{"report_id":"a7ff3254-e147-49ac-9b43-9d3878e25669","version":6,"status":"done","tags":[],"date":"2026-03-24T01:27:56Z","url":{"schema":"https","addr":"treasuretradealliance.com","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"title":"treasuretradealliance.com - Home","dom":{"size":43208,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27897)","md5":"8b48ef29a82db5c699648cbdd89c0aa4","sha1":"4286dd982d6f96a0edb76e66ea3766441ca6cb12","sha256":"3f6345347f91ea818c2c0f6eebe23914fb5a3cc18e6761b1b234ce8cd4e91146","sha512":"2c43da2a2a23942326a4530982b5396dba258f28f6f80b931ac178dae2efed1def60f2451f6ffb87e20e7da9ef1c3675b2e9cad48738abce14163990910cff4e","ssdeep":"768:4j28FTbfsTO+LDGmPKHs9TvfqaSQXOSqGMWYWf:4j28FTbfsTO+LDrPKHshqa/XOj6rf","tlshash":"b61396176780462c9c53d2a4f399a54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2026-03-10T08:00:57.268093Z","last_seen":"2026-04-23T04:44:26.728052Z","times_seen":683,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"treasuretradealliance.com","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T01:27:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-03-19T05:07:26.130307Z","alert_count":0,"request_count":3,"received_data":324593,"sent_data":1405,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-03-19T05:07:26.100112Z","alert_count":0,"request_count":1,"received_data":7689,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-03-19T03:33:43.236919Z","alert_count":0,"request_count":1,"received_data":18577,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"treasuretradealliance.com","ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-11","domain_rank":0,"first_seen":"2026-03-23T20:52:49.049215Z","last_seen":"2026-03-23T20:52:49.049215Z","alert_count":41,"request_count":41,"received_data":3947175,"sent_data":22616,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"static.getbutton.io","ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-03-19T05:35:07.246051Z","alert_count":0,"request_count":2,"received_data":885352,"sent_data":881,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":45324,"sent_data":1070,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.158.83.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-03-19T05:07:26.152869Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":614,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"35.159.180.15","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-03-19T03:33:42.144755Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":4061,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lib/wow.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-11T13:10:05.269197Z","times_seen":14369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5b1e5c995add4a1f1207240a01afd39","sha1":"8afb7b0f623410e52a50c9f245e256971222a546","sha256":"c1e13455d043c1ab0bbe75c6b57068a214b1b6173ff1b953ec42baa9695da767","sha512":"524be98d969986f9a07891f82a88cf63c43ef239bf70027ab06f17c38927cf445d9a9085716a42b9dd1e9503e322df02b1207646f3c6740bfaa8933bd760de42","ssdeep":"","tlshash":"ebf055483a3f3288527f0543b3bb89063628107b0144d446b8fd23f19fb8681958d02e","size":520,"data":"","first_seen":"2023-03-08T01:10:05Z","last_seen":"2026-03-24T01:28:08.251956Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"71e1ddd809fd690ed2953b120afc4780","sha1":"e723208f0e7edbc0cb8b7115c389900aa6804d2c","sha256":"e6edddda83e902bcfae3296f235a84bf926ebf48c3522667f78154ccf3623816","sha512":"467378269e08a7e14c6565a2cb9859d210c7d5da71bc5d62dc22e5c4884ecfd1a66e2780fc3e1e5239dbc69575ae7f382984ab31529d2c497755442f444a823d","ssdeep":"","tlshash":"06e02e0aacbf608800bf00c3a37bdc6a171141370206ca05bdbcb3e0df2152c552459c","size":334,"data":"","first_seen":"2023-03-08T01:10:05Z","last_seen":"2026-03-24T01:28:08.252506Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"adf8ac5154bb0958bac83b5676428f3e","sha1":"4a0f323f94ebabb8efa2fd0a2cad7978d4b8d7a0","sha256":"b265fdb00cb773eb6f0aa4e3d74f1af45b6b49c026c153d0c2df4d7927359655","sha512":"75c22da87a3f8d0c8a5f8d2db24657047bf8a3143a53e844636b28afd3fd878b706501391c0d3e05883d5dc717bdfb7f8ff86c762c969433997e4fa44daef458","ssdeep":"","tlshash":"a4f0d8496a7f319481bf0142b77f8b4a2f71153b0185c55af87c62b2cfb4549191946d","size":492,"data":"","first_seen":"2023-03-08T01:10:05Z","last_seen":"2026-05-23T06:23:06.322218Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-12T03:01:21.451968Z","times_seen":742026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lib/jquery-3.5.1.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b61aa6e2d68d21b3546b5b418bf0e9c3","sha1":"9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7","sha256":"f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b","sha512":"5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b","ssdeep":"1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8","tlshash":"3193f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89478,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-08-11T23:25:49.638135Z","times_seen":17819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lightcase.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcb8b4bf4540610376d7264f3548abb1","sha1":"ea8d9142646ff5ffbcda2a1cc17c7df1add52632","sha256":"d67b17de1379089afa66d726f59b8c2466f6da628396b5fa626099975b412b4f","sha512":"9e7d6b18377ce02f9ea21bbdd1e88a09cc6814b69708e5edcb4b2483273bb40182c63de020330d8dddd263e5c6d8329b97728c343835f6cc53ff659b638a9814","ssdeep":"768:3JsSiN6TUUPEAGOEaZi0CGpMhrNQqbNTPMkDZ0x44:ZpiOk2Zi0AhrNtNT04ZQ","tlshash":"b03343f8730eb19a445b5358e478924be63cc431223e79bab4f1d694f550068cf62fea","size":53965,"data":"","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-06T06:08:53.761556Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lib/slick.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-12T03:58:35.041711Z","times_seen":111044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5290f18fe6988ea968a8c7c26d812a7d","sha1":"0da92675fc4d7ca1261d3e945060b5f480a3354d","sha256":"f05d5cd979cd9c59674d209a2881e6d218a3f98dd92ebc1d251029e1ac379a03","sha512":"bf70973ff856f4de8c719e0e182f6768478ba3043e563656100bccf9b2ce40055d22a8e1a9efb7d84a6edf3d2e5344bf6f2445b794fdd2eac84ee71d10bb6b0b","ssdeep":"","tlshash":"ef01e90f29b79585123370fc1bfb5d077425541b0648da02becd12908f55a6c7966789","size":785,"data":"","first_seen":"2025-06-07T11:10:04.392681Z","last_seen":"2026-03-24T01:28:08.254435Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"02027638ba6d86ce44b36f66bf4747f8","sha1":"a4b60ea384d4547816863e9fbf3a8340d6cb0758","sha256":"b3c8375cba0dfd152213bbed763a3d50943a105a09581227f30f2949dc3ac522","sha512":"320a27f3d7d867f756a754a6741cf05eec2ba02f9a3ffe04318a8069091dd528c3973d20c11c9f31445cba51b9499f272d57be7bb6755c51f8b1890ef5530be8","ssdeep":"","tlshash":"57f02c0e04e3489c08b3709e398eb4420c336a03554ef8267ece42100f892ace3a2ba8","size":501,"data":"","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-05-03T23:33:20.758886Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DKSJbgZl.