{"report_id":"a795a418-ca31-49e1-93c5-22adfc619315","version":0,"status":"done","tags":[],"date":"2026-07-01T02:05:06Z","url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":0,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"title":"Traders-gain.com - Home","dom":{"size":41852,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26340)","md5":"f5d14fd5a3f88c0254a36bba6a60c390","sha1":"6827f21472fe15a17605776a2631d76e0fa9402a","sha256":"1aa024915c8ab0034e4f2a330186b9e37d8358258b41dd9901e48ecbd4ea5933","sha512":"dde73534deba7bf0e3c96f485f7fbf891b3f0248e9f2b920d00713f26b0b39df8a674787016f0274e2f2031efd251355285b647a36419467a209b8918fa629f5","ssdeep":"768:WyJi2qbCmmWq38FTbfsTO+hDGqTt8UtN2v3k/SR+D/5km58:rJzqbCmmWq38FTbfsTO+hDZTt8UtAk/C","tlshash":"ea13a8276784452c9c53d278f399b54ea32af688ef6259eef7c23410c2d93ff088a455","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":0,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T02:05:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"traders-gain.com","ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2026-07-01T01:54:18.181454Z","last_seen":"2026-07-01T01:54:18.181455Z","alert_count":192,"request_count":64,"received_data":2876838,"sent_data":35424,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-06-26T04:16:42.959688Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-06-26T05:59:17.618077Z","alert_count":0,"request_count":4,"received_data":328851,"sent_data":1875,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-06-26T05:59:16.644955Z","alert_count":0,"request_count":1,"received_data":7732,"sent_data":517,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.64.212.191","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-06-26T05:59:16.47245Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":631,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.186.62.35","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-06-26T04:16:42.976898Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":535,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/datatables.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"210e3a7d8b662e5eea1c22d89e2fdd6f","sha1":"6d458385886e25608bd6c3a959a7c5471214ffbc","sha256":"cdbc3bfa8d1f5bbdd1882deb160c9bb9eaf382b18008a55528e2edbb8bebf9a5","sha512":"350fb7b80da950c9d621f378340642edce6b8a45e975c648267d6a562044737760191a5f6f0827cf9d80e7579d8071f414098b58cd2e9429ec8e62b3c3182691","ssdeep":"1536:pVjf/jOxZF/FzN6KbOomB1N/t0l3tpQriEdQ5NDeY1lyoh60ikCyraAvZN:/L/jONjE0l3tyeCF0SGN","tlshash":"a09317a93a917899d66775f011af050bf23e68a7b448c8a0b064d9d53e74d9820fff3c","size":92857,"data":"","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.887663Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf2e407581b89b6002ce842d1d3f45ee","sha1":"73ace7ebd5da8db43d8aae7a9bfeaa7d6a74421f","sha256":"531860cf6261bd203021dbd24bf64c722970b8740a10f10887cbd57d3c57db2f","sha512":"4a9b68af6326fba10f1194c5c9db4ae4c0feb0f4ec193bde73913ea0dcc7000d75ad39ce315d73264512c0bc23f3d30001667866daece8191e4450a930939124","ssdeep":"","tlshash":"ce90041c00d550145045545077341040715d30031d0c1c5d3f4f00400f1413501f074c","size":45,"data":"","first_seen":"2026-06-08T07:14:05.924428Z","last_seen":"2026-07-01T02:43:41.908173Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8e5f626e21e78917e236b12b8b924d1","sha1":"ef8119d953b21dca66f2d8cbdb6359adeeefe346","sha256":"9f262328a9efff99bdd42c155a15db2a476854cb70377b5b9490e0b1694f8d5f","sha512":"0fe7cf91b4794996e3e97d6a9bf5294c834a5793e0e8e8d0e7b75b7ef666dfc62cc33078609872e82c9791f7c8b80e2b8608acc5a0d57b642457e672c65bc81f","ssdeep":"","tlshash":"a1d08c13b032400a1087a00a8386688c3038410b05380c293b8c518a3fb3f8c030d1a8","size":196,"data":"","first_seen":"2026-06-09T17:16:14.852709Z","last_seen":"2026-07-01T02:05:12.591333Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd6e3b75270c6810a76a1bec69a3628","sha1":"0e6519d6a4ea07922496fab4688c6919691d5c91","sha256":"6db025f004558cd9080d1875fd458bd370528f64c62ed392fc66546b7d6e7f59","sha512":"d5e34309d8c1eac2d5f65c12437f673877dab5de32a8c773f49b1e50b289b2c403c7db81fd7304e5b9d2d526fccbeb266170e8f33ac3b254f680212894354a89","ssdeep":"","tlshash":"7cb0120db0d75c67086360da673a9405201048172244c0413c5f02900f0186d13227ac","size":119,"data":"","first_seen":"2026-06-09T07:01:32.50301Z","last_seen":"2026-07-01T02:05:12.591861Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef5f908c7706760b40f4d5b2cda878e2","sha1":"88eb148fdb2727089020bfc67ad3a460a5479280","sha256":"faf6f902c4fd57e4e7d5482772d781c38c916bb2759cf277dafafc190cf72a84","sha512":"65a2f12104ad68641974868d24a047173ce7e65174d64fb441870a460060635ee1fe416f6a8d2c03546329e3861af0e3351a953689e8d275a67f9fe6ec3d9fa4","ssdeep":"","tlshash":"c3e022dfb88b409505ab2cd3b23c930f340100ab5e07acb8bead5ba40f0963c51b2a74","size":293,"data":"","first_seen":"2026-06-08T07:14:05.925748Z","last_seen":"2026-07-01T02:43:41.910208Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b0e3dd71e6f4122c2f352c1b09c427c","sha1":"0be2d45623369ed90943b99df5a164cc8ecba612","sha256":"7e1bd0b7fba7886d5cbf28927a7fe7965e9701e8c293069d91e9e1b986d88f56","sha512":"2ed6ada86ca373ab17904137b922ad4b68cd5785f06e2969acc8a805551c26755a672c1d32635598aa5bdbc2787a241d34e29d5fd27277cf2c275b2ed8142ca1","ssdeep":"","tlshash":"d25155897cf3b5a1576734692ffb4c127328555391088e20b8aeaaf4afc1012f668f59","size":2562,"data":"","first_seen":"2026-07-01T02:05:12.593467Z","last_seen":"2026-07-01T02:05:12.593467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f19335226838ed986074f0d36b967017","sha1":"79571ed79000ccf3d1c31068986fd9e0ebf7debf","sha256":"25d454f2eb6937619545b946e0facf932217c8cc150d19048a8ef8d70661a3e3","sha512":"fa8ddde255a91f023b5de8c0531046355a5349b897396a8c955ffb12721dc8323cf413b389adedc9fc7d8c9189d87660c3743e0e4b5c142668276e2d4bc14f64","ssdeep":"","tlshash":"73d0c03bbcb61097723f70c0070da84178d9103702c8cc04fc4f22c02f8002ea410708","size":222,"data":"","first_seen":"2026-07-01T02:05:12.594498Z","last_seen":"2026-07-01T02:05:12.594498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"59eeefdf8e82dd023d51947178fe717b","sha1":"f6d156b27246128527b6563bb1d13a57194b2a6c","sha256":"c2eb282c1bb8d9b9939891e0bba182d7f7758432d68946b77bf2b68e3b21124d","sha512":"59544d2cddec1504133eade65a12b2f8164e096a4ec04635b62bb557136b77e8d9312fa480b67058ad722e327a91146f6dd423fb5b077a14a63eabc7e518f96a","ssdeep":"","tlshash":"d951372cee460d9aa4fb4681bd51a099005473379d42fc087fae128c4f6ea3f71bca5d","size":2560,"data":"","first_seen":"2026-06-25T07:13:03.037336Z","last_seen":"2026-07-01T02:05:12.595698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"5291a7fcf260d8653d09bd53483c7a21","sha1":"543b0d3c7aa4f0e3ddcde6ff355cb73e8d4cc0c5","sha256":"41e8fea348da73e5a68e15b004a4097b4e04a3be2c9166b78c7641eee6799188","sha512":"d6a0c37e5a09da1c68e37255d5b8d9a59e4bd99a382acfda5ec78b0a39fb887baee174e35af6350f921cbf19334aaed743af011a248206ba8fa2d4b21f904d46","ssdeep":"","tlshash":"32e0683d3c7448a557a740f4c1fbf2293e1b30644454d95798aa8c6d6cf0fceae11ae9","size":416,"data":"","first_seen":"2026-07-01T02:05:12.596698Z","last_seen":"2026-07-01T02:05:12.596698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Cbzgowwk.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe560aba1935b8b39c27aa71dc58c8d","sha1":"57ca1d5bc344e6094a43b6b4caafad444e974c02","sha256":"0b7bcba63083ad1debda57e3152b6f65644d8a21fc14bb0fc9bb94e1acb10a0b","sha512":"e4af2de0e4e1a7febb2d879c0a4c1509d8c79b2a44bb7b85fbfab163a3176be3e94513d055341b8a3098c1cf50b16bf8518b1ec7cb44292abc29d8f7b68f895a","ssdeep":"384:8+mNMMmMwhaMaew3LtmBp3dUdhdr7NPCuukhP8ZvxklZBCQrdCfs:8+mQMGaMaewZmBByjhPkkhP8RBQrdC0","tlshash":"6d72e7b42310783f312f581d166ce9867336d198e55390199b2eec4e36cacc5adb3bb9","size":16285,"data":"","first_seen":"2026-06-22T17:07:54.172262Z","last_seen":"2026-07-01T10:25:41.76702Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-FggoWQFN.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b9ca5f9f3b05da0401449cc4db4f1a","sha1":"1aa8e99f1cfe2d6776fbae7ef2fde26b2b18db70","sha256":"da0316ae7fe87925382357385427467ab57c40fd0d8659988ebc9545bc3f1fe4","sha512":"4e972657231b7b56ec4f852a2a6e5d11bde9b12cf6a55a723095f48c0030dd66693b08b9b0a4a6f42699f80ee04604a2e0310d59e4dae291d29281028adc5110","ssdeep":"3072:7dkD8hG1K3qO0L+YIjJI4JvGuzJmiJvGIJ4zXwvzSiGrKt3z+F00x61GfNVsIcuR:k8hlqO0LQ7hjPGrKt3kfHsIcuwtkqnQ1","tlshash":"26443ad53294b03543db51e6906f1106f33e5c19580d812cf269ede678baec8a2b7fb8","size":272004,"data":"","first_seen":"2026-06-22T17:07:54.09355Z","last_seen":"2026-07-01T10:25:41.923674Z","times_seen":346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/jquery-migrate.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ad1c636d9fb5028d48c133f428eebdd","sha1":"a7c399e974de32fb023d73dcae6c610fb643fa05","sha256":"f7573d5c433cc851f6327f5f9fcc9068d46f26c12bb8bec772dafa262218ed4c","sha512":"80cdeaec7c48ed3247caa863f66f1c441f2285d3c6bbb17be3eef5d2d4484944b224ec636f3c83bb53ce55594fc9d8a5c96b6d3d51066b7ad003eab2065b1766","ssdeep":"96:5r3UrDAWhTAETMu3QXveMIIa8JdFFh7MyAgxr3KFBF/s++EHzDFvsiMAG:5rkrDNhTeeMIIa8J/Eg96DBs+hlC","tlshash":"e612b79d7156b9764ff775b8f03f839b727209d929098a00d26cc9ea342cc59813afb4","size":9033,"data":"","first_seen":"2023-03-07T12:06:40Z","last_seen":"2026-07-01T02:43:41.89537Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/scrollUp.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"63bbf26c1fd78c531513dd6a4a2e4f51","sha1":"f349a84e4c1bf94aa3278bc578043b52a9ce33a2","sha256":"b7662ba99a132eafd0b7ccc8c3404c8ae442d97e7e6b73bb3ce0d4f11c28c98c","sha512":"8001cfd51233473a250294b7f8f2395240ada1e069771040b7110fb32aafb0f37de7443ba03f944f685a7eb705a05d38a2c84218ba9c4a047976152d84272374","ssdeep":"","tlshash":"f94100492385e52002de517cc06b0f4ad451e0dffe2a50fd505ceeb90b6177492ae7fa","size":2035,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-07-01T02:43:41.866797Z","times_seen":3310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/lucide.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"df6d5bfb41afe85fbd781e31fb8e78f9","sha1":"1c0bd4f39de05355e7469b59b70e30971639ef37","sha256":"3b274d9494069d5e6964f8e487a8412cd07d26d55de483762c8443061db01a4e","sha512":"55df569eacdd305430c2615da4c6b15dde1e10fe31fb581f428bbfa61da41b44e0fdd853f728870fd3ec9822a1cfb4a93243203b226c6703868b26b88ab4d1da","ssdeep":"3072:kafULUsUhDA3FhCapQrOXSuvohP1mbS06W7+NAlQlT62Jt6WlqQTNEOFcb8rGQXx:vBe2ZzJTprGyx","tlshash":"2004cdafcfca561f1956e3881a47f0451fee23bd3b0a8d12b18dd672e115812edb3612","size":179967,"data":"","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.897116Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/magnific-popup.