fb0c74ccb4117bb842173070c9a53f02f6f03e8260c5f059ea0f9917d301318e18028dfe0727171f645cf9f0cf6d9d1f26c8b701f393990619127f4","ssdeep":"1536:dXnrWutGI2R7H+e4yMibroAOGJATcY4sWlgN:dXnrlGI2R7H+e4yMibroAXJATbN","tlshash":"5283fe0b55e6131684a731b96bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-04-26T09:24:49.805866Z","times_seen":5729,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/fonts/museo-sans-300-webfont.woff","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /fonts/museo-sans-300-webfont.woff HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35241\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35241,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35241, version 0.0","md5":"79d75c0208e298dce66a21f77de03ef7","sha1":"14541a65f08834b16aca7d79eb78300a65f1eda2","sha256":"6a382a283c77b7e93e7bb5b0b1902242082a4800dac20da3334d641093b33005","sha512":"e23287a1a3f805172827b81a38785715df3d3ce4616a44df12c6c4e28afe0a5e35e27565ab95b2f8bab571030aef814c58ff1ca58c23ec9dd5cd3425fdd8ccdb","ssdeep":"768:3vg7T1Jd9fkMdhwQ0zCkJK/Y4YWX6BmvD5PLZ3BGcKh2i0:3ydRhwQ854YK6YDhLZmh2i0","tlshash":"b2f2f135bc55036ac4b5b17fa0a69e0ad11a9543b29e6b33d433103f5147a87d3e33e1","first_seen":"2023-05-01T23:34:19Z","last_seen":"2026-04-26T08:16:27.169384Z","times_seen":3825,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/fonts/museo-sans-700-webfont.woff","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /fonts/museo-sans-700-webfont.woff HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33342\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33342,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 33342, version 0.0","md5":"98308b503ef41d53afe8edf9e0484450","sha1":"7a555750746beb8154a505b163f3643be14328d8","sha256":"3675ed57fbe359962a7a4a6c67096a2e59a4e3930a0ffb8550414e03a0c89dc2","sha512":"ce9c77111c15d3888c53483aca861360ae1fc8cf0eec2a6b0ac245ae54b93512a6a98892f8ce487e3606c7ea73d41f2e98debee6232754d95397bd3489e9a063","ssdeep":"768:eF54LJs4ZhhbYoI67on8oLE/XVqomN36f40MDr8hRH:ev4LnZhhcoIwG8u134TXfH","tlshash":"bce2f17543746651c241f8738ddf0f9dce980268b5195623e2f2e23a344e3ed47641db","first_seen":"2023-04-16T22:45:21Z","last_seen":"2026-04-26T03:36:16.444527Z","times_seen":604,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"index-api.bitcoin.com/api/v0/history?unix=1\u0026pretty=0","fqdn":"index-api.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"104.18.28.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"index-api.bitcoin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 16:33:33 GMT","end":"Wed, 22 Apr 2026 17:33:31 GMT"},"fingerprint":{"sha1":"88:E5:E3:53:4D:8D:5C:94:A8:92:4F:8A:5D:FB:A2:AD:A4:69:78:39","sha256":"1A:8B:18:D0:BE:C5:0D:D5:20:95:F2:39:E9:E6:B7:24:3C:D8:C7:32:E7:CF:21:E9:8E:D4:CA:35:76:D9:6C:E9"}}},"request":{"raw":"GET /api/v0/history?unix=1\u0026pretty=0 HTTP/1.1\r\nHost: index-api.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ftrustinvest.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 503 Service Unavailable\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\ncontent-type: text/html\r\ncf-ray: 9d9c3c2f0c06902d-ARN\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-apo-via: origin,host\r\nvary: accept-encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"92e0b13745feab64d7ccfd5e71ff02d1","sha1":"4f0b17331a21cf9bacaec53a24bdb92619bc519d","sha256":"212a2d2e355cec068c4c4f041281aa42b663d3defcb647b11974f362712159fc","sha512":"6bf9f57d11bdf8a3a58dd13363e888603a54df5ca274484cac039e9514bff107edaa019ffd38a383874aacc4b36c7c4a5a41c90904e998d50618b8b07434bf09","ssdeep":"","tlshash":"26b012dbe0c4786fb832815e0c820796bf55c2ec14b880b512952eaf219f408ac47fb9","first_seen":"2023-04-10T16:43:10Z","last_seen":"2026-04-25T20:20:06.144599Z","times_seen":642,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":111,"dns":71,"connect":8,"send":0,"wait":69,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/slick/ajax-loader.gif","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /slick/ajax-loader.gif HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/slick/slick-theme.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:09 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 31 Dec 2025 10:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4178\r\ndate: Mon, 09 Mar 2026 18:45:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-04-26T11:01:39.604651Z","times_seen":36154,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T18:45:08.