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6de590aa97fd2f59da2f1e9f02c0b48e","sha1":"ee5b91018e180ca04810100d05fa1ea6fd8a7ffe","sha256":"b95d128c002ad6a88351ebdea862da52648ee7bde6fecfbedf5019b3051728e6","sha512":"94edeacbc028799c8c5b275e158e16d1c4e80347dd60d384276275caff01f585fea78fe15361d3bb483589aa82ca0eb9ab57a2b1bdf5d6f68357abc85dbd8ed5","ssdeep":"6144:RsJU8SN+jtxgR/ZgQubO/rL5PheWVcq9kNw:RwU8SNYbO/rLPnV3uw","tlshash":"e95449d47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283561,"data":"","first_seen":"2026-03-23T10:51:37.072718Z","last_seen":"2026-03-26T07:39:17.029615Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lib/bootstrap.bundle.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3b0a9f767ac0014b919593207a08b27","sha1":"cd42a3722f0d90bfed00cb2e9be372b07aa8562f","sha256":"886a0d1005f4d663e11473c81ea20b2b9d618372313df55223d2c571dffc5698","sha512":"ab6bd110cbce37fc6bcf52ae3a3e5029699dbdc1ed3385cd6cd7abf906dfe133a3f913039ee974160dd59a6629add7f77e72f58198332a166cceca7adabe5482","ssdeep":"1536:+JJTbJH2I5ZKam2n/yFcLaeYGmSr/ahp613GExOQb4IG:fRpmGMG","tlshash":"5d83c648b254b872069f607a807f060ff73a6895b04b8228b969d8dd1e7cc897173f7c","size":80821,"data":"","first_seen":"2023-03-07T12:01:52Z","last_seen":"2026-08-11T21:01:52.520653Z","times_seen":1521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/app.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"010de18f8f6e7996425e02648dfa5a44","sha1":"c9308cfb2d3e699b4a7f8b5ea2f3ff5fa57a1b5d","sha256":"1f6985d708c1d38ad6096f7b1abf804a1cef14788337562437c4b95cc622f50c","sha512":"0d337165dafda707d4c1bd8466b5e559526eb566954ddf601a5e0106ba4c68eff0042064fecf126ea78bb1cb8c095b8cd45b346dbeb1e61ca67dd16a2e203d9b","ssdeep":"96:kvpc6eqB1JCX9TSaHHF1L+8IngPPJLcL0WuuTx:kv66eqB1IX97L+Pnxt","tlshash":"16a1ff1ca811513e843f63baa91ad709ebeb172342494563b9fc454c2fb066a33e1dfd","size":5011,"data":"","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-27T06:40:56.115526Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c5fd3726437c69063d723bbc940d3ed","sha1":"d8c95a0a04b9490db68d7c257275158e4b74c5ff","sha256":"fc72c0a3dd29513164941f7b0f329f1768e2e8d068258e4facff2c19a5f3598e","sha512":"c5628084c8324355f8c6677912564bbb3ed029b2bb9db2601027e55e0c23c386e3316b81c692e8104eb73d73afc1eff057ea53f5ffb0116ce7b67ad644db669e","ssdeep":"","tlshash":"88e0ab7c3c7040a8979200b4c1b6e1383d0730704055c94794da88a91cb0fd96e02588","size":418,"data":"","first_seen":"2026-03-23T20:52:59.994787Z","last_seen":"2026-03-24T01:28:08.255938Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442041,"data":"","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-08-11T21:15:19.270765Z","times_seen":2875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/global/js/iziToast.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-08-12T03:17:50.052266Z","times_seen":3429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9e51eb68ac08cb913b1e0d9644cd407","sha1":"12e35eae343de817ab14ca5126bb007e16beeade","sha256":"ca362d7a87db95e769e7d068087a7ea5c13322a39e3943de4a6c96f35492af34","sha512":"afebe587f77407adb07c4e7b1d5671f704fc243730cae8a6a080bd8f41f57f88a19b91c6d8dd96377c927a40768109064cfaffee2b5928d1e8a437d6b0ea83cd","ssdeep":"","tlshash":"9c01fe8c9d067636250b71e9313f910035b4401a8815e81cb80ec6d06fa1d94ad4fdee","size":711,"data":"","first_seen":"2026-03-23T20:52:59.996394Z","last_seen":"2026-03-24T01:28:08.256918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/fonts/la-solid-900.woff2","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/fonts/la-solid-900.woff2 HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/assets/templates/basic/css/line-awesome.min.css\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 96752\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 96752, version 1.0","md5":"36fc297902c9a2e857858baa6ac25f2c","sha1":"89d9531c0c70a8751dff83c1917baab1f16a2071","sha256":"10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb","sha512":"c5711d5027762fbc8d352dfdf64094958348b873671c891e8c5cf701a569c3bad672a380db7fad76692bf79dc9235b37f76b6f42f73698c9f85d2c7a23aa62fd","ssdeep":"1536:H8wZeXMjWqtJeAAHBX6ANib7HTYJv+Nr1ScHQjn6t/k5LBNCMAG35y:H8hXMjWeeVHtA7evKr1Xwelk51N4Gw","tlshash":"1f930257f0921be097c688990e189035cd39fd71397fe9f4e603ae4cc361927e52a4b6","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-08-12T02:16:33.01077Z","times_seen":13750,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 06:13:40 GMT","end":"Tue, 19 May 2026 05:12:24 GMT"},"fingerprint":{"sha1":"DC:97:69:5E:8E:EE:A7:AE:08:2C:BA:84:27:CC:78:BE:48:DE:D9:B8","sha256":"B2:BD:82:B1:F5:33:E3:71:20:4B:29:85:BB:B8:05:14:BC:40:94:63:88:A2:BF:5D:3B:63:04:29:51:B2:D9:85"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vo%2FFTchLS0tu69lWUQu%2FijmyF8k8r8l14Ienz9oE9eW06clr6wKWeJiRxxC4WlDzCZG42NR4I0nBA6XA6IxTR9K4A%2FGW0tUWHYn93m534CizGQ%3D%3D\"}]}\r\ncf-ray: 9e11e4d95d7032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":25,"dns":4,"connect":1,"send":0,"wait":242,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/76d3c112dff98539d0c5e40fe8e15a6691a96e69.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"35.159.180.15","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/76d3c112dff98539d0c5e40fe8e15a6691a96e69.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://treasuretradealliance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":89,"dns":12,"connect":21,"send":0,"wait":24,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lib/bootstrap.bundle.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/js/lib/bootstrap.bundle.min.js HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21203\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80821,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65293)","md5":"a3b0a9f767ac0014b919593207a08b27","sha1":"cd42a3722f0d90bfed00cb2e9be372b07aa8562f","sha256":"886a0d1005f4d663e11473c81ea20b2b9d618372313df55223d2c571dffc5698","sha512":"ab6bd110cbce37fc6bcf52ae3a3e5029699dbdc1ed3385cd6cd7abf906dfe133a3f913039ee974160dd59a6629add7f77e72f58198332a166cceca7adabe5482","ssdeep":"1536:+JJTbJH2I5ZKam2n/yFcLaeYGmSr/ahp613GExOQb4IG:fRpmGMG","tlshash":"5d83c648b254b872069f607a807f060ff73a6895b04b8228b969d8dd1e7cc897173f7c","first_seen":"2023-03-07T12:01:52Z","last_seen":"2026-08-11T21:01:52.520653Z","times_seen":1521,"resource_available":true,"data":null}},"time_used":1987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1984,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/css/all.min.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/css/all.min.