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"012ea90f2b209b3f46e44186d2b81c30","sha1":"3789cd331f4f074f040852c59190be4b3407c082","sha256":"322e662b8168f295462a41ed722a0f5908f8258f1fc436500c3c30a28afac6cd","sha512":"9cb2e86d30785fa2438537639645c1badafdb907a7cdec6598790edb74279aa87897fbb957e08da1b38e791991b375029cbfcc1b57759c07ea3a5beff63a9934","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"21921894f2b2b21383a735b8686f700939729952ed06c855a55d94d87efcec89037f3c","size":20221,"data":"","first_seen":"2023-03-07T18:40:28Z","last_seen":"2026-07-01T02:43:41.907533Z","times_seen":570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/custom830b.js?var=5","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a928f19dfed84d7b13ef6c9d0b02616","sha1":"7922d93cc683f9ff49b238777ed6690c4cb621ce","sha256":"949bd21693a84360805561d934072d1ecba159972d02d837207b9dd8321bfb66","sha512":"c8202571e82403cf9c5bfba04dff754ab78f94879a46f551b3043373757612ae55dec4c81876f6aab9b47f70ddb10c995486ff81c9eec0b29cdb7e7d73b03646","ssdeep":"","tlshash":"d131040c7cb36991897730c95f6f9846b4681053a80ce711fcad9ad55f2142ca1f66f9","size":1648,"data":"","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.885567Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/bootstrap.bundle.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb6506b3ec2fe83b65e3ff9d849de479","sha1":"db9027cead4c80d8c35c5927e93c83a75b2a4950","sha256":"60ced5a40c44bfedf1b5e751918722306004575b5006b95468b0643df705c153","sha512":"19fe7d6b6f714e4d7c007a65dc0647c62b48ad61af370b799ce0cacee62de4ff278e64a6a4b11c155685cd8a73149685ab2c2573a8dacb515326c9dcc8fb400b","ssdeep":"1536:ppXbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZC:R36WJr9ixM","tlshash":"d373c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78131,"data":"","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.899567Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/jquery.nice-select.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-07-01T09:50:05.152237Z","times_seen":9672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/main830b.js?var=5","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6bf8119525aa0b9912aa70a0d4ceaf7","sha1":"f4afa6fad9512de01a6ad6c287e0f61dc8e71017","sha256":"e0239e34815a244bc709895cbc12f6834b7a54d79dbcda61d4ba0055c7311038","sha512":"515c639f9faf304ee3909c1c663b05b7f1489c34cac94f60660deb76c9c6e78aab37d44aaee36ffe82af99ad0681e7908fc2381e02094b68904bbf6c827c0b3c","ssdeep":"","tlshash":"7f71fd19f4f121b194bb70e59fbb52462b28400bd406de20f8de4fc44fa0539d6a39ee","size":3727,"data":"","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.891386Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-01T10:25:41.734945Z","times_seen":4077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/waypoints.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e60259b65cdb3c30898c7bdf80f27ac0","sha1":"5e1c30f1d8d87c4c37de5a74dab08f8042ba9954","sha256":"0e4f2f63ce6e34ca81f971ddc848ac33e9853872b71c0b92b19ebdd2821cc91f","sha512":"ee43972c25fe6889c9786902c50b172163366f548f532fe757f655f8e609a406c537b91e2c777d8285ef44a868d62b81ef7fea21b2a0151fa75cbdd320ef6432","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KNRWzdBUVKdBJEdfdpu531v8Lr:uPG3nC19KWssPVpX4KNReU8Ju4en","tlshash":"baf1f9c9b4c6b4221befa0b5d43f060bb33a9d4561098068f194e4da3db4a2da567f38","size":8046,"data":"","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.896187Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/jquery.counterup.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-01T09:54:12.619713Z","times_seen":11775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/aos.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-07-01T10:06:36.102792Z","times_seen":20894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/cookie.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecb25dc3b49da19832c3e07bc366b251","sha1":"f74d17b2eec3ad87556222b0ff51b02f53edf2ca","sha256":"e32a5ff4dc67b0c48677ee6408d207db56c4669211bb457c1eae1fd3133f76ec","sha512":"bcc04b45e99349c41a5089eeaae4e2be2776732566784ad067307a0f46f6868ad1810dcb58502d1696d3356343878920f716ad0b32df55d242914aae6962746f","ssdeep":"","tlshash":"5e311128b2e259bc4b17251487df83ca387011130075c55db89eeb711f84c1b8d6bae7","size":1705,"data":"","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.906896Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/jquery.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-07-01T09:53:28.651037Z","times_seen":32639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/owl.carousel.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-07-01T10:20:32.80517Z","times_seen":62295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.1.0","filename":"https://traders-gain.com/assets/global/js/jquery-migrate.js","line_number":2,"column_number":696}]},"http":[{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/custom830b.js?var=5","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.674Z","timestamp":1782871473674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/js/custom830b.js?var=5 HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 615\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1648,"size_decoded":937,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8a928f19dfed84d7b13ef6c9d0b02616","sha1":"7922d93cc683f9ff49b238777ed6690c4cb621ce","sha256":"949bd21693a84360805561d934072d1ecba159972d02d837207b9dd8321bfb66","sha512":"c8202571e82403cf9c5bfba04dff754ab78f94879a46f551b3043373757612ae55dec4c81876f6aab9b47f70ddb10c995486ff81c9eec0b29cdb7e7d73b03646","ssdeep":"","tlshash":"d131040c7cb36991897730c95f6f9846b4681053a80ce711fcad9ad55f2142ca1f66f9","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.885567Z","times_seen":58,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/7oF6RLsG8iAPmNCCKnC7.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.686Z","timestamp":1782871473686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/7oF6RLsG8iAPmNCCKnC7.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6284\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6284,"size_decoded":6549,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b173512e07f0bf4c3e2688bd18fbbf3d","sha1":"898e5d3e1dbad387ba623990de689ceb967a00af","sha256":"baefdd319f8e9ff3a59a05c91c15301ac8489e4f9ad6e3ea1c93c1852342b7a6","sha512":"7ab65a660477ea1b16103c0a7e334bbc23f5360c2cfe84647607f6fa2b6529841d10b1c07575063ab8c7c8cbdb2f12b909a2a21635254f878f8f8ca2a9abcdab","ssdeep":"192:mish230P4+2LN9ujD+Rihhxl+nQP9onnnUxFiLV:u284BJ9uWRc9+QP9onnoFiLV","tlshash":"11d17d423537a4884d462ec4b54c8c88d9536935e9423ed970edbf64de749f8ee80c7e","first_seen":"2025-03-15T23:29:02.523983Z","last_seen":"2026-07-01T02:43:41.888704Z","times_seen":89,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/kvyU9Mr9gYTrpoKNZZNi.jpg","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.695Z","timestamp":1782871473695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/kvyU9Mr9gYTrpoKNZZNi.jpg HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 324297\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":324297,"size_decoded":324565,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1000, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1500], progressive, precision 8, 1000x1000, components 1","md5":"7cbb5e1cd2cf93993064a605d629ea34","sha1":"5f0f2b9264d7cd797b06dcd3c22da343a37eb69a","sha256":"ad84260fccc51b68767a5e94a5c28a56cd0be83a435bcc147ebb713f8035011a","sha512":"4b28d916645b30677e57f8ebca3e1b22fd719e4fe0b7b28744b806c8c9d496e42d375cd6479587d4108f158c8ea68aa6113601d17459b713186d54c88b329cc7","ssdeep":"6144:ZG3GHEDqDKvFl+gxy6WVDg2A5OP0TvUnm9ky3twMvW+czIBueI:ZgjK2nWVDJvAEm9D3zvW/kBuL","tlshash":"bf6423223f7e3ed7e3a11ab2dcd24465e1419df26d96a217b8df06723f2799a8c04112","first_seen":"2025-03-16T05:56:16.497999Z","last_seen":"2026-07-01T02:43:41.86853Z","times_seen":38,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/fonts/SofiaProBoldAz.woff2","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.926Z","timestamp":1782871473926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/fonts/SofiaProBoldAz.woff2 HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/assets/frontend/css/styles02fc.css?var=2.1\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27968\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27968,"size_decoded":28235,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27968, version 1.0","md5":"a717ff904324d13f94027dfe58ae82c2","sha1":"ba243d01e956dea741097ad432892c79d3554691","sha256":"44806086743c18f57b33a590c6515521a4b08fc7d12ed46c6895841dd5d04105","sha512":"1fe9e12a4a45b137204ab29dd3ba8fe32b593a4043ebc80cc4bf47900f66aa8cb295b1a9b59453e90405f11b2049999a02137dbb4c5e4e84a6aff948097800df","ssdeep":"768:Hxq1F358ydZBfud5uSKNWe8HFg7Gp4boe2llUHAnE:HQz3Rxfu7uS0X6p4b7AWAE","tlshash":"28c2f169c90be021fd4e9cfe70e9e20ec7814070d563a5dad8d8b815af2b45c63cd50a","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.877934Z","times_seen":202,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/css/datatables.min.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.640Z","timestamp":1782871473640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/css/datatables.min.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1540\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8467,"size_decoded":1849,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5737)","md5":"09b073de893b1d6224844f4271d15450","sha1":"ff86ea9945bb6eecc5a76d1bb6da67ad09f035cd","sha256":"0827177f1e6b61bc6ee27c2cce37688ac7dbe77f13b9c7a347ac14b0611377ff","sha512":"74220bc9b5ac6a2f1df51438cc8496bd8e7ff4e95db1cd8ab17d939720478dd52b253c1cf816a64d6f8ec20d84413420e2e7bae3f16ca0323d79faa80911df30","ssdeep":"96:Fwa++K3mXJvJCQeimBmw5/NxfdWuVlMY2areqt61nRzbv:Fwa++K3mXJvJCQeimffvWuPoJRzL","tlshash":"0b0246b0b3a274441356e8f5610c39b06d30b024a92e88fdac89c7ef8f06c96b3d5d76","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.893947Z","times_seen":214,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/gn6bCbbpkTCtTWIuPzzP.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.684Z","timestamp":1782871473684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/gn6bCbbpkTCtTWIuPzzP.