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 24 Feb 2026 21:46:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11070\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47167,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1091)","md5":"1b214d47c85619b08b8f18f4a3486830","sha1":"d4be1453d10d0397733f860860732fab48df028b","sha256":"e1f7726bdd3169dcf378c065307bc08504f6419e5502f497fb9aea073bcbec51","sha512":"c9ce949739e1140d9cacc9725d42ff142d88485518af75045d7e16a6046812458125b89b4a622159de61d5dd51557bd7d3d7157ee5f164374c4c1d307110ca9b","ssdeep":"768:Thy/fTi4kWO/k2IVGMf3rIRPZKE64vEv9dfh2xltrgRtflcuqym:ifT/kZumPZKE648Rtflc9ym","tlshash":"b623d6106d8c8c33015781c6a572674da1af6fb6e62749c2b7bf06256bc3d90ec0f99e","first_seen":"2026-03-09T18:45:37.811323Z","last_seen":"2026-03-09T19:02:52.336535Z","times_seen":2,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":262,"dns":75,"connect":91,"send":0,"wait":92,"receive":1,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/slick/slick.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /slick/slick.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 478\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"68a281f599d6a4fa5e8cab54bc5f59fe","sha1":"515cb38cbd76ebee91d05f7544758f4eceaac07e","sha256":"1b786863757c336ef237105e2560e02e2e54b90781ecafb63732662caffe4cbb","sha512":"e001ba8f09719604413c08ad5aa641cc9a5fe286c2d049fa0e86e12972f3d0a72e2cbbb9322734766aaad2fd892ba98c8cc5c91a290da36dd9f36995fe861857","ssdeep":"","tlshash":"2e3119dc0152c5d68b3384444fd38649eeefa0930c241698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-13T11:05:16Z","last_seen":"2026-04-24T23:55:51.969933Z","times_seen":581,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:09.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ftrustinvest.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 04:48:28 GMT\r\nexpires: Fri, 05 Mar 2027 04:48:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 395801\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-04-26T11:06:32.778769Z","times_seen":8982,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":170,"dns":1,"connect":16,"send":0,"wait":17,"receive":3,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5760\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27041,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26878)","md5":"10296afc14c2e54a1b67e1be482c0e6d","sha1":"773b034c7540a49972ba421db0018c5defc5fb1f","sha256":"b9e28f717364126730d52661916181cdc705f35acced0abd57057c3f3d1018d2","sha512":"d0360eb3f77dc42d53af9168f8366ec2b55358b5866ec9ea10b63d933741dc3f0f8bb4d7dfacc6a312ef5c9a080865d2eb097dc48151b02fa3c9a45198ab1afa","ssdeep":"384:aMU7jbKi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:aMU7jbJlr+Klk3YlKfwYUf8l8yQ/7","tlshash":"d1c240f8e54c01d66731c48bff81b36862b6f73dd5804da9f01f690c29d22a562c5bba","first_seen":"2023-04-08T17:09:17Z","last_seen":"2026-04-24T23:32:40.891089Z","times_seen":36,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery-ui.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/jquery-ui.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 120945\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":520714,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1002)","md5":"ab5284de5e3d221e53647fd348e5644b","sha1":"75c20acdc6cbc6334fe2b918ab7afeec007f969e","sha256":"4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d","sha512":"2462acc237c0063263b52527cfecbc5d4063065c0cd541cd966d9924dec0d9af475184f732c92af9269cb08df993896893eff37ad4b18598ca4b7af7b5f02742","ssdeep":"12288:1vemHFgymzYDdHCcmM2/W/CCeS/QRzbrVDDdRO2:vDdHCcmM2/W/CCeSIVDDdRO2","tlshash":"f3b4a6c9f39c266a867a32595c2e42cdb23c8075d600587fbc5d59dc29a883c43bbf79","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-04-26T10:57:45.776729Z","times_seen":14363,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery.fittext.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/jquery.fittext.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 521\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1074,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"40635054e327b749517fbfc876906d27","sha1":"ed913a5402b9eefb57bf8c869f6746bdc1d264a9","sha256":"c499a934a3a4111346993c847d1b0ecd309295fb2d3f0e57b9d44ecaac732e17","sha512":"cb5c9f5d6bdb5e0828b3583c6d986da6b95ef56763910b56ae49594244e9b2043183e6f981d7a58c9f88ea2b240eadf0e79ae7775c7a6ba5bec47c0066ecf5a1","ssdeep":"","tlshash":"d211c29e387525203a1f67325b9f514cb620c6836676f400f48e43c4afd1819596b7d4","first_seen":"2023-03-07T12:02:58Z","last_seen":"2026-04-26T10:02:21.77717Z","times_seen":855,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/buy-sell-bitcoins.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/buy-sell-bitcoins.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3823\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3823,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2b3b1e3d4335cf2e13cac2ab649da39b","sha1":"e0fbead572e61c239ebd312c33ef0ae1812d11c1","sha256":"6fc965cc439453ac7f309a61f6af2983d139a2202de4a3b382ce545941496c9a","sha512":"c8c7ba93a3df6c9053bbfb184d2527483293daa1bd8b71dc61834d475af4ef2c35295d9b4d2b06a6df3de7ba219d835142f60c841a3912dbc8e550436560e57f","ssdeep":"","tlshash":"49714a0566322c81a23e50d678e751ca6e56274095a0f1a7fa8be4020ec237a8858acf","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-04-24T23:32:40.921047Z","times_seen":316,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/images/strong-security.