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12170\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58404)","md5":"7d02166038e57d696bf054b25f0b7362","sha1":"990f7bbc8214c66afc7a86b1c64a8670e3270f83","sha256":"b0cf3871104ac9e0d03eb15d27cb8c67d9416c8450cd81fcba4b83113ab482da","sha512":"3ac635c6d7766ab24958b0c9cc208fa1577043f1876c7e818bc1e44bb49417c8713ba4eaf0e37d6784d3b0116480a8eae6ac15817a675498c4856e2559f5308c","ssdeep":"768:FEC319PiyLNq4/xMoAUHJ2kEBR/MMQyYJrXjBrth5Qzi:FEkPxLE4/6mHQpBCfdj9tM2","tlshash":"fc43fcb8e54c01c9a731c44bff82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-05-22T12:03:07Z","last_seen":"2026-08-06T04:20:06.424018Z","times_seen":128,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/logo.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Mar 2025 18:58:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 190537\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":190537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6451 x 816, 8-bit/color RGBA, non-interlaced","md5":"6c6112a346f633957a965fd0389ba3d5","sha1":"0b1597df013cd001b211c76235e1679033420db6","sha256":"b9b4f8faec60016231a127b8b425f28199e6078c091fd26f121fdd2a7c1ab200","sha512":"2a98e27c21201e041031aa3533302759e98800377d848d6c412955dfbf562f6479a45bc98f9f2afd61775db427952eedf4d0d3f02e4c937852c7cfb8529e2c29","ssdeep":"3072:zur2DLkTKcCwCX9eWkI/y/m1zfvnjigQ9H3dC69cgN8+QNduM/Gc7D8cBmEhHbcb:nIVCjX9d5X6kEjNFQNdu6v9B5hHbcHSU","tlshash":"6c1412ac8996efc0d3a199bcc6b995d8b9d743f6b485fcfec8e86848142523354dd8c0","first_seen":"2026-03-23T20:52:59.977374Z","last_seen":"2026-03-24T01:28:08.220693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/partner_section/61000a7d441c71627392637.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/partner_section/61000a7d441c71627392637.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8458\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"c877e8b5534009a7aac53fcb7217e66e","sha1":"6ad35a577de49962abd058278b12587dd3b2d0d0","sha256":"4f7d94e0dd5f6737eb084b795f4127cee3277b05c0654ff4ac67207d68ee8c0c","sha512":"e5eedfc6f112d9a15628b4e3c9f2a8748efcab7fb05a9a671076bb8e5e46b1bb8822bc51d017c5c7500f536967dc0c2e38b2c818102e530df454efc0429fb81d","ssdeep":"192:xddddGJLe4TW8ErCej7CPHKBD6V5ogl2OgClQu/LhsAVs3ddS:ndddG1eahErCeaPHgQ+gzgCQuVpVAddS","tlshash":"30029e9023f63063e381c729c97d97f1f4675fc93e52661926a28063c2bd7981245c8f","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.526152Z","times_seen":265,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/partner_section/6100084858a641627392072.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/partner_section/6100084858a641627392072.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14362\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"b324018888ce5474385bd9a8b56a6e10","sha1":"77a8a0df43dfe5c4a171f554b1adf776b14cfc5f","sha256":"e07476c154a007b6dc661644aa5944e81a98321a70bd1f242388394af3267057","sha512":"196a48dc875f2969ff315892ff76bbc2444850dd74c35e10820f535656af693aba8b6b838b569e22af18c5179aab9dd9bc1123f8e302841a547175baf11c584f","ssdeep":"384:NnQMa0mJ5XBcZClwwXOX39qfl/hMlMKdS6PDYH6k:RQJLJpBgClFeXNqflhha0Hn","tlshash":"a752bfc0eb2bd865671b9504bd7b0bc17a3b799a29656bcb8dcef726845c801b182101","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.551753Z","times_seen":265,"resource_available":false,"data":null}},"time_used":1109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1057,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/banner/60c756944f1271623676564.jpg","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/banner/60c756944f1271623676564.jpg HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 369119\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":369119,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 1920x1280, components 3","md5":"13316ccec61c1c97a8697fbad586829c","sha1":"4bfbc37e1638bf41cd8663d9e49a4163c2092e78","sha256":"d25aaa9ac79b4f2232df9e29e4193317e4849a0704673a4f9a985582320cccfb","sha512":"ca58e649757d7cdd64e4e02507bfca920702e5e13e6313cf2ca49dcaf6a4387231b9b3df4ef364d002f6dfa958969f4e61c88bb0623950c0c6d898260dc02e77","ssdeep":"6144:VH/LmM+3SqKr50DekAcR9kOhfrRjq7scKc5cm54+pTHZObHeKX5r+5uOM+DggTLp:9iM+UiRKorNGstc5cg4+lZ0eKX5rQuLw","tlshash":"ea7423232b21025a474ac3a5b8dfad7ce1799910b8d18d2f40238e9c7ff841fdc7a658","first_seen":"2023-05-23T04:55:03Z","last_seen":"2026-07-27T06:40:56.086888Z","times_seen":162,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/webfonts/fa-solid-900.woff2","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/assets/templates/basic/css/all.min.css\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79444\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79444, version 331.524","md5":"b15db15f746f29ffa02638cb455b8ec0","sha1":"75a88815c47a249eadb5f0edc1675957f860cca7","sha256":"7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7","sha512":"84e621ac534c416cf13880059d76ce842fa74bb433a274aa5d106adbda20354fa5ed751ed1d13d0c393d54ceb37fe8dbd2f653e4cb791e9f9d3d2a50a250b05f","ssdeep":"1536:ogXevisOzyu5r4HjEIe9vyJFdiTCHnegAZ64RPmF17k+GbpJ0VxZrtbz:oTvissyu5eb0ciORAZ64Qrk+0Mzbz","tlshash":"6b7302c68d4ae504c87e0daa36b5a96651be9fc5720e4df6e8700cbcf1f12dc0266d19","first_seen":"2023-04-05T14:18:50Z","last_seen":"2026-08-12T00:11:41.776306Z","times_seen":28160,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaOrEtFpBISc36j.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/exo/v25/4UaOrEtFpBISc36j.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://treasuretradealliance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 05:17:57 GMT\r\nexpires: Tue, 23 Mar 2027 05:17:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nage: 72573\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21828, version 1.0","md5":"40836fee7a598ef229d06bf980e0e75f","sha1":"7b52a6ecd225795e276b548eab6f28628eb60b21","sha256":"18bbf39a4e6915f988af7263ab2d92858949dc317e2fcfd3e77908f7a36cbc2c","sha512":"6e511e48953a95876b6327013ba9b231f6d7fdee326b4ba88182f2e4e44d3acda336b3c447cffd6f76880d0bf9bb0be2b8cf75289e3f9eda83da612cfb5c0e37","ssdeep":"384:NA/aRBQ7DN907nJyk+VgjQrIrDibRQvDyvycNsL98A75InDbLXaI9G1Pu:pQV907Jd+VSQ7bRQ7yvDN4fk/7F8Pu","tlshash":"d9a2f110cc5119b88f4afa74c12d7a963ed10358195cbf0cf96cb5eadd71748536462a","first_seen":"2025-06-02T18:19:41.054001Z","last_seen":"2026-08-11T15:12:05.993073Z","times_seen":2845,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":90,"dns":2,"connect":9,"send":0,"wait":9,"receive":2,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/about/60c75675a19651623676533.jpg","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/about/60c75675a19651623676533.jpg HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68783\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68783,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 650x485, components 3","md5":"16022d87e87bf4b4cd7fbbba9e92a6a3","sha1":"447aebe710e1cfa0e6041bb9def2edb27242d643","sha256":"51392f2fe402f539f56dceb1ad1cc44d41bff45df00b281b869e8c4950703548","sha512":"dcbeb9bcffa769b62cb24d9b95461b019aebd4e9b5640564fa1a89e035cc7095949c5b52c7e374d975000e18fffce9b49ac8664b6cb250956f454af9e3d7e51e","ssdeep":"1536:p/uQUw5CfmlcRoVTDOHtPpgl6xCgwxD0CClxo:gQYRo1O9pc6cg8ko","tlshash":"d363022ae2577372a725d0123f0b78d4c34d29f6fb4bfe53dad25f42a685884130a4b2","first_seen":"2023-05-23T04:55:03Z","last_seen":"2026-07-25T15:01:59.53423Z","times_seen":143,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/partner_section/61000905dec851627392261.