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6024\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6024,"size_decoded":6289,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"7335e84b503cd5f4f8801264751082e5","sha1":"270dce5b06e76e48a63a6c458dda285a4779a561","sha256":"ebf4a699b7ac6099f5e509fe744c70f486c05f78cd9a67f4b8323d2fc77ffcfa","sha512":"479ad4a5ac13f39d474674a36e9b6f4e5633f69b7c63fb5cfd16d511d264de9ccddaa1de982e02bb7bc6f5f06b5519752c0697d6f7feca5ff8d462977d2911a5","ssdeep":"96:XitwLB0QuMq+NFhoyjn7eG1783z449HpvtIdY2h+FgbomLy9TI8OLuejDCNwY6jI:Xi4qEe6Mz4AHNtx2hxoIBdGeje1a1U","tlshash":"40c12a0564a374d367fffc283aba06d6cc55c766542603a607bc2abb42b2d07820e7a4","first_seen":"2025-03-16T05:56:16.481052Z","last_seen":"2026-07-01T02:43:41.881469Z","times_seen":92,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/VQ6BURZon0q6bC0JaUmp.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.692Z","timestamp":1782871473692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/VQ6BURZon0q6bC0JaUmp.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3633\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3633,"size_decoded":3898,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"87b4b407c4abe614a14a3b0e937cd04e","sha1":"575d2ae1b438de76f63a9814f6d86405e74f1767","sha256":"cd458fd88017f3f797ca764b73d2d9782d64260442310a1c47a3bdef48707aa7","sha512":"796ad71cf2b20b8dc7b1a01eb5cf076451efbb1a6c86e75f63a04956a5381b0f7ad5d44379bd98c8045be6f2eb95a8cde32314e70640ddf19d007ce8b504661e","ssdeep":"","tlshash":"f4714c4922a2d9ad7d74e52c9027edeb45d605f68060a229c95f515dfae01c01081ac6","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.90453Z","times_seen":203,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/DJr551o3d9Rbnvi0K6MM.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.693Z","timestamp":1782871473693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/DJr551o3d9Rbnvi0K6MM.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4727\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4727,"size_decoded":4992,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"5a0d5773f8d3a1c51e955e88f9dfff06","sha1":"e265d596db58c750a2be6781b5fbbda185f411a2","sha256":"1e0547fe794e288d4dbdaf3f83bf9973e6ed5bb56f07fa6d5e55605394f04ee1","sha512":"8d304079a7ea55aad10bf5b25daa9eea3f774651951f7d072cf72648cf73cdc7bba92ea1fa2a370ddc31c8d3cf25cd8cdb61b39bb8e0ee2d16adc459c7bf38b2","ssdeep":"96:HdEcBm05MYQ4WIIWH9lR6a8IDfs1RgpKKrBikAgD9P:ecQxeIqR6aH2R/Kl6gl","tlshash":"a2a17dc3e0d02a9a68488c55b1bb0a74cde217f7570e9a1eec88bf17cab998555ba050","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.883739Z","times_seen":168,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/cxq0OgALCgYjCCcoI6f2.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.699Z","timestamp":1782871473699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/cxq0OgALCgYjCCcoI6f2.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24389\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24389,"size_decoded":24655,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c2ee2364d09132319542a22beb40c10e","sha1":"d5a2d5ca1030ba0bc12df6732af9da777064a72b","sha256":"368015dda1dfdebd423dc07b53eb22fa5ea9a7d5d82f3e955c0fca339fff5a97","sha512":"bb9159d27cf254b56ae9725d3a0c9e8835dd5609e63c9f193927b7f2816ea7a0ac74092a50b9cdd832d7409ebcfe5b792e8256caf9b8f2b3908209ade887eebc","ssdeep":"384:Bwpwm+IsmsajSANak2l4Bcx1F9k+WzfgIOrE+Kn/mVKOD2c+Q0HdC2arSMA7vW/7:BbBtL3ANakC/HT9Wz8on/mQOD2c+rHdm","tlshash":"b8b2d0293027a429ad4d847a2e3a1f4d7a5d0dfca01e5f70778feca27578119185bbf0","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.877394Z","times_seen":206,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:34.383Z","timestamp":1782871474383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 02:04:41 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k2EPx1sZOw+RfPKV0S9LhwQ5+ZtFe54bZqQA8vGew2/hfdJkDfIZPNa5uS/fBNWFyRmRDLQ\r\nx-77-nzt-ray: e2f754208af745bfb975446a445a8504\r\nx-77-cache: HIT\r\nx-77-age: 34\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-01T10:25:41.734945Z","times_seen":4077,"resource_available":true,"data":null}},"time_used":6701,"timings":{"blocked":-1,"dns":10,"connect":8,"send":0,"wait":13,"receive":0,"ssl":6670},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/css/nice-select.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.639Z","timestamp":1782871473639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/css/nice-select.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 880\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3910,"size_decoded":1188,"mime_type":"text/css","magic":"ASCII text","md5":"5384aa1a082d9567f1a9120b5399b3ec","sha1":"2595bf6b55ef33629d3c82f12ac7f5348cf4ad50","sha256":"047daf51479c888937fe7a20d3eb41ef111a1749d4e413a6e04414380807eac1","sha512":"8e30b98282c5aadb4b2fefd9a89bae8c368100f850e466665885590d63af0d566e3d9bfe5bf04523c73bd0dd40022f81f15ed19b02523ea2e5637ce21e6c002f","ssdeep":"","tlshash":"d28105799a531942642e876fafdb6b18233dc0436426d86cb7c1960b0f0e69c8cd6b4b","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.874198Z","times_seen":83,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/vendor/mckenziearts/laravel-notify/css/notify.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.642Z","timestamp":1782871473642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/vendor/mckenziearts/laravel-notify/css/notify.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2863\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13834,"size_decoded":3172,"mime_type":"text/css","magic":"ASCII text, with very long lines (13833)","md5":"bff0eef2aa8dd0040ebd19469888e9e8","sha1":"5057a23619b29f834f39010677dc81d2a59b5805","sha256":"4b974ef299fab8bcd4b116bd7ec6b29e94baf8c89f59c9eba8154a00b695c90e","sha512":"345b68cd733b3b946bd2f690d4ceb1f00c08ff1c6b9a2160c02be468faa01b908d416a5af719c693798097f0390129bdb061174f64910f02f928ecf73bb4d82c","ssdeep":"192:/a0w+7JNsfc5RHpmdFwSM3qCatCESKXmR:gAdRJAqNajCZR","tlshash":"8c52741eab56102f7c2741f6e6a8ee8cd117a4c4ce3365dba9839506cf913fb0d16628","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.886616Z","times_seen":245,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/owl.carousel.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.661Z","timestamp":1782871473661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/owl.carousel.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11139\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44342,"size_decoded":11463,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-07-01T10:20:32.80517Z","times_seen":62295,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/UHm2cfbMPGZmbZNT2bVC.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.902Z","timestamp":1782871473902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/UHm2cfbMPGZmbZNT2bVC.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27984\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27984,"size_decoded":28250,"mime_type":"image/png","magic":"PNG image data, 300 x 166, 8-bit/color RGBA, non-interlaced","md5":"af39e8cd39c82eaac9cd578c404a87fb","sha1":"2bb94a3cb75768dcb01b47c2d67d8a7e3bb0a204","sha256":"082f2ea1a9c22a83518bc2a4c277e9309386966e3da561a0c4591144c6938594","sha512":"4c401d63914dfd562c0fca0ac40cef39c7d706ae99429611c50822f413b3da88be9b9d8d1347f8e511c4d87f2274eed79290663317002a9107584a906f9a10e5","ssdeep":"768:jvhAtsi25DVuJc4/8MqBkGrEtIaytYXCo6V71l1ZIo78:7hRi8VUl/dI3rEtMYPIbIk8","tlshash":"36c2e11db607f602126269b338337a59df1a4788cfa17d03accac7ce85611a1f9613e3","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.897996Z","times_seen":99,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-FggoWQFN.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:44.597Z","timestamp":1782871484597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/shared-FggoWQFN.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://traders-gain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 02:04:44 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a39150b-42684\"\r\nexpires: Tue, 22 Jun 2027 11:00:05 GMT\r\nlast-modified: Mon, 22 Jun 2026 10:57:15 GMT\r\nx-77-nzt: k2DUZm6vQvwbNbvk4gMos2JIYlV/vPbOIidFleYh5A6w+3IyBpOkcc3fPE4brZew8RUbYlU\r\nx-77-nzt-ray: fdb54123b49f8e01bc75446a1178da23\r\nx-77-cache: HIT\r\nx-77-age: 745464\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":272004,"size_decoded":92555,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44711)","md5":"d3b9ca5f9f3b05da0401449cc4db4f1a","sha1":"1aa8e99f1cfe2d6776fbae7ef2fde26b2b18db70","sha256":"da0316ae7fe87925382357385427467ab57c40fd0d8659988ebc9545bc3f1fe4","sha512":"4e972657231b7b56ec4f852a2a6e5d11bde9b12cf6a55a723095f48c0030dd66693b08b9b0a4a6f42699f80ee04604a2e0310d59e4dae291d29281028adc5110","ssdeep":"3072:7dkD8hG1K3qO0L+YIjJI4JvGuzJmiJvGIJ4zXwvzSiGrKt3z+F00x61GfNVsIcuR:k8hlqO0LQ7hjPGrKt3kfHsIcuwtkqnQ1","tlshash":"26443ad53294b03543db51e6906f1106f33e5c19580d812cf269ede678baec8a2b7fb8","first_seen":"2026-06-22T17:07:54.09355Z","last_seen":"2026-07-01T10:25:41.923674Z","times_seen":346,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/main830b.js?var=5","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.671Z","timestamp":1782871473671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/main830b.js?var=5 HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1169\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3727,"size_decoded":1492,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b6bf8119525aa0b9912aa70a0d4ceaf7","sha1":"f4afa6fad9512de01a6ad6c287e0f61dc8e71017","sha256":"e0239e34815a244bc709895cbc12f6834b7a54d79dbcda61d4ba0055c7311038","sha512":"515c639f9faf304ee3909c1c663b05b7f1489c34cac94f60660deb76c9c6e78aab37d44aaee36ffe82af99ad0681e7908fc2381e02094b68904bbf6c827c0b3c","ssdeep":"","tlshash":"7f71fd19f4f121b194bb70e59fbb52462b28400bd406de20f8de4fc44fa0539d6a39ee","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.891386Z","times_seen":133,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/cookie.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.672Z","timestamp":1782871473672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/cookie.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 655\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1705,"size_decoded":977,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ecb25dc3b49da19832c3e07bc366b251","sha1":"f74d17b2eec3ad87556222b0ff51b02f53edf2ca","sha256":"e32a5ff4dc67b0c48677ee6408d207db56c4669211bb457c1eae1fd3133f76ec","sha512":"bcc04b45e99349c41a5089eeaae4e2be2776732566784ad067307a0f46f6868ad1810dcb58502d1696d3356343878920f716ad0b32df55d242914aae6962746f","ssdeep":"","tlshash":"5e311128b2e259bc4b17251487df83ca387011130075c55db89eeb711f84c1b8d6bae7","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.906896Z","times_seen":240,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/materials/arrow.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.904Z","timestamp":1782871473904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/materials/arrow.