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /images/strong-security.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3351\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 64, 8-bit/color RGBA, non-interlaced","md5":"c5176a720aee4031200cd255dcfc5959","sha1":"912fd949f3c7540f035120170b1d2f6780c94726","sha256":"1a1fe67bed27c4713182081a69310628d7fad29bf1dba94322572b112c7057d6","sha512":"ff745a62ab50fedc6d1bdf2cc42dbbb59db60d37a1553ac66bc8c9a5eaa5e377e1decf40c595627c0373ff4be992a9dfb314e7e8b7e9b6ba517d9dbef9aaaccd","ssdeep":"","tlshash":"91611a0bbc949942f15db3d208fb70b6f816148594e8c478f98f9c9274905abab6d1ce","first_seen":"2023-05-14T08:44:13Z","last_seen":"2026-04-24T23:32:40.897279Z","times_seen":295,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/uploads/small/8211597591949.png","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /uploads/small/8211597591949.png HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40085\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40085,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"26e4a84d56388a913bad1bc956e14071","sha1":"8c89001fa977cc06326a67737e4ab515cd09b30b","sha256":"0290446902fa5a208aa7cc0b41c777e57b69796f3176bc33f7807165acda2ca8","sha512":"05b342ccd30424b4f1fff2c2ac336a44ea5896cc6b1c02c4c0d7ec3c4bdc4ac07fd8f0240c4735ea72773d97ff4a85530850f1612d61ec6980e9a57b3d9d838e","ssdeep":"768:e8qcoFAbd+ebiqBS1NhM8bH9ULv3dbBgKjnMdL/4KnSt:e84sVXBuNGu9Ujtlg2mTBni","tlshash":"f703f1cfe705939aff1d81847a4d0c7412d4a2a266d98fadba8cddcdc489c42d698b30","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-04-12T05:36:19.944009Z","times_seen":45,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/code.tidio.co_443/otwbgiiwdwrvwtqpxa8w1vxnhubg35ch.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /code.tidio.co_443/otwbgiiwdwrvwtqpxa8w1vxnhubg35ch.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-26T11:03:45.153373Z","times_seen":121192,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/js/jquery.min.js","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Dec 2025 10:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 31985\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93068,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32132)","md5":"0652da382b6fceb033dfe2b6c06d4d11","sha1":"002da8cbe90fcf32fbdebb72386125079e3805ee","sha256":"7fa0d5c3f538c76f878e012ac390597faecaabfe6fb9d459b919258e76c5df8e","sha512":"b329c7b3eacb836583544f54d281d52544430a2a9fb7ad06716396eed5f24b2f2822bd078e5dcaf60bfb06afe04a3e0d0d5a5ce6f9ac364306189eadd95a5430","ssdeep":"1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTdl:fY8MaW2b+UELKTqnAdiq","tlshash":"6f9308ddb1c5b02287bb71a950af540bf236195e280c4450f268d8f9fc74a4ea27bf6d","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-04-26T05:02:28.474554Z","times_seen":3936,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ftrustinvest.online/new/css/font-awesome.min.css","fqdn":"ftrustinvest.online","domain":"ftrustinvest.online","tld":"online"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ftrustinvest.online/","date":"2026-03-09T18:45:08.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftrustinvest.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 04:15:41 GMT","end":"Tue, 26 May 2026 04:15:40 GMT"},"fingerprint":{"sha1":"1E:D1:CC:B1:DA:39:32:49:0A:4F:76:F4:BB:F3:6E:D5:F3:9C:38:78","sha256":"6C:91:5D:0D:0C:A9:86:DA:B7:2C:19:F5:44:38:A1:F1:E4:2B:20:23:7F:88:9D:5F:2A:24:56:2D:E2:A9:08:7B"}}},"request":{"raw":"GET /new/css/font-awesome.min.css HTTP/1.1\r\nHost: ftrustinvest.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ftrustinvest.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 18:45:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Dec 2025 10:40:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6666\r\ndate: Mon, 09 Mar 2026 18:45:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31029,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30867)","md5":"00349568b0719a9c204a922484e7f256","sha1":"7c61c581e1b265eff8f8aa7f85858e6ef78b380e","sha256":"ee606d14207a9a0dc87501cb7d94d222a37468fded99bf724772c49b3723b8ae","sha512":"3b81d852c0b179f58748675a9af852ef7e115d4d11edf5520ef0b703e77ba1a4b75e80713d07050b692c30b6faccd2e8df01ad96f7b46a9a8d94130ea6385688","ssdeep":"384:UHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:Uwlr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"acd241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-06-13T16:48:19Z","last_seen":"2026-03-09T19:02:52.337202Z","times_seen":13,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"ftrustinvest.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