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/partner_section/61000905dec851627392261.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10775\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"29144dbcd11e7118d6dd93655972d439","sha1":"d781796492b077fc7a5afad14f369a0200a20b20","sha256":"6db34574280a11f0fdb7ca3b0ea719f3a35dff8818dc731870b7c69acae8d419","sha512":"b46e8007fdef45fb23aab88c237f328e4021ee52115ad53828e3c1f61e991dcb57c87ff442dbeb9846e827b04097053aebbd9e731f5c5198328e36a293631381","ssdeep":"192:eWtutKsooj9tt4qLg7xy/+/5x3Vmxv+40AkdzqXY9A4O9Od0RIrA5:/utKsoOrt4cZ+/5xYxv+JpqXDRIU5","tlshash":"5b22b0d74131015ad76607ca463adc2eba6ce5e9488fa22605a8d8cf49fd8706fc1b86","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.560507Z","times_seen":266,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lib/slick.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/js/lib/slick.min.js HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10097\r\ndate: Tue, 24 Mar 2026 01:27:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-12T03:58:35.041711Z","times_seen":111044,"resource_available":true,"data":null}},"time_used":2987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2985,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/global/js/iziToast.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4784\r\ndate: Tue, 24 Mar 2026 01:27:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-08-12T03:17:50.052266Z","times_seen":3429,"resource_available":true,"data":null}},"time_used":2983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2982,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Exo:wght@400;600;700\u0026amp;family=Roboto:wght@400;500\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:29.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Exo:wght@400;600;700\u0026amp;family=Roboto:wght@400;500\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Mar 2026 01:27:30 GMT\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3375,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f06411096dcad29065ffe5c6f370d7b3","sha1":"aa1124d8e917b633b4ebba74f5a589af7a784510","sha256":"41a7749a73f1e63deb33f1057fc4dd24b92b4481fa09a7a9840f55f9d671b50e","sha512":"7c1ea8a50f1028c728c3bf8b4f7b85c90edf113a94cf2adaffe641baac950b3b8ce7dc3a9e3c254f2a1158d28d5ac48524a43a06868bedb29fdd09f0719aec8b","ssdeep":"","tlshash":"3c61e061442eb500b7831cca13de3d329e8eb14874948c396ffe5c98ec9ec65636675d","first_seen":"2025-10-13T19:18:01.143079Z","last_seen":"2026-08-10T03:19:18.571305Z","times_seen":24,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":118,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/images/elements/right-arrow.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/images/elements/right-arrow.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/assets/templates/basic/css/main.css\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41392\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41392,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2133 x 2133, 8-bit/color RGBA, non-interlaced","md5":"6d7b1621cc6394dad52ed3b5190e158e","sha1":"3f40b5943730289de46cd8187b84a7256dc1a6a9","sha256":"450653504df54779e11ce8db2e6c0ae6223c9e6ce17da46ea9efd8efdb66c8fe","sha512":"0f1ebf455cd83b92869c600352f47f9411d5cd93c34dc4b54ac6c5383b702422b2eb2b7ce727f52a4e2bb33f544c06e19758552e07db3a442be7303a26f55275","ssdeep":"768:x0ZiwMkLV87epKCujKBUpoD8EZ8x3wRAURoM5hPbnBHq0iaxpJ:xciw5LV2epOjKBioIEjyBMPP9HMat","tlshash":"8403081adf474fe4e48d4572e8ba4f56377903e982003769c37c9c788db77266c6a980","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-06T06:08:53.747152Z","times_seen":197,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/webfonts/fa-regular-400.woff2","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/assets/templates/basic/css/all.min.css\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13584\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13584, version 331.524","md5":"c20b5b7362d8d7bb7eddf94344ace33e","sha1":"260bb01acd44d88dcb7f501a238ab968f86bef9e","sha256":"6a8c8e9e1e7f692c21af1956de163f3d026778e6449fe93a09a671847ca1ae65","sha512":"75d8799a172ae620eaa3ac889cb055fbea9a98d24eb471c826e6bb4c4de685ab3332e888853adb7a6725035edcfd3a29fe9713874c857f14b1c01825ce8164f6","ssdeep":"192:h9DS9gO2kGgdtTZjFBhJhg/5kykmeznSk5mAzH9Jpn8ShuKEzuIhvBu9vlYeT+/y:h9aOgFjHuv2IAZJprl99Ye62tN","tlshash":"9552c0e1b93d1d00aa7682ed8d59615a3642f15f9603f06dbe8fa3d0412bc3c30a771c","first_seen":"2023-04-06T22:39:57Z","last_seen":"2026-08-11T18:29:40.564214Z","times_seen":7396,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/logo.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Mar 2025 18:58:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 190537\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":190537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6451 x 816, 8-bit/color RGBA, non-interlaced","md5":"6c6112a346f633957a965fd0389ba3d5","sha1":"0b1597df013cd001b211c76235e1679033420db6","sha256":"b9b4f8faec60016231a127b8b425f28199e6078c091fd26f121fdd2a7c1ab200","sha512":"2a98e27c21201e041031aa3533302759e98800377d848d6c412955dfbf562f6479a45bc98f9f2afd61775db427952eedf4d0d3f02e4c937852c7cfb8529e2c29","ssdeep":"3072:zur2DLkTKcCwCX9eWkI/y/m1zfvnjigQ9H3dC69cgN8+QNduM/Gc7D8cBmEhHbcb:nIVCjX9d5X6kEjNFQNdu6v9B5hHbcHSU","tlshash":"6c1412ac8996efc0d3a199bcc6b995d8b9d743f6b485fcfec8e86848142523354dd8c0","first_seen":"2026-03-23T20:52:59.977374Z","last_seen":"2026-03-24T01:28:08.220693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/css/color.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/css/color.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1014\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4151,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (485), with CRLF line terminators","md5":"6c69ac6479962d1646abd99bd515bd57","sha1":"1bf6b73b7519836c72148212206df9c6a8691594","sha256":"938c38fc223ee3dfb20821985e560739db3e5b59e74b09370a9bc0257525195d","sha512":"3fece933ba736ca35ffca9d959a228aa5ed8453532477305ed33d86f3826913ba64f7fc003f8d61365e1f85cbb409ef864a11c0ace14d5b49a44a46dffb2beda","ssdeep":"96:bigB16BCTAho/caD7hW055WTYXgeOnSL/deXrg:bfn6iAhqD00STrnWeXs","tlshash":"fa8144b8e50736e767238d3db22c4f389b7931a1860006edb79e21544ff65987e63c48","first_seen":"2025-06-07T11:10:04.235709Z","last_seen":"2026-07-17T05:59:43.666602Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1055,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/partner_section/610007f09805f1627391984.