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/assets/frontend/css/styles02fc.css?var=2.1\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6108\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6108,"size_decoded":6373,"mime_type":"image/png","magic":"PNG image data, 80 x 70, 8-bit/color RGBA, non-interlaced","md5":"524a21cb896a7e0c603cf14f4e7e707e","sha1":"03ef6eb23e05f5191152b3b0aaa0eedf14e46e9b","sha256":"b0e42b830128e9c4b12e2a80280cf5a61f37c8ce9e829d1e93780e23300e7325","sha512":"3d03fcfc82e723107bf6fc8a9e6ff30c401effe811828366ed00ae78293114a9bf531332f96d7ad7b327ab9c15a23601c67a04a07cc73b67d3638b97d2be3788","ssdeep":"96:Uo7F8knmWIJb/H1pUhHo4H9FHH3kDWK0i8cOU5fxtJjFXIX1EDxNcAT1HrkNDWCf:57F8knCpUhI4v39K0JUnT58CDxqAT1HC","tlshash":"8dc18e2fff618da597cfe5447efc239622bf42438d508110bd9ae8297c604b9da081c7","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.898784Z","times_seen":122,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/qlB4VmIk39zmpZhjQ2D3.jpg","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.908Z","timestamp":1782871473908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/qlB4VmIk39zmpZhjQ2D3.jpg HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 132258\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":132258,"size_decoded":132526,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2119x1415, components 3","md5":"81064ad72ce70cd0e36becfc664198b2","sha1":"33112bb7dfc582797cac14f3da298978bd7fcd8d","sha256":"7c371f633fc183653869c57b7118dabaf7365ae8f1760c388f2ad819a05edae5","sha512":"2a5cc0fdec1ad8a523af186439e870747e0275a6a687686a6d85168ec3b019f08fc94ed47e390acdae29be5ad3cd7522fd40152b49e1600e9fe326c4e8e3d573","ssdeep":"3072:5CO2PavsGT7l9wZiZKCSUyW+aIqCXRrctERrczABR5UpNDciG:5CO2PavsBZiPRyOYit2QNDc5","tlshash":"09d30285a17c9239c1119776c7c1cb79381c2ea6df1ed38552cafdb6c027a6080df49a","first_seen":"2026-02-16T22:04:50.282199Z","last_seen":"2026-07-01T02:05:12.550355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:41.259Z","timestamp":1782871481259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://traders-gain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 02:04:44 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a39150b-891\"\r\nexpires: Mon, 22 Jun 2026 11:05:05 GMT\r\nlast-modified: Mon, 22 Jun 2026 10:57:15 GMT\r\nx-77-nzt: kx9rZ4ifulPcnWhVyHB0KfvY5cUnQD8BFgQ46MkhrybkmXD1TuBsWbm8XCq0g1UikwRQl/Q\r\nx-77-nzt-ray: fdb54123b49f8e01bc75446aa6cccd20\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 36\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1034,"mime_type":"application/json","magic":"JSON text data","md5":"326e8bab008c1dbcf74f1d071d74b532","sha1":"38ef7ed5782ba7454bfd5ee59348283bf9a25f27","sha256":"15f5a980d7931c3d3c63d03733ab468c0352e210185294cfca411f903eabdbdc","sha512":"8293bb58ae378beec93e7ff6e7b12a37444d5243382ea06ad969b80d32c1fc317f987579f966a9ec01ab73df4054ac2f9448a342b4881bf071e2cf53880a258e","ssdeep":"","tlshash":"31417987c4f80e531b8c6227b89045515d90c3c7d88a3e0d72ad9a7f2f4cdaa20d6b7c","first_seen":"2026-06-22T17:07:54.215405Z","last_seen":"2026-07-01T10:25:41.939496Z","times_seen":342,"resource_available":false,"data":null}},"time_used":3296,"timings":{"blocked":-1,"dns":10,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/css/magnific-popup.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.645Z","timestamp":1782871473645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/css/magnific-popup.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1663\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7426,"size_decoded":1972,"mime_type":"text/css","magic":"ASCII text","md5":"75567787dc97790c4ec2e4f32b8622cf","sha1":"b000b2f1835a8d3232f672bef74899f35de17787","sha256":"27a85f640e62285076c660b4d7d51e3b0f2fe32046842ba43731c99a9e94819c","sha512":"0c7a4d1b519142a0ee1f74bc9a2b08ac0e8170720c42f90169129dcc26b5faa8de042b50117f78acb2596f476702c9fadba0f060eccf54a748ee0e2a87695f5e","ssdeep":"192:phYfYI4/KniUr1ZhTUgQsN6Oc6P3uM16vtFHUeT3FM4a3E:QrlP8F0SFh","tlshash":"dce131965fb31b01e51ed5a89babe705231a0053d30bcc6b7fcda548cf8e2888562bc4","first_seen":"2023-04-05T07:58:19Z","last_seen":"2026-07-01T02:43:41.905986Z","times_seen":2725,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/css/styles02fc.css?var=2.1","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.649Z","timestamp":1782871473649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/css/styles02fc.css?var=2.1 HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20724\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":194527,"size_decoded":21034,"mime_type":"text/css","magic":"ASCII text, with very long lines (315)","md5":"514b6adb66bbf78016b4c91d9efaf825","sha1":"7bc7bcecc6565c35d9622d4035494a54d41ddad7","sha256":"bf895511c99197092b23360b02793762caeeaf0530bcef5681e22bf6651011c9","sha512":"0fa621802112fe87579b5dcf3f7be70be11229451d8a9e67aa60857dbe606f42149b43a2c022c14be6bcbe166cf5fe063fc34e548fb7383df1a706609dbb3711","ssdeep":"3072:8E93SfE93kPDel3CuZXZHkTc9D4y4P4o4HFeKHOt5Vc5lW:8E93sE93wDel3CuZXZHkTc9D4y4P4o4Q","tlshash":"37143e91e2fb1990620fd4d42beb9640270d718b844a8d6cfb8af75cdfd529095a2fcc","first_seen":"2025-11-22T18:05:08.10808Z","last_seen":"2026-07-01T02:05:12.553105Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/aos.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.668Z","timestamp":1782871473668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/aos.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4194\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14239,"size_decoded":4517,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-07-01T10:06:36.102792Z","times_seen":20894,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/fyPoqgPqQGspt8cfbFqG.jpg","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.702Z","timestamp":1782871473702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/fyPoqgPqQGspt8cfbFqG.jpg HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 148823\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":148823,"size_decoded":149091,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1000, components 3","md5":"02938e4f39091741b139a7b3c0a102b3","sha1":"1eb137d31b9fea1a082a85687d307b80b9f3886c","sha256":"ad8ef03ade49b8c45db68b3739484dbbfef6457d0abb66d3b3ed13b3838f0550","sha512":"7446523b1ad5fa729edb21058e9293b17906b099256a92158539a968c09039566c212644f30f71ea9bd5a87c9c8e7fb3d28dd85f6ecc26d6776aebedf015e4f2","ssdeep":"3072:eogaaaT5JfHBMHOGA6178jLl8I9361eEo/++kF8AsL/Bonb:WaJ5+dAKoA4Eoj5Q","tlshash":"0ee31205cb5f26c05939692724779f8c9b9da4e91d2ffe08696232763032d463ca3b27","first_seen":"2025-05-06T14:57:09.988103Z","last_seen":"2026-07-01T02:05:12.555504Z","times_seen":25,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/css/aos.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.648Z","timestamp":1782871473648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/css/aos.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":1848,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-07-01T10:06:36.057272Z","times_seen":39735,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/magnific-popup.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.667Z","timestamp":1782871473667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/magnific-popup.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7048\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20221,"size_decoded":7371,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20092)","md5":"012ea90f2b209b3f46e44186d2b81c30","sha1":"3789cd331f4f074f040852c59190be4b3407c082","sha256":"322e662b8168f295462a41ed722a0f5908f8258f1fc436500c3c30a28afac6cd","sha512":"9cb2e86d30785fa2438537639645c1badafdb907a7cdec6598790edb74279aa87897fbb957e08da1b38e791991b375029cbfcc1b57759c07ea3a5beff63a9934","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"21921894f2b2b21383a735b8686f700939729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T18:40:28Z","last_seen":"2026-07-01T02:43:41.907533Z","times_seen":570,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/I79d1j4CUeMfRtGHs1nQ.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.685Z","timestamp":1782871473685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/I79d1j4CUeMfRtGHs1nQ.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9839\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9839,"size_decoded":10104,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"088a48a7e75b191035bd5be01ccfa7fa","sha1":"ddd56c5b43ed9f04443e1e8dce3dc791318c1b2b","sha256":"73fa2ae7e69b4227fda424164a28e990127a712392aa54eb6f701c2e0bf1e099","sha512":"f63f964e8762b02476fc98dde4ccb687838606c3da607a285ea6797b559ecac889fcdbd2bcea45115d96aae043f3bb523a6dc6dc37cf5d5e5bee76d51838a332","ssdeep":"192:G3+dAo3SRrkrDVpUUW8R5VLrhFMHK5QqLMa4plcGQsQOwf+RqpUwGnk/cEP:G3+ioEk93zRfhFM8AXlc1BQHkvP","tlshash":"3e12bf4b6dd789d6149b2947e402fd8fc7063e15c9151b0bbb287f8c9bba017362da09","first_seen":"2025-03-15T23:29:02.436798Z","last_seen":"2026-07-01T02:43:41.882669Z","times_seen":94,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/nGSUZHiPXmm63xFi7xjc.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.690Z","timestamp":1782871473690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/nGSUZHiPXmm63xFi7xjc.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3021\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3021,"size_decoded":3286,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f3d1da9015b27ccd1e7295047ef04d67","sha1":"7592f014dc172ef5186c09ca9e22e1816e124644","sha256":"a980523d0dabf277baa8d345e5b51ca7b09f52e8c3a389c5db69ae737e9c9648","sha512":"6fc90cff04c728caaa6d8f63fad2c24bfdcd69c5f03f5fbf8cce7028ee00dab8fa89a799c2025a049bf5cb7b4b0fe5d5d8a6718443c44464a2ec350e522c9fdb","ssdeep":"","tlshash":"c3516ecde3c37970d94a3424c503765ff963c22271ed945ac0eadd07662f6432465b57","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.900318Z","times_seen":212,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/fonts/anticon.woff","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.825Z","timestamp":1782871473825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/fonts/anticon.woff HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/assets/frontend/css/styles02fc.css?var=2.1\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: font/woff\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40060\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40060,"size_decoded":40326,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 40060, version 1.0","md5":"f74d4710e283fcff1daa8e3677c7cd37","sha1":"791fc17c151aa70202c255bff5238e3cd00ba992","sha256":"26acf0061536c17f5f72c0159a7c490016fedb5597bf159eabea95b04a6c90d1","sha512":"49cdb0d59977d30b466af47d85737079022eb80571e32c9e7d159dffcbe359f4f9f2ab6e587b725c649c5086db1612b323f62086c96ad7365527e873895113c3","ssdeep":"768:Czwh2FhIV375azN5fCy0OsNJf2jrw5kTU7SdN851gdZbGYWcRUqCXXfzIZOzolJ:Czwh23IR8NF/oNJf2jlTV8ngdQA4zIwW","tlshash":"6a03f1aedb64cc717b02633d5a6a2f75f84b40e385fb5ae688405387c55a58d942f031","first_seen":"2023-05-19T12:19:40Z","last_seen":"2026-07-01T02:43:41.873371Z","times_seen":143,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/sPRwlwtyJVvQ1DRqoACh.