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/partner_section/610007f09805f1627391984.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14528\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"2c16441295525a98adc44b749b309170","sha1":"2770cd0199175a8b06cb4e0a36e701c5274c46ab","sha256":"4aa64b08e747a2334f63f72d95b0ad5c8d1cc9e2bf3c3502f7b9e001621c14f0","sha512":"f29865e117a8e623b05b70bb79fdeeac6addd73996ea9a9d0bd40a4f1c50a497271b477f9828885e52179b0a989b4b75ce0f15e3ee83120044cc83100a11bc7f","ssdeep":"384:nRr9FkJHXK5gKsVUSy1g8Whd26haJRZ7Z4GIbKEP6k0vbX638CA/40G:nR+H/aSy1gthI6haGZP6kpZApG","tlshash":"3362bfededd17567cebd805daacf02a643c8721e2d10994c77e4b2f60a761261006b5a","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.533069Z","times_seen":266,"resource_available":false,"data":null}},"time_used":1107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1055,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lib/jquery-3.5.1.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/js/lib/jquery-3.5.1.min.js HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30282\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89478,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"b61aa6e2d68d21b3546b5b418bf0e9c3","sha1":"9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7","sha256":"f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b","sha512":"5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b","ssdeep":"1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8","tlshash":"3193f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-08-11T23:25:49.638135Z","times_seen":17819,"resource_available":true,"data":null}},"time_used":1987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1986,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/logoIcon/favicon.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/logoIcon/favicon.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15775\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"d1c5773d9ee10bb056f31177b91ce5b3","sha1":"3a27be304ae21cbe49e95c6b4c2c3d86909a3767","sha256":"629783a26270b797aaba5b0f732726858446979cef851a15605af78001e1e605","sha512":"a3010d4c3c1dcf8aebd5e63eb01ee49f5b582f3a827d1d1da512729f947f46702ca731b10be39f44f3c36b585cc52cc812b56cee2e87ebdb529bdcab9f0ad4df","ssdeep":"384:8NyYy81Wqr0HK4qoxV/FU9ScCiHRh2/BtpRyZT:1I54rVdU4cCI6c","tlshash":"af62e1e639c7d0c0514c9be97a936d1c193b038b3cb6682c63677c0e79250f5117689f","first_seen":"2025-08-09T13:49:53.508369Z","last_seen":"2026-03-24T01:28:08.233018Z","times_seen":10,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DKSJbgZl.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-DKSJbgZl.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://treasuretradealliance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69c10910-453a9\"\r\nexpires: Tue, 23 Mar 2027 09:40:13 GMT\r\nlast-modified: Mon, 23 Mar 2026 09:34:08 GMT\r\nx-77-nzt: k5zhjD1gvY8puVmsK24VHW88gmWwvmcNRIjwYsF+V8dlfAnIIafPgp/PLdA0BkoTIWzik/I\r\nx-77-nzt-ray: e2f75420ddee3fff84e8c169f6200625\r\nx-77-cache: HIT\r\nx-77-age: 56824\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"6de590aa97fd2f59da2f1e9f02c0b48e","sha1":"ee5b91018e180ca04810100d05fa1ea6fd8a7ffe","sha256":"b95d128c002ad6a88351ebdea862da52648ee7bde6fecfbedf5019b3051728e6","sha512":"94edeacbc028799c8c5b275e158e16d1c4e80347dd60d384276275caff01f585fea78fe15361d3bb483589aa82ca0eb9ab57a2b1bdf5d6f68357abc85dbd8ed5","ssdeep":"6144:RsJU8SN+jtxgR/ZgQubO/rL5PheWVcq9kNw:RwU8SNYbO/rLPnV3uw","tlshash":"e95449d47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-03-23T10:51:37.072718Z","last_seen":"2026-03-26T07:39:17.029615Z","times_seen":107,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.158.83.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://treasuretradealliance.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: pkNsk2oeuwiVL2BN5vw4hQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 24 Mar 2026 01:27:33 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: V3qsYIdxDEkN2exvvAcbc29Bxsg=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":115,"connect":136,"send":0,"wait":23,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/why_choose/60d497b25b98a1624545202.jpg","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/why_choose/60d497b25b98a1624545202.jpg HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 313811\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":313811,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 1920x1280, components 3","md5":"2e8d31e0bead1bdde573b8de0a7b560e","sha1":"a72c57c6bdcc1f3d22912aee979cdf4ff018c1a7","sha256":"551b9ff72ef7ccdf2c6c9b84b685149296deddc3b6d284db9918081d5de0845a","sha512":"721f5a8157558f2ef99ad96fae845a34eb07a7b2d9a28c95fc22c128a99e57839c60ea1dc71769c658d51ac50c6dbd98ac631bed839ae9b58fb6e5aee973cf00","ssdeep":"6144:6kpERdrnPo6MbiELj0jkjQXODwdjqNegerJmW9x7zF8h7QgrHzyrSzp8VBicAfh3:6QqrPXMuEMj8SQPNzer8AMkgrmYowcS3","tlshash":"4464237472ba5f98e189ea2bd9dc78219b1bb86fc1403c642253fed7fe2505d023311a","first_seen":"2023-05-23T04:55:03Z","last_seen":"2026-08-10T03:19:18.542297Z","times_seen":180,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/webfonts/fa-brands-400.woff2","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/assets/templates/basic/css/all.min.css\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76612\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76612, version 331.524","md5":"a06da7f0950f9dd366fc9db9d56d618a","sha1":"509988477da79c146cb93fb728405f18e923c2de","sha256":"5d9190292acdd48ba0fc35080f7e7448f3cdf0d79199a4d23f0f49b5341fdf29","sha512":"b53d839c5464f7a2904cabcd1e7d6456e2ed1702254450833fc586f4b3a4e6dc07c24f443415a2710e241af8d2dda1b9c17f050045e76501e9b5aa2cb4801ea8","ssdeep":"1536:y2zPXSmtLX9JNsnZVJakesPqIqI9Fz7s4HiUljj7Gu:y2zvxtLXs9e2zYa7Zj7","tlshash":"977302d0a153149af2b02645f91ea4527c19b93c97dcf2643a3aff726ed480fd294f81","first_seen":"2023-04-06T09:36:23Z","last_seen":"2026-08-12T00:11:41.745833Z","times_seen":9066,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-KNmfGZZQ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-KNmfGZZQ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://treasuretradealliance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69afcbd9-9217\"\r\nexpires: Wed, 10 Mar 2027 07:48:53 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: k2V63uTc4uenxl3m1C9+tzXgPBdoge9TaHMnA7gC+v53Nib8gbK1MiXIhrXpTQdZZgBGUe8\r\nx-77-nzt-ray: e2f75420ddee3fff84e8c1698c880925\r\nx-77-cache: HIT\r\nx-77-age: 1186708\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37398)","md5":"e0e19bc0ef5c8a7be30d687ff72b1d44","sha1":"103123375bbaaca149d026b729eaf3ef58d2d602","sha256":"f471612283039dacc9bbab82dafd8e35ed37c4fd9d099a7af946c41231daac21","sha512":"1be4a4bce5fd32ddc8843fb781a28a642c4815fbbb891ec33e5d5ee29d1555c7338eb07e4965a7dbb4ddbc26d45381178b973a26a8f8de0ce7ea10029ab11a6d","ssdeep":"768:E8CQgTcCWYtomXFbxrnSJPHs245q+ggFgZ:E8dgTcCWYtdX3uPF4X2Z","tlshash":"35f2a75daad5093cec33c166e3f8e58c9229f591df321adaf6433a048ac27bf1987514","first_seen":"2026-03-10T08:00:57.31215Z","last_seen":"2026-06-02T08:09:59.912194Z","times_seen":3597,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://treasuretradealliance.com/\r\nOrigin: https://treasuretradealliance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 8c24f22b7a25c47a9569bda5231e082542b28321\r\nx-77-nzt: k3sSLs5pyWOftBEEQy5ZGOHTM/UgipUNw4RUcAqCAnVjQddwY2RmlFxkaRaaeBDPVM4Ug2A\r\nx-77-nzt-ray: fdb54123387acbf584e8c169c28bbe30\r\nx-77-cache: HIT\r\nx-77-age: 295\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e15688e9d2d002a9ed39b75b69eaf60","sha1":"8334c28b880997b2a4391aafde10a4b7463dfabc","sha256":"b094c3b5945028f864269d3d5af31e88f984e7ee5119a61ac716801e948caab7","sha512":"87c5e8e52504edf16fd6f7669e17287c6d8eace783fcbd020158b273c01dd38e75088c20f4b204c12906d7944507b6a120403cf63ab2307361cf844b821f8c92","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/YmzW:CgF/hcbWbYKZcF+jhqoWQmK","tlshash":"fce1b64f9a144ea987c6438276cfb84675bc807352509d7afd8cc8b842697cda3e3b94","first_seen":"2026-03-04T14:01:17.972897Z","last_seen":"2026-04-01T05:39:45.260246Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":48,"dns":20,"connect":8,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/treasuretradealliance12.mp4","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /treasuretradealliance12.mp4 HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: video/mp4\r\nlast-modified: Fri, 20 Mar 2026 20:01:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23674161\r\ndate: Tue, 24 Mar 2026 01:27:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1228757,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"0f31f60f99e619e832f5c28b6a1aac99","sha1":"7d6a066f4ff7cde755971ba7f43fa7b8d339b568","sha256":"df41f004143f35cb4b642164d58dc9a90527483bfa7c747c9230aecbfe25dae2","sha512":"cdc62d40cc85197a5e761799e48b3c5c8e437db9f4e17ab8d38feac757f00c19ba90a1ebb8f9d57598d6070d81e4f42efefafe4387b93762e368f8637999fcb6","ssdeep":"24576:oP6zsjJUUYvwR/stT9Pz1dv6pUy+DrjA9oF0t+D25:o+aYHP76K9XAX+S5","tlshash":"892533ab8f3b0594e85fd770c42bc4853caa5ddefb76426b6c2054803e74522be2bd45","first_seen":"2026-03-24T01:28:08.236506Z","last_seen":"2026-03-24T01:28:08.236506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2985,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/images/elements/white-wave-2.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/images/elements/white-wave-2.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57488\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6004 x 1204, 8-bit/color RGBA, non-interlaced","md5":"77bafa6973a2db4e9444b838fbd0d87c","sha1":"63869b30fe2b30988b709d4a5c5066ce1657c6dc","sha256":"d8ad124882205653f68573919b090d44e05347407e0ec391549d125662039ad9","sha512":"9e904c9e8d17d0e65ef89b46e82a264c157db5e023713f4d804c45c71930d1038a54cd0e37014edc25543bf3fb8c33e612e815bf22e4bb574d03861f33c82734","ssdeep":"768:tefunq2VXNSukytLM9hOnV29hYeibyO2Lvwt:Rq2GDy6HOgnbPrLvwt","tlshash":"3043e54695760fced8085ab3cc123f9667e04b3ec16026caf77ad7217fba5072893498","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.521733Z","times_seen":199,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/images/elements/wave.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/images/elements/wave.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40571\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6000 x 1202, 8-bit/color RGBA, non-interlaced","md5":"23a9d364c356b578b613c37c44163a0b","sha1":"e4d8fba0ad8f000a75bd1ea56ca0bb378d85b526","sha256":"24571d7c611503aecc0926cdf2eb4aeac738b7aeefbe97553cac0ee6733a6e88","sha512":"fe4cafc7f8e5587d2310666e5274e3947d576920589a5a8c27879b635d9165f0f6f506bda2410f2d52384249031c0d492de2ae74ec19b1045cd8a02270658a23","ssdeep":"384:U0OEhLJYV5gp6Xe6Yzx4nzG3AJe++aZqgLEtNNjtTn+s729jaVoVQ:U+huVa6XXYVO0k7JVLEtNPRy9xVQ","tlshash":"1403c8608e675ed4dd0480f280863f9637f6145461b19b8b6b71fdb22dcb38af9a39c1","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.551104Z","times_seen":72,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:27:27.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=74cbb13e3657387e20ec31311503f631; path=/; domain=treasuretradealliance.com; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 9529\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":58824,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (423)","md5":"89c4efdb30319c31bea6c8f9523027ae","sha1":"0a62951be92d055bb96365e1f888e35177d9d513","sha256":"03a6c948fd8c0fe7e6198600637234ccf3654c798fe826ae4dc267e63ec345a8","sha512":"db834fb6dee824210e454b50cbb427153ea9aca092a1170958d13a7fd11952dc82a3c90e6952d929a5557bd141b3a83a6c2b4e2c05adc8c8c6bff93aa26c1af4","ssdeep":"768:IgjoJjfflTS4OT/780FSMklquY++RSOy5:DGTflTS4OT/d+VOy5","tlshash":"62431c2164f6523b01a390e27a355f1bafa0e607ca1b960472fc4bd81fe3d92cd9725d","first_seen":"2026-03-24T01:28:08.238834Z","last_seen":"2026-03-24T01:28:08.238834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":274,"dns":102,"connect":67,"send":0,"wait":535,"receive":1,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/css/lib/bootstrap.min.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/css/lib/bootstrap.min.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19937\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153135,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"ae8ce7f0ccf1ddc03ada322180fc9721","sha1":"f65d8e8c2cb9ef048811bb8c2228ef11ae00f031","sha256":"4dcbb9c410c1da0c26816b39db056e7c17b29a70a5d1d1c605e7412f17ef1b52","sha512":"e76473f4ab73622a82dc2f99d616360ac6c73b9f6721e2701927fd34446b2b659ad55df0770fe111a12c03830cdc3a41b3384b4b3632bfe8c6cdccf0d55d188b","ssdeep":"1536:TtfJxYrkplD+sEBpy0cuJcL22DWg5SNVUpz600I4fS:TtfJYNVUpz600I4fS","tlshash":"7de383dbf581241dd4a7c219a4d1bffd052f5686e3025eabb0277bb88b492c70963e4c","first_seen":"2023-10-17T18:36:21Z","last_seen":"2026-07-28T06:17:53.423715Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1068,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/css/lib/slick.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/css/lib/slick.