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.907Z","timestamp":1782871473907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/sPRwlwtyJVvQ1DRqoACh.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27984\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27984,"size_decoded":28250,"mime_type":"image/png","magic":"PNG image data, 300 x 166, 8-bit/color RGBA, non-interlaced","md5":"af39e8cd39c82eaac9cd578c404a87fb","sha1":"2bb94a3cb75768dcb01b47c2d67d8a7e3bb0a204","sha256":"082f2ea1a9c22a83518bc2a4c277e9309386966e3da561a0c4591144c6938594","sha512":"4c401d63914dfd562c0fca0ac40cef39c7d706ae99429611c50822f413b3da88be9b9d8d1347f8e511c4d87f2274eed79290663317002a9107584a906f9a10e5","ssdeep":"768:jvhAtsi25DVuJc4/8MqBkGrEtIaytYXCo6V71l1ZIo78:7hRi8VUl/dI3rEtMYPIbIk8","tlshash":"36c2e11db607f602126269b338337a59df1a4788cfa17d03accac7ce85611a1f9613e3","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.897996Z","times_seen":99,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/fonts/fa-brands-400.woff2","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.928Z","timestamp":1782871473928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/assets/global/css/fontawesome.min.css\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77444\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77444,"size_decoded":77711,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77444, version 331.589","md5":"91a23e8bf2b4b84c39311cb5eb23aaa0","sha1":"992e28bfb17bebc55d628d1b743d4c7d20082c19","sha256":"e98ae3ff936b4723cd8a2377d2c549a667ce87e81201ec4995cc01bd374c1288","sha512":"b5d7c675c1dc26d3ece7d7969064d6e7c9806c7825d6a8c600b4cf70813671427f5854720201870fe006057300daf03da92d6949a92726ae8700fc93f33a77dc","ssdeep":"1536:xK8JQ+TVbXbfuv8zuSLeV74SsRg6aWWPPjTduvyR2lBNjJI:bzVbGEzulaDRg3puKR2lBNju","tlshash":"5373027909f465acaa48b1777fd97c4c878d88ac2e974c3416077e12d861b2f19ec13a","first_seen":"2023-04-17T14:14:30Z","last_seen":"2026-07-01T03:58:48.030332Z","times_seen":979,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/pDx6CXfol13SQ2gJkMKc.jpg","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.701Z","timestamp":1782871473701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/pDx6CXfol13SQ2gJkMKc.jpg HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 83306\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":83306,"size_decoded":83573,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1001, components 3","md5":"660d39160d03e2b6154866f0c1f2c26e","sha1":"dc5afe52d78ad9d4446e6a1c32bd8213c2ee039d","sha256":"2cb233a584b465009e5eb680c873a3c6cb3e91263892b5a2c247fb0b2a98d21d","sha512":"9238fa4d1d1255841a290889bdbb80aed21c122715e346533c776f6f03b304e6a9ea48c8cadf9f882253d5420035b78b5c78d0f1b75487edaa7216093c0edbc2","ssdeep":"1536:LNj5yjUOA+kaDiYZr6JOqQoesuTugHpI6WNqboozjD3Z+Mu2P12f/V3:LNj8hAZaOYZWBQoMTrHp5giD8Mu2PcR","tlshash":"358302274b52bd21d4d5cf75891b3a11c369ca3aa2c60013c21d8275e85f36b7ede9e8","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:05:12.56094Z","times_seen":105,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/iPiTjeMwuIfrJcghcVTU.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.705Z","timestamp":1782871473705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/iPiTjeMwuIfrJcghcVTU.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1930\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1930,"size_decoded":2195,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"c7832a0f4e9fbfc59ba1d8d63a991bb0","sha1":"4adb6b2a53f5d7b6085ebaf4fa92f8c3c1e145cc","sha256":"256e650ee8439559b4aa2e01987f4cfed86f51d3ef5b7dcce221af2501fcadf6","sha512":"30bb6129889a6d28b349dc87a1deea998ada9891c4b48605bcef3c8c00f3cdd9c4d091f730fedd745c24b851e4a05eb43cef65ad10ea52f43a4b9a8fff04297a","ssdeep":"","tlshash":"bc41f9f1279e94efd4c253d9c9920b0b90542170563126932321b1b01fcb8e7b6d1b67","first_seen":"2026-02-16T22:04:50.241417Z","last_seen":"2026-07-01T02:05:12.561478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:44.723Z","timestamp":1782871484723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 14:33:02 GMT","end":"Tue, 01 Sep 2026 14:33:01 GMT"},"fingerprint":{"sha1":"CE:B9:32:81:E9:D2:46:C8:31:53:55:D3:41:19:F7:94:91:30:D1:93","sha256":"54:C9:41:2F:97:E8:14:28:D7:2C:4F:FA:E0:C3:3A:BC:85:F8:14:22:1C:98:23:82:53:4D:5D:58:C9:0B:C9:68"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://traders-gain.com/\r\nOrigin: https://traders-gain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 02:04:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: c4b9b8d0c31c1dd2975ba8f40325cc536835e186\r\nx-77-nzt: k8t5fU2Vz1i64IeKprsVwTqR5nPT9r9brckT7P5ktSd+l25dKpififytqW42DUqnXnWGscU\r\nx-77-nzt-ray: e2f754206a12f100bc75446aeced552d\r\nx-77-cache: HIT\r\nx-77-age: 248\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7216,"size_decoded":3346,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"05d7604a60456ab25eb809557b353edc","sha1":"e32135b721636e7994e42748da35341e03dfd123","sha256":"5892aca834fe3f9f8fb66f68c8a3eb2295708a3b428cf355d7f3e3c1a0b7b62e","sha512":"db4124c008e22597192e1f07b44575ff191a03322f763bffb1efd129152e0f6f1546d98f5016967b32cc71a8252fefc0546aef0be258e8343fbba4ae2afe00da","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcbWbYKZcF+jhqoWQmw","tlshash":"48e1b54f9a144ea987c6438276cfb84675bc80734250993afd8cc8b842697cda3e3b94","first_seen":"2026-04-01T12:23:41.393805Z","last_seen":"2026-07-01T10:25:41.957929Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":12,"connect":8,"send":0,"wait":8,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.64.212.191","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:44.796Z","timestamp":1782871484796,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://traders-gain.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: N9vkRAplzJw7B8DfbWYj1w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 01 Jul 2026 02:04:44 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 1QVcVH1HJfwTGuxzhnqiMyrOP1Q=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":101,"connect":124,"send":0,"wait":24,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/css/owl.carousel.min.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.637Z","timestamp":1782871473637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/css/owl.carousel.min.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 917\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3352,"size_decoded":1225,"mime_type":"text/css","magic":"ASCII text, with very long lines (3185)","md5":"d964cdd4d9e85b8c1185a92bae34b049","sha1":"a0e2d64bcbb108f0415f364df5b6fabb8a290365","sha256":"aa7e59e6ec8871088cfeb47bac59a6475c815357deef042c61a5c3c965390546","sha512":"acc8bae151fb7542dd53d2a3ecacc9cf09e18109958970dd56d8b1cd2643811f9d5dfdf8499b5cf74e8cfdc6ad85e6be6d9cddea68670a368280576e9c093a13","ssdeep":"","tlshash":"c061bbe5314a265f480f83221dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-06T17:45:15Z","last_seen":"2026-07-01T10:33:58.800029Z","times_seen":2136,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/jquery.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.656Z","timestamp":1782871473656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/js/jquery.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30317\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89664,"size_decoded":30641,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-07-01T09:53:28.651037Z","times_seen":32639,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/690f893b9e7f30a9bfe54678a77ccc4c4948f757.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.186.62.35","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:41.129Z","timestamp":1782871481129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/690f893b9e7f30a9bfe54678a77ccc4c4948f757.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://traders-gain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 02:04:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-7SBazhbNaKfhKcJyppfHDy5l2so\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1223,"size_decoded":880,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c0fa533e5d1076032ec1ea50a19c5780","sha1":"ed205ace16cd68a7e129c272a697c70f2e65daca","sha256":"c9a8cfc3e5f80b5600bbc3a61793677b1f89ec2c9e28f1cd7a2760e46dd20ed4","sha512":"62aa77a9b4280dd269657ed970a87798165ae3c9d04cc6d14af26c7320a6e5905015bd718957a3ecdcb1cc6d1ed2b4e302eb7dac166ebeb650bc2198cfcb9d7c","ssdeep":"","tlshash":"d821987d8a6822ed5245c7d6c5047e036bbcdcb371003e7eea0d5a0e30db2e6223646b","first_seen":"2026-06-12T23:24:14.470047Z","last_seen":"2026-07-01T02:11:55.640039Z","times_seen":6,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":14,"connect":24,"send":0,"wait":29,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Cbzgowwk.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:44.595Z","timestamp":1782871484595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/main-Cbzgowwk.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://traders-gain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 02:04:44 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a39150b-3f9d\"\r\nexpires: Tue, 22 Jun 2027 11:00:05 GMT\r\nlast-modified: Mon, 22 Jun 2026 10:57:15 GMT\r\nx-77-nzt: k/DN3OKQGhGCJz4cu33I/Ep2ZYInQY+EVITvvx4bFuKaFvCvjfU0aHdbSjyICF2p2YoiVFM\r\nx-77-nzt-ray: fdb54123b49f8e01bc75446a0e96aa23\r\nx-77-cache: HIT\r\nx-77-age: 745463\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16285,"size_decoded":6807,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15877)","md5":"dfe560aba1935b8b39c27aa71dc58c8d","sha1":"57ca1d5bc344e6094a43b6b4caafad444e974c02","sha256":"0b7bcba63083ad1debda57e3152b6f65644d8a21fc14bb0fc9bb94e1acb10a0b","sha512":"e4af2de0e4e1a7febb2d879c0a4c1509d8c79b2a44bb7b85fbfab163a3176be3e94513d055341b8a3098c1cf50b16bf8518b1ec7cb44292abc29d8f7b68f895a","ssdeep":"384:8+mNMMmMwhaMaew3LtmBp3dUdhdr7NPCuukhP8ZvxklZBCQrdCfs:8+mQMGaMaewZmBByjhPkkhP8RBQrdC0","tlshash":"6d72e7b42310783f312f581d166ce9867336d198e55390199b2eec4e36cacc5adb3bb9","first_seen":"2026-06-22T17:07:54.172262Z","last_seen":"2026-07-01T10:25:41.76702Z","times_seen":355,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/css/vendor/bootstrap.min.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.629Z","timestamp":1782871473629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/css/vendor/bootstrap.min.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21230\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163894,"size_decoded":21540,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"67afa238c3c8050dc5a6ded5d899972a","sha1":"8eb3dfa8e4a1b3acdef5d6e42ff490fc43bf2ea3","sha256":"6a8e1172b234719c7961848226e914856e4412f0436441c906dbef3c83e8aea8","sha512":"1e1bf2488efcb8ae5c08cf1fddbcfd1dea4579ff5a257378177369dc1fd834a1d23e7f20fac3119eb9fdad0e0133c651b41936d458c0b4520d7162784d106496","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBH2rIWE5e0VUpz600I4fM:4t04h0VUpz600I4fM","tlshash":"3ff3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2024-02-16T16:19:51Z","last_seen":"2026-07-01T02:05:12.566368Z","times_seen":83,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.651Z","timestamp":1782871473651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":1446,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-01T07:20:35.99234Z","times_seen":41056,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/p7e2WARHpcYJbr7RlDDE.jpg","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.905Z","timestamp":1782871473905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/p7e2WARHpcYJbr7RlDDE.jpg HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108448\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108448,"size_decoded":108716,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1305, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2000], progressive, precision 8, 2000x1014, components 3","md5":"87bd60c66cfe8462406968a9103bcc1a","sha1":"e610c655a823922d53ca67085697707307ef9d3b","sha256":"164371233778933001eedbc8e04a57324c5d4dfd1bde7683708530d9b1acd619","sha512":"c5cfad02f1b3dd2f0b6f985d52786bb0ce238b9e84abc7ef6f62912da1bb81d42834954ed2749dd15281827a6fa69a9c7a6d56ae2fe80abf1744c7f31b02480f","ssdeep":"3072:2cv6Q5PDcP4G60X/MUsaAgrXZo1yHjpi1p3a:2cJ5Pq60DbAgrXZzHjk6","tlshash":"cbb302365bc84e57f2d02873216ae9aa9714ea809bffa38b791c2dd473773810c59643","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.892746Z","times_seen":106,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/b9p3atbRgzktpoQDsuk7.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:34.385Z","timestamp":1782871474385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/b9p3atbRgzktpoQDsuk7.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Feb 2024 00:25:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22148\r\ndate: Wed, 01 Jul 2026 02:04:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22148,"size_decoded":22414,"mime_type":"image/png","magic":"PNG image data, 131 x 137, 8-bit/color RGBA, non-interlaced","md5":"8a97513d8b63691d6856ca5f1dbffe73","sha1":"da759a34ac4f714ffaa98466e7bc34dad25f5229","sha256":"1fd8a9706b51b88aa1cfe1ea5f93c3dccc2a935b2fef80e296cd94c56cf6b691","sha512":"ae5439718abb41970f1b35551f7aede3dc7b9fe1259e35855297704cd7289fab6785d1e3a024ad44fc9e637aca72e2f4f40a539147440328514ba1350d204a2c","ssdeep":"384:/9NUmhxeJc5ttNGx1zklvXOf4Sw956jn3D4q9F1j9oHjH6d5NNXcASy8FwkW4AJg:/9NUsp5t81GXOf09gjn3sqx9oDH6p5ct","tlshash":"eba2e1cce7ac867cebf9055d41826da4e03a748619cdae7d063cb3e3956260782074f7","first_seen":"2025-11-22T18:05:08.06812Z","last_seen":"2026-07-01T02:05:12.568528Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-C7D7IPLZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:44.599Z","timestamp":1782871484599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/style-C7D7IPLZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://traders-gain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 02:04:44 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a39150b-8d34\"\r\nexpires: Tue, 22 Jun 2027 11:00:05 GMT\r\nlast-modified: Mon, 22 Jun 2026 10:57:15 GMT\r\nx-77-nzt: k2kY28BthYYmx8cEEuYWlLjAo7DbpLfgyqkMbrmp6+9I6fclLN6piisdYWGwsB3GtP+b+F0\r\nx-77-nzt-ray: fdb54123b49f8e01bc75446a6c32eb23\r\nx-77-cache: HIT\r\nx-77-age: 745464\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36148,"size_decoded":8199,"mime_type":"text/css","magic":"ASCII text, with very long lines (36135)","md5":"a41094383649c1003556ef0599afd4fc","sha1":"3649509b0ec58e47b5a30523e597e96786c2b95c","sha256":"b960463003401b5f238074891f7c37cf2d1302eb9b105d60a25161914b8aee67","sha512":"7fcac7b5ef202e712563bcd23fb508ca596a95aa536607104dd060a8412cd1582c557c349d841f707c7e4d3800272b6c2685a01b98c0d0ae8643945cf49e635a","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+rZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XHcrNSN56DwQ43","tlshash":"aff2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-06-22T17:07:54.19771Z","last_seen":"2026-07-01T10:25:41.806304Z","times_seen":345,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.820Z","timestamp":1782871473820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":1446,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-01T07:20:35.99234Z","times_seen":41056,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T02:04:32.637Z","timestamp":1782871472637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=3tl224atqp083vjpf9f6epgh32; path=/; domain=traders-gain.com; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]}],"data":{"size":64029,"size_decoded":11888,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (502)","md5":"60adf5150b79f9c5044c140179a85a27","sha1":"506296855398a2b8d636b5a97e97a5dc52a8451b","sha256":"fd63d67a2ffdc4e3b30e7a9c931cd9e4715c1d338dc945155d3ec50712240c90","sha512":"282f1088b12d5cb268f6b1df9085d5744c7db0fd11e8e30f60c79dd6a3e8ae0ccf765f08675d3c72ec751b8bd6ce2be7d997782576347f630d0cee7ce2ae7951","ssdeep":"768:j01fMOBfeQEt+XkftakzG5YEGM41tiSpJxiDB:002fL4CIbcYEGM41tiSpJxYB","tlshash":"f9537125a8f1112302a390c26b765b4b6fd0f543c92e69447abc0be85fe3e66ed13658","first_seen":"2026-02-16T22:04:50.209401Z","last_seen":"2026-07-01T02:05:12.570397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":50,"connect":23,"send":0,"wait":662,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/jquery-migrate.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.657Z","timestamp":1782871473657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/js/jquery-migrate.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3180\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9033,"size_decoded":3503,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8892)","md5":"9ad1c636d9fb5028d48c133f428eebdd","sha1":"a7c399e974de32fb023d73dcae6c610fb643fa05","sha256":"f7573d5c433cc851f6327f5f9fcc9068d46f26c12bb8bec772dafa262218ed4c","sha512":"80cdeaec7c48ed3247caa863f66f1c441f2285d3c6bbb17be3eef5d2d4484944b224ec636f3c83bb53ce55594fc9d8a5c96b6d3d51066b7ad003eab2065b1766","ssdeep":"96:5r3UrDAWhTAETMu3QXveMIIa8JdFFh7MyAgxr3KFBF/s++EHzDFvsiMAG:5rkrDNhTeeMIIa8J/Eg96DBs+hlC","tlshash":"e612b79d7156b9764ff775b8f03f839b727209d929098a00d26cc9ea342cc59813afb4","first_seen":"2023-03-07T12:06:40Z","last_seen":"2026-07-01T02:43:41.89537Z","times_seen":408,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/#","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.675Z","timestamp":1782871473675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Jul 2026 02:04:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":64029,"size_decoded":11514,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (502)","md5":"60adf5150b79f9c5044c140179a85a27","sha1":"506296855398a2b8d636b5a97e97a5dc52a8451b","sha256":"fd63d67a2ffdc4e3b30e7a9c931cd9e4715c1d338dc945155d3ec50712240c90","sha512":"282f1088b12d5cb268f6b1df9085d5744c7db0fd11e8e30f60c79dd6a3e8ae0ccf765f08675d3c72ec751b8bd6ce2be7d997782576347f630d0cee7ce2ae7951","ssdeep":"768:j01fMOBfeQEt+XkftakzG5YEGM41tiSpJxiDB:002fL4CIbcYEGM41tiSpJxYB","tlshash":"f9537125a8f1112302a390c26b765b4b6fd0f543c92e69447abc0be85fe3e66ed13658","first_seen":"2026-02-16T22:04:50.209401Z","last_seen":"2026-07-01T02:05:12.570397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/Upbk4eWUnmEbOUDb0S1n.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.696Z","timestamp":1782871473696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/Upbk4eWUnmEbOUDb0S1n.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27662\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27662,"size_decoded":27928,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"88847a8d677eb204e59dd0a6cd5b3788","sha1":"6e2954ccaa9da82a1844670d48cd28d07f3496b8","sha256":"38273758813216c94de847da069dcc1b3ce7ae7ac28bc0fe040c3506ecb95e51","sha512":"8ac6356f1b03ad4ebf790d576494ae8edea61217f8ceb38cc9a75a3a4f292c733d96c09c8c5fe720eec3f81f97933242289545659e13ebf6b52738f2614608b9","ssdeep":"768:P1jqoFOaQrmF9dES+gYk49YUkby9LA6XOVmBC:gOQrUgcm9L6yC","tlshash":"24c2d152354afae5fa9b56051e0f83ee00f7689f029c2d75645627bef31ac8c8c5f016","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.869126Z","times_seen":201,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/ARzm4S5BKJKvro5tVRb6.jpg","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.700Z","timestamp":1782871473700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/ARzm4S5BKJKvro5tVRb6.jpg HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 165633\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":165633,"size_decoded":165901,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1362x894, components 3","md5":"8bd69ed8600e05677eafe7a4cce99601","sha1":"0e10b400747395f70181fc9cb964a3f09f069448","sha256":"ae7724e796a1e8fd7330f6de3a7e2627f665730355a9bf705730ac0a3fe22d1b","sha512":"f03b78366ac6b0ab3f2c6177b8633dfaa9dac5a8ae8ae4cc72039f15cfa85b382569cad3737d284e81dadb0749776eca72d11a526ab512f928dbc1268b9a55f5","ssdeep":"3072:jGqQXRokvhLftb/BWvGgOIE3OmOzKYhc3in8FC/6O6DxSu653QnLpzDng:jLQXa6lfdIeZjObzhedFC0Dt6WnL1g","tlshash":"c3f31207cc04db47e52863f43a672f6d1e1b56bcd29233ad01369c9b7ab26530c5a4af","first_seen":"2026-02-16T22:04:50.297222Z","last_seen":"2026-07-01T02:05:12.572699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/DbcyDWJkpPN7q2ifRoyC.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.703Z","timestamp":1782871473703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/DbcyDWJkpPN7q2ifRoyC.