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 483\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-08-12T03:58:34.989983Z","times_seen":73802,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1065,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/css/main.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/css/main.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13531\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108379,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"8085261b54f501947d72da04af4a699a","sha1":"4cf26982f8271ac93cd3a0034edd06cec7122d52","sha256":"58715b153d56e0a9d948a28618d9c5919af1c5eedd7bd3dfab6b9eeb9948b55b","sha512":"a5675eaa92b760d39e561b25530a79827c94a7001556244026906befb530805009d933be026a95e6a689675c6004f16328cb4ced055a2f7b0aa541eee86bbda8","ssdeep":"768:kS18LSBlJZcYn/X7IwRvxxxx+HUttKUJUrwHB6P:tlJZn/X7IYvxxxx+HUttKUJUrwHB6P","tlshash":"08b3856d990210432237df34a7e24b68fb7551638b0206bcb7de72864ff56e885a1ecd","first_seen":"2023-11-03T21:56:21Z","last_seen":"2026-07-27T06:40:56.095111Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1064,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/partner_section/610008c8078b71627392200.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/partner_section/610008c8078b71627392200.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10408\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"69f643384060be63fbfe50a58d678194","sha1":"142c57e2ca30c4ede10c6de25c850e94380bb7e1","sha256":"a2644abc6be0a478e74cc75219bf2fee36b1778f3da7d62d2b34e34005b2eb32","sha512":"3b6dab0db9f50b4fb938702817a9e9b43562b9932fb1b5457e4d2b115425efdae4eea5c9dc868105144189c342227add4ab01bb1b758fb7fa27214acb5cc77b7","ssdeep":"192:VU4hZSkLvXEpSX3W6j740DLGwiLY2Gtcn2fYbrCR63oyYJRnwv:VU4hZF72I40V8rGOn2f6rCHhQ","tlshash":"01229ed729e160aa7c4daf7f53c510ad027a3a256e06d08ef58e8dfd842c353528e369","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.574447Z","times_seen":266,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/css/lightcase.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/css/lightcase.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2678\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17039,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428)","md5":"e2ac6732da68ad05779bc729117cbbe2","sha1":"0aa6d7fcb74cbacb65afdc282f5d67655491a148","sha256":"85b172918b7067aeb1f94e4e830b48ffbd779be9b9fe68fb7f5a7e91473943d1","sha512":"5b91e82208b633ffbbcd08f679d26a971ca018248674d77bcc2026a3208d7de8db88383a5966b871db0c3cac977980f3bb55162b8b715ec05fe02ae179533f1f","ssdeep":"384:YBcEclkwUwsWGkVK0H420JltKwGK9K6wKVKgDKHKmK4ZKcJK1KDyKV0KhFKogAKF:ycEcl5DgME0/qtJHUlNG9vIr8","tlshash":"61723235ba50038352738107a7f5f91a2714d23be886eda575c9906cafc0bb538a37f9","first_seen":"2023-05-30T23:25:55Z","last_seen":"2026-08-10T03:19:18.52006Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/css/custom.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/css/custom.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1120\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4461,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"335849cebb46e5803708d77db8da0668","sha1":"333b4e6c82f10a7b69238a81cf362d6b13a4e79a","sha256":"8b77497150c6fc357faa51b03ad502f53dcaaa132a9d85c6dfa442756d10a3b6","sha512":"558d9a000e1010a13535a16982077bef8f288f7164caf76255cc80a8038cc20982c3f1e271235761f5ebab199f87871da66b145391f8c00a821999e2bd217188","ssdeep":"48:v0AATV2TqdEKI8vtfkxA/OrwJqVCCkcawL2QGbt/2ZqlNFHxObiW4:vYp2TqOvxEUOcz6QGx/ZjFHxt","tlshash":"35911019ea4511436133ebb8eb6157d4ef6500138702026dbbdd32548ffb6e89972ecd","first_seen":"2023-10-17T18:36:21Z","last_seen":"2026-07-27T06:40:56.088745Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1064,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lightcase.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/js/lightcase.js HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10391\r\ndate: Tue, 24 Mar 2026 01:27:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53965,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bcb8b4bf4540610376d7264f3548abb1","sha1":"ea8d9142646ff5ffbcda2a1cc17c7df1add52632","sha256":"d67b17de1379089afa66d726f59b8c2466f6da628396b5fa626099975b412b4f","sha512":"9e7d6b18377ce02f9ea21bbdd1e88a09cc6814b69708e5edcb4b2483273bb40182c63de020330d8dddd263e5c6d8329b97728c343835f6cc53ff659b638a9814","ssdeep":"768:3JsSiN6TUUPEAGOEaZi0CGpMhrNQqbNTPMkDZ0x44:ZpiOk2Zi0AhrNtNT04ZQ","tlshash":"b03343f8730eb19a445b5358e478924be63cc431223e79bab4f1d694f550068cf62fea","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-06T06:08:53.761556Z","times_seen":130,"resource_available":true,"data":null}},"time_used":1986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1984,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/global/css/iziToast.min.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/global/css/iziToast.min.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9933\r\ndate: Tue, 24 Mar 2026 01:27:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419)","md5":"ca2f839e9a41207ce4d486b75b0dc926","sha1":"398acaa4eca2baa749a90175fe24d3c2a35f19ca","sha256":"20b2776eaee552defc7c9b25bfef14a891f0dd4a12ac7320d689d749e1ca0fa7","sha512":"d9feb978fe3c1c26cbb2efb380a70eeb7501f5631343a998abfc84766f9a6d2f1e521cee40bcff6b381515a7a1d8fb4726af583502ee23549934757766257f5c","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppGf1oWQA1","tlshash":"711345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:39:17Z","last_seen":"2026-08-10T21:27:40.59695Z","times_seen":2419,"resource_available":false,"data":null}},"time_used":2982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2981,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/treasuretradealliance12.mp4","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://treasuretradealliance.com/treasuretradealliance12.mp4","date":"2026-03-24T01:27:32.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /treasuretradealliance12.mp4 HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=23625728-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/treasuretradealliance12.mp4\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Fri, 20 Mar 2026 20:01:09 GMT\r\ncontent-range: bytes 23625728-23674160/23674161\r\ncontent-length: 48433\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48433,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"744fa9c32701716c4a9d621ef9ee036f","sha1":"dd8e3184c5c70c5339f15a4116264164f8a1e408","sha256":"e490270be31a3f7acb6e7c09f23e2c6e57a6201593f3438456d87da1a0060854","sha512":"82c58162230b6cbd2ff3e18e5614844a957e1b03ddd86302a329b0dbc8878ab084ea3c4175dcf5cd37a7d15b272e93e460d2f20a5952d5d41a9d5a35d94c546d","ssdeep":"768:hHrrJul8u9WTjskxziQLab6ODaQnW06OKXvMhEWfBSyK/s23:hHrkl8QWTjs5QLCBacCOIkg7s23","tlshash":"9f238d5373125722c1201a35e6e1a3503774eeea9bcf4747c5c5faa22ecf2c92e449e9","first_seen":"2026-03-23T20:52:59.970142Z","last_seen":"2026-03-24T01:28:08.244728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e153-4684\"\r\nexpires: Tue, 24 Mar 2026 01:31:43 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:23 GMT\r\nx-77-nzt: kxgFnH9VzSCOxiDGoPuIqBPDQ5/4DkCmE6+sF+5nGUiWZXvn664thF+TGxWzvYvpJjf0NV8\r\nx-77-nzt-ray: e2f75420e0bccdfa84e8c16927ef7804\r\nx-77-cache: HIT\r\nx-77-age: 46\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":44,"dns":20,"connect":7,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/treasuretradealliance12.mp4","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://treasuretradealliance.com/treasuretradealliance12.mp4","date":"2026-03-24T01:27:32.