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3944\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3944,"size_decoded":4209,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"b7d58a9f48a5460a277544ea3361bc1d","sha1":"8f5f354167d0e455cc0e791fc9ad99b3d314d9d5","sha256":"7a85ead2a671d4240f0f1d545d193f3856f6634416c7cc64a430ed641ece8f0e","sha512":"db05bb266d64be5d907dc39429f57ad9e0c6a787d18d655ea21efffa9dfefdda2eeda5796e5ab32d713bb4650d57b605e61b4064a63f4657d93a568c146c1d4a","ssdeep":"","tlshash":"87818ed17a63cd7a927a102b5e4bd4db3b6140007c8194e47fb6539f1a2371f9eeca06","first_seen":"2024-04-03T06:36:42Z","last_seen":"2026-07-01T02:05:12.573825Z","times_seen":52,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/fonts/SofiaPro-Medium.woff2","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.927Z","timestamp":1782871473927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/fonts/SofiaPro-Medium.woff2 HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/assets/frontend/css/styles02fc.css?var=2.1\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32040\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32040,"size_decoded":32307,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32040, version 1.0","md5":"c6efb66e743bc805aaf308e9766f08a3","sha1":"f8e10099ad6d2f3f7c9b1d94c6a7da3b159f2631","sha256":"63609d799bcf6963521f83d8881bb8dfb5abeb98b4defa04eb762ea640bdf193","sha512":"79197a06ef664cce577ef471fb818ba8a858eaedd6bfcf11c9ce6f080e10e1d4f72b54b2292fde3862cf18d3e789ae7dd42f1cecc58e1c4069c5f32cc3315b9f","ssdeep":"768:+BzdOG/gDn+C6gsuAaspr17WZGnAY3MDlj3+Y1us8htS4j5qL:YZOYgDnkg/C+s3MDBZ8GAW","tlshash":"a2e2f1b68ba13a55eea8147113df3651c8c80a20035e05f7e3ad4e7e83459b21db6bfd","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.869699Z","times_seen":165,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/fonts/SofiaPro.woff2","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.826Z","timestamp":1782871473826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/fonts/SofiaPro.woff2 HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/assets/frontend/css/styles02fc.css?var=2.1\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31956\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31956,"size_decoded":32223,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31956, version 1.0","md5":"16642522b55b55abe9864397de948db7","sha1":"a8193313d45dff4430425836d2ba385dfb2c628f","sha256":"a3da53989e7e73644fe0ef4e1dac2bacbd1767fcfcd53d66de46f0df111c830e","sha512":"9e484d4f2d1ef7bb9d41ceb4442e48510c5271fc19733feeb3933384249a5827ff5723ed659725eb8625349827ac5dabae0f3d6ab809dcaf42c27b85420f5063","ssdeep":"768:oj1cMSkMMj7psnNYhBTMN7FnQZf0ktnkn8JPEaud8TaYn:o5dbj1snN+BINBnBiChzG9","tlshash":"05e2e1ff7df0cb8b0a1773fb19880e41ea4ab15633527cd5c94a25e3a61d02b2198d6d","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.889239Z","times_seen":159,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/scrollUp.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.659Z","timestamp":1782871473659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/scrollUp.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 853\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2035,"size_decoded":1175,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1872)","md5":"63bbf26c1fd78c531513dd6a4a2e4f51","sha1":"f349a84e4c1bf94aa3278bc578043b52a9ce33a2","sha256":"b7662ba99a132eafd0b7ccc8c3404c8ae442d97e7e6b73bb3ce0d4f11c28c98c","sha512":"8001cfd51233473a250294b7f8f2395240ada1e069771040b7110fb32aafb0f37de7443ba03f944f685a7eb705a05d38a2c84218ba9c4a047976152d84272374","ssdeep":"","tlshash":"f94100492385e52002de517cc06b0f4ad451e0dffe2a50fd505ceeb90b6177492ae7fa","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-07-01T02:43:41.866797Z","times_seen":3310,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/bCbTfpQjCYYxt3ViVn7z.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.683Z","timestamp":1782871473683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/bCbTfpQjCYYxt3ViVn7z.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Feb 2024 00:47:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 135326\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":135326,"size_decoded":135593,"mime_type":"image/png","magic":"PNG image data, 501 x 437, 8-bit/color RGBA, non-interlaced","md5":"0f94e1914b1b1c29dd3c2bc2b579d1bb","sha1":"4206ac25e844a5b8d3c164a91a13e217c55afe73","sha256":"4847c3f5716e15b3e9392486c323fd6677e4aac9d32c141c560c3aad6bac43bd","sha512":"53525de8f4b04301169edefc2da6922a0a5fc5289ff85c7ac7f224c394ded59d2b67c2ac7315a7afdef1820e3f55d06b43d7e9107e8746a99457a31ca461a3b3","ssdeep":"3072:QOpTRgjganAK2Egap1ZGTBg8216Eu/M6yxSistd:QOpTR4gaAKzgQegTQ//M6yxLU","tlshash":"03d31257b5f88ca0d5f7141fe15aa44c10067baeee73718422fbd2d14f108ae798b6e8","first_seen":"2026-02-16T22:04:50.25268Z","last_seen":"2026-07-01T02:05:12.576163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/bootstrap.bundle.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.658Z","timestamp":1782871473658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22193\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78131,"size_decoded":22517,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"eb6506b3ec2fe83b65e3ff9d849de479","sha1":"db9027cead4c80d8c35c5927e93c83a75b2a4950","sha256":"60ced5a40c44bfedf1b5e751918722306004575b5006b95468b0643df705c153","sha512":"19fe7d6b6f714e4d7c007a65dc0647c62b48ad61af370b799ce0cacee62de4ff278e64a6a4b11c155685cd8a73149685ab2c2573a8dacb515326c9dcc8fb400b","ssdeep":"1536:ppXbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZC:R36WJr9ixM","tlshash":"d373c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.899567Z","times_seen":197,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/jquery.nice-select.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.664Z","timestamp":1782871473664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":1252,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-07-01T09:50:05.152237Z","times_seen":9672,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/GUe7aa3wR048JtwDTNum.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.687Z","timestamp":1782871473687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/GUe7aa3wR048JtwDTNum.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2812\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2812,"size_decoded":3077,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"dc179355e8b85e233e804c8fc7fb4915","sha1":"34a0a14cc2405d95270b249ecfb99a393761d8d9","sha256":"02b5ef1db0d703f1b4f88d3568afa72e033ede317b0ddb83982b869a2944b710","sha512":"9d712654214990629b25ed0d6c2a35c2edf5e0fd48a0a085a518250f5c6e74407a5ce1645832451750b90507b7999b19289fd5ced93804519b8865b322235870","ssdeep":"","tlshash":"aa511ae37358824ef3c336d33e6a7886a31a6f1e44f29095e11bb0ed35441e36ac2451","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.902338Z","times_seen":215,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/P5xzjaQe7ylXm6qFP11B.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.688Z","timestamp":1782871473688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/P5xzjaQe7ylXm6qFP11B.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3857\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3857,"size_decoded":4122,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"bc207febea1f564bc43a716e90e0f409","sha1":"29eb26ba989664b4ee3fa9b0a20debb8ea9f617c","sha256":"6e15428ee22cfd438e3805491b3fec4c36abb17b94582557ba6690f3652a2c94","sha512":"a9c0d5ffec53cc4731c849981bc1630f327ba299c80742a343752ff89be224ce59e959c8544499a6db08c09e4e5501af1fab6f4d2e1475c4ab2c8b35f00b0ef0","ssdeep":"","tlshash":"ec816c6b2e410732ef2e7c1dc272297b9a313bfb0c11e2b5f12587a24f557540937459","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.903143Z","times_seen":208,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/4IbFwZ2PZa8nLudMHzSt.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.697Z","timestamp":1782871473697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/4IbFwZ2PZa8nLudMHzSt.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28827\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28827,"size_decoded":29093,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e9db8eb0e956f1d3cd0bd89f4c906d2e","sha1":"5aba22878aaa91b91df2bd5d4568bc93f675ad92","sha256":"78becea6e78fba7c2f1db676e821948e7ea617c67ce27422bf11d37e731ad3fd","sha512":"7db93ab32b7fabb00799027feebb4f0c6ebde7dbeeb0a54440defa34d142568fde932a94f135852aee31534ebe4d6aff5dc9746432e61e44d6e75bcfabd25945","ssdeep":"384:cSUiG+3TuJKG/+0VYhUSRsYQhLQm77ZFEB/Oc4uG7Cns8hpVtLCKFYSnGkGo16un:cSUZ+o2nhQhDZFm/z8+nPH7FXGohXx","tlshash":"0cd2e102fba1dbcf0cb32234446f6ee9b2a663853ede7c15d41d9d48919ca8c3559523","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.875894Z","times_seen":206,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/css/fontawesome.min.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.627Z","timestamp":1782871473627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/css/fontawesome.min.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12244\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58894,"size_decoded":12732,"mime_type":"text/css","magic":"ASCII text, with very long lines (58707)","md5":"6af1b934b79d87d1325904a171d1ae97","sha1":"a07679573eff302a6674a7203ccd51021237c6da","sha256":"3289cc707e262a795286d24ed731d83c8e86bc0c2cb106c1c6620db18cb84f2d","sha512":"979457790c0a6abbad2cd5b2b38dad93ca35866e85a199dd06a0e04cea0653a4cb4ea427388d02f8df0fa36d8e02d269f6dc2ba22d95f7314c206a65224b9f1f","ssdeep":"768:gEC31sPiyLNq4/xtoAbHJ2kEBR/MMQyYJIXtBjtF5QzY:gE/PxLE4/v5HQpBCfOtBt4E","tlshash":"1b43fbb8e54c01c9a732c44bff81b2bc61baf73de5914d95f00e591c2ad26a811c5fba","first_seen":"2025-03-03T17:12:37.307229Z","last_seen":"2026-07-01T02:05:12.581252Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/waypoints.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.662Z","timestamp":1782871473662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/js/waypoints.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2463\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8046,"size_decoded":2786,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7809)","md5":"e60259b65cdb3c30898c7bdf80f27ac0","sha1":"5e1c30f1d8d87c4c37de5a74dab08f8042ba9954","sha256":"0e4f2f63ce6e34ca81f971ddc848ac33e9853872b71c0b92b19ebdd2821cc91f","sha512":"ee43972c25fe6889c9786902c50b172163366f548f532fe757f655f8e609a406c537b91e2c777d8285ef44a868d62b81ef7fea21b2a0151fa75cbdd320ef6432","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KNRWzdBUVKdBJEdfdpu531v8Lr:uPG3nC19KWssPVpX4KNReU8Ju4en","tlshash":"baf1f9c9b4c6b4221befa0b5d43f060bb33a9d4561098068f194e4da3db4a2da567f38","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.896187Z","times_seen":215,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/EgjGL9IkGLo2LaWH2RxG.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.900Z","timestamp":1782871473900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/EgjGL9IkGLo2LaWH2RxG.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Feb 2024 00:48:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22148\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22148,"size_decoded":22414,"mime_type":"image/png","magic":"PNG image data, 131 x 137, 8-bit/color RGBA, non-interlaced","md5":"8a97513d8b63691d6856ca5f1dbffe73","sha1":"da759a34ac4f714ffaa98466e7bc34dad25f5229","sha256":"1fd8a9706b51b88aa1cfe1ea5f93c3dccc2a935b2fef80e296cd94c56cf6b691","sha512":"ae5439718abb41970f1b35551f7aede3dc7b9fe1259e35855297704cd7289fab6785d1e3a024ad44fc9e637aca72e2f4f40a539147440328514ba1350d204a2c","ssdeep":"384:/9NUmhxeJc5ttNGx1zklvXOf4Sw956jn3D4q9F1j9oHjH6d5NNXcASy8FwkW4AJg:/9NUsp5t81GXOf09gjn3sqx9oDH6p5ct","tlshash":"eba2e1cce7ac867cebf9055d41826da4e03a748619cdae7d063cb3e3956260782074f7","first_seen":"2025-11-22T18:05:08.06812Z","last_seen":"2026-07-01T02:05:12.568528Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/js/datatables.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.669Z","timestamp":1782871473669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/js/datatables.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30963\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92858,"size_decoded":31287,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (537)","md5":"210e3a7d8b662e5eea1c22d89e2fdd6f","sha1":"6d458385886e25608bd6c3a959a7c5471214ffbc","sha256":"cdbc3bfa8d1f5bbdd1882deb160c9bb9eaf382b18008a55528e2edbb8bebf9a5","sha512":"350fb7b80da950c9d621f378340642edce6b8a45e975c648267d6a562044737760191a5f6f0827cf9d80e7579d8071f414098b58cd2e9429ec8e62b3c3182691","ssdeep":"1536:pVjf/jOxZF/FzN6KbOomB1N/t0l3tpQriEdQ5NDeY1lyoh60ikCyraAvZN:/L/jONjE0l3tyeCF0SGN","tlshash":"a09317a93a917899d66775f011af050bf23e68a7b448c8a0b064d9d53e74d9820fff3c","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.887663Z","times_seen":192,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/rGK3hXKEQJ0P5KUNZVBx.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.694Z","timestamp":1782871473694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/rGK3hXKEQJ0P5KUNZVBx.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4385\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4385,"size_decoded":4650,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"4661690fdf1a14c260223e5d53438a7f","sha1":"d5937e1c6890af92b92582545d56ec02ea6cb99a","sha256":"157bd478cf3eb2d60d7a4a789a23b20f497fbd630422666b4487999c33ffdca5","sha512":"518498d7bcd52567b39ebeaffe6d986bdb7dba1f44d658cfbb006f5af08e1e805a7874f094c8a5ded197be60b921b783284e0221a55b7ab77cd1a3dbd34ff098","ssdeep":"96:ZyvIYHe6ziYogfLiKF5gefoj2FqDIj6B0UDOXWoPc11:ZyvrHerYoYHpAjqqXB04wPi","tlshash":"be916ec2b00a278d6b5bc24271ab4057ed6a9144de403f943abc61eff70524890363ef","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.876719Z","times_seen":208,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/brPxBdDNKkKu1oFb3uUl.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.698Z","timestamp":1782871473698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/brPxBdDNKkKu1oFb3uUl.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43069\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43069,"size_decoded":43335,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ed5ce7a3e3359371094eb9d244a7cb39","sha1":"5bfc4c5de8b8c97591ddeded55d9157508b7d131","sha256":"24d538e013791421d8c73e4975a66217fd92d493354d65dda1af398c38e9b72b","sha512":"cc132d224ec30bba187204544feb8bff34daf6866b3aebf5b8a3db64ed9056e9a09d93878a134587545c82f11f83259d975c10d36815e6cef689a259b319685a","ssdeep":"768:rxL/mNvfrauDIiUBt0Tbv8xfpyB0kAeo931ec21m/Ou+LY1PTbSYC7IA066hX1MO:rxOLjgtS8PtxeujZosJTkkz66d19X","tlshash":"ff13f1082ad74184d62a0f70fb9d2f59f3d6758ab54341225f85ca632de82ff2341b6e","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.864282Z","times_seen":205,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/css/animate.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.635Z","timestamp":1782871473635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/css/animate.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3404\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65763,"size_decoded":3713,"mime_type":"text/css","magic":"ASCII text","md5":"8afbe44da7d144ab0b78187042ef2a73","sha1":"7fd7ccc0063e5b3df9ab22c8b31fa456906a067d","sha256":"62f702fe7c2788466382d4e5223ba337548d767285afe7e58556e205e2cf6b1d","sha512":"7a869d55390a68111b8664a2b39da6d77de9809d6934410299a33ecb8809a60152e7ce9cf5800d8c5bd053a813c61e8ee07ef4533354c9d17c5dd203e414d2fa","ssdeep":"192:x2g5p1sgg5p1s7JuFRH2UNFRH2Uo6R7M8EA+U5R7M8EA+U6QI3iixI3iiTZVPayg:xTJ","tlshash":"d65309ba28e1114457274a1587de5b78663ce5a31827acf9b3ce588bcf01fbc23c9617","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.893427Z","times_seen":194,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/css/custom.css","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.644Z","timestamp":1782871473644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/css/custom.css HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 138\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":352,"size_decoded":446,"mime_type":"text/css","magic":"ASCII text","md5":"7f0c498ebf48fc01c892e1be1e693449","sha1":"cb0a70d363f00aafd080887d80396722ad450fea","sha256":"778c65474c17831a9d8c39765a7526391791bb3d5ca6bdaec36897e756ae2157","sha512":"4a1ce54cb72f43ab6985cbbc41cf0da356e2d72535ee7d2142336cdd7aba94d22a93a2b7c0af24046d4940d9dfae5c119cc700635011bb7883fcf0ef42d6e1e3","ssdeep":"","tlshash":"b6e06820d76389d1b01e8028377ab7d02a2f40634309c62cbba333458f4250051497ad","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.874715Z","times_seen":110,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/Vm4SZU8RrGKtRfKDRSaZ.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.682Z","timestamp":1782871473682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/Vm4SZU8RrGKtRfKDRSaZ.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Oct 2025 05:52:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36613\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36613,"size_decoded":36879,"mime_type":"image/png","magic":"PNG image data, 500 x 130, 8-bit/color RGBA, non-interlaced","md5":"5b8f47ebe3ac470878e706a464a19580","sha1":"705c70de522af916896f927f8e61e202125a9476","sha256":"b15c9a04cfe4ce0f7bc4b323d2f8b718f4463c5c93373d2a36c2cfec31f24738","sha512":"1c3a1d9c5aa00daca82b4aedf5e3b8b8359cd261581ad63790387527aa9e7251f863591ef1d4d1f6def1bf11f2e0c9cfaa3399af15404643717e5795a2a4963c","ssdeep":"768:7Vt8Dy0wK1t8tc/F3KswWCnC/zNzVaL+d6oKq6csSexlnFG:zqys8tc4swWCnCbNzVpkoC5jG","tlshash":"16f2f2174b45783b6aecd94a35526b8c312a72dc303796e9bae707d21cd0c2e0ed3e52","first_seen":"2026-02-16T22:04:50.260217Z","last_seen":"2026-07-01T02:05:12.586974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/global/images/fjpDgKEU945IrHwrw4A9.png","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.691Z","timestamp":1782871473691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/global/images/fjpDgKEU945IrHwrw4A9.png HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6415\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6415,"size_decoded":6680,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ba1b9a9b282efe64115d33a2c6f6def1","sha1":"8f6d769bf38a39871164e0c02f3647d554a03661","sha256":"60d49bb7d8cea39a90e727218db6aa963c8bbcee671e0214dd824f5a8e9db135","sha512":"ce4a9e285cc69ea3f97eefd0b4c8a5375186082551b84e3e737d22c210ea902dd620236af4d0c64d03c17f3a9db375df9e24d76a48cee36e434b8167127e3426","ssdeep":"192:kNiQkzn6YrUG8M56YqDy2KggMXI8RC0SMap4fAQ:kAQkzn6sUGTnQyqzN40SMY4r","tlshash":"8fd19ea3a144ce1fced48f8566ed25fc73919e490fb66f50dab7d6a1ca1424a64fcc00","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-07-01T02:43:41.903731Z","times_seen":212,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/jquery.counterup.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.663Z","timestamp":1782871473663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/jquery.counterup.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 496\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1067,"size_decoded":818,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-01T09:54:12.619713Z","times_seen":11775,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traders-gain.com/assets/frontend/js/lucide.min.js","fqdn":"traders-gain.com","domain":"traders-gain.com","tld":"com"},"ip":{"addr":"86.107.77.57","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traders-gain.com/","date":"2026-07-01T02:04:33.666Z","timestamp":1782871473666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traders-gain.com.thodexfinance.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 18:33:30 GMT","end":"Tue, 22 Sep 2026 18:33:29 GMT"},"fingerprint":{"sha1":"5A:8B:A5:04:04:A4:38:26:5D:3E:E8:BA:95:61:1F:80:38:61:74:64","sha256":"E2:CE:6D:8B:B5:FB:40:CF:0D:28:53:3D:27:E7:DF:4A:E3:0E:47:AC:67:D4:5B:59:6C:54:09:A0:2E:67:EB:E4"}}},"request":{"raw":"GET /assets/frontend/js/lucide.min.js HTTP/1.1\r\nHost: traders-gain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://traders-gain.com/\r\nCookie: PHPSESSID=3tl224atqp083vjpf9f6epgh32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:04:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Dec 2023 00:44:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 41008\r\ndate: Wed, 01 Jul 2026 02:04:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":179967,"size_decoded":41332,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65503)","md5":"df6d5bfb41afe85fbd781e31fb8e78f9","sha1":"1c0bd4f39de05355e7469b59b70e30971639ef37","sha256":"3b274d9494069d5e6964f8e487a8412cd07d26d55de483762c8443061db01a4e","sha512":"55df569eacdd305430c2615da4c6b15dde1e10fe31fb581f428bbfa61da41b44e0fdd853f728870fd3ec9822a1cfb4a93243203b226c6703868b26b88ab4d1da","ssdeep":"3072:kafULUsUhDA3FhCapQrOXSuvohP1mbS06W7+NAlQlT62Jt6WlqQTNEOFcb8rGQXx:vBe2ZzJTprGyx","tlshash":"2004cdafcfca561f1956e3881a47f0451fee23bd3b0a8d12b18dd672e115812edb3612","first_seen":"2023-04-09T11:26:14Z","last_seen":"2026-07-01T02:43:41.897116Z","times_seen":58,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"traders-gain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}