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /treasuretradealliance12.mp4 HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1212416-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/treasuretradealliance12.mp4\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Fri, 20 Mar 2026 20:01:09 GMT\r\ncontent-range: bytes 1212416-23674160/23674161\r\ncontent-length: 22461745\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":113110,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"fdca65942494a570c80178f025fd6fc1","sha1":"e6a0043429f71ecdd89c1dee912e71e08aee3ed4","sha256":"4d476c6c4af510f312d448bfb2bad0fbba9837f2edfc2f2e94873f095d0c937d","sha512":"5960488e96a7a8347fe6d55610f8f46765f1eb54a37367a972a07acd80a8188354f2de97a43da5e5aa9866d18415531b924a86bc92f1844e5e4f19da344c6e89","ssdeep":"3072:BBTC7QqWfhuekc4pQpUyrb9HgThSaSOgA:BdYW5ueMXpND","tlshash":"72b3132cf60fbe1ad5871ff0a4244075b699e18c3b972c6fba2889b350d39d708c655e","first_seen":"2026-03-24T01:28:08.246192Z","last_seen":"2026-03-24T01:28:08.246192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 06:13:40 GMT","end":"Tue, 19 May 2026 05:12:24 GMT"},"fingerprint":{"sha1":"DC:97:69:5E:8E:EE:A7:AE:08:2C:BA:84:27:CC:78:BE:48:DE:D9:B8","sha256":"B2:BD:82:B1:F5:33:E3:71:20:4B:29:85:BB:B8:05:14:BC:40:94:63:88:A2:BF:5D:3B:63:04:29:51:B2:D9:85"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://treasuretradealliance.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 07:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"698ecfa4-6beb9\"\r\nexpires: Tue, 24 Mar 2026 02:03:35 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 8636\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCuQCkUAm1QrVazJ7lZgdV7e8cZHgaCuroOmhDSjGiaYYHHB0EeWXDLD9xRck1z0N2UTZ5BryalBA1%2Fm19RwBRZFB4sd%2FKHZ8WybwNVl1x1H4w%3D%3D\"}]}\r\ncf-ray: 9e11e4db69c732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-08-11T21:15:19.270765Z","times_seen":2875,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/images/elements/white-wave-1.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/images/elements/white-wave-1.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59376\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6004 x 1204, 8-bit/color RGBA, non-interlaced","md5":"4213c49e0f4f7bcd45fd28aee8c741c3","sha1":"2517c2565746c672462c1a1447f0a051b7879421","sha256":"152525ccecdefe278523c6a5202fbcfd2dbf8e84eb27731c7c01bf37d8a4a2fe","sha512":"aae752e0e5d1ede43ecb50c97ef2a3530bbddf8851ebb651e9746168a5ab11cd99360228fd458796c8b7d611936d12e89f9b8cd4e1461e1a1799f54bb3d327b9","ssdeep":"768:vbOGSOdmuX+507WQQxDLoHPSrvzZsbTKapR/uRpFmP8oooooooooooooooooooog:vbfYuX+e7WZ6P6abTK4ipFm3","tlshash":"27434a4a5bba0ee9e948447388477f5b6794477ec0605ec767b9e6202ffe303505398c","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-06T06:08:53.734275Z","times_seen":207,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/partner_section/610009d71ce7c1627392471.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/partner_section/610009d71ce7c1627392471.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17642\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"48474ca587ee60b0062fdd6aa5fcf985","sha1":"e8bd5dda72f30442c9ba24d0239508298c4780ae","sha256":"44198e2d044c09a6bfcb047f11357733414427f99b345470e3fdf3533013b2b2","sha512":"0140f88775cb730134bad0e9c60c253810c0ea510d8a4d7ac7ff061ad8526a4cacbf5085b3ccf583535fb00a589a7633f29aa186a178f9782dfb666e0dfa092c","ssdeep":"384:p/sjfVfiZ7sXEcplwxSr73qRibOlSOSJXe:0VC7Qw0r76kOck","tlshash":"6182c08346b601599ea7d0ab38e047cc972a0b7cd7bc364f2d17699795602a812c37e3","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.530026Z","times_seen":264,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/lib/wow.min.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/js/lib/wow.min.js HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2572\r\ndate: Tue, 24 Mar 2026 01:27:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-11T13:10:05.269197Z","times_seen":14369,"resource_available":true,"data":null}},"time_used":2984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2981,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/js/app.js","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/js/app.js HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jun 2022 18:04:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1360\r\ndate: Tue, 24 Mar 2026 01:27:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5011,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"010de18f8f6e7996425e02648dfa5a44","sha1":"c9308cfb2d3e699b4a7f8b5ea2f3ff5fa57a1b5d","sha256":"1f6985d708c1d38ad6096f7b1abf804a1cef14788337562437c4b95cc622f50c","sha512":"0d337165dafda707d4c1bd8466b5e559526eb566954ddf601a5e0106ba4c68eff0042064fecf126ea78bb1cb8c095b8cd45b346dbeb1e61ca67dd16a2e203d9b","ssdeep":"96:kvpc6eqB1JCX9TSaHHF1L+8IngPPJLcL0WuuTx:kv66eqB1IX97L+Pnxt","tlshash":"16a1ff1ca811513e843f63baa91ad709ebeb172342494563b9fc454c2fb066a33e1dfd","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-27T06:40:56.115526Z","times_seen":59,"resource_available":true,"data":null}},"time_used":2983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2983,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:32.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://treasuretradealliance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 01:27:32 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69c10910-7b0\"\r\nexpires: Mon, 23 Mar 2026 09:45:13 GMT\r\nlast-modified: Mon, 23 Mar 2026 09:34:08 GMT\r\nx-77-nzt: k4O9goOI2hdldxsgtL9iOKZYV7o4pGDU46DfsdD2CErRz81eHdQVB7iArW6ycUdZLXsE1K0\r\nx-77-nzt-ray: e2f75420ddee3fff84e8c16980f42f20\r\nx-77-cache: HIT\r\nx-77-age: 53\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ebcb55433118c922c877a2e2fb874897","sha1":"41da08c04ed7a5a2800b21f333cd437e143f2074","sha256":"0fbf15310f08a34d7976e8abc38528b8cdb2e48bad631f546023d82f55c17326","sha512":"84b590cbd971f2c84b26cb4a88d67b85bb4b5efc894ac8356c3a6023bdec1ec80e2168a360bba1b93f4eb6da8ed9a0db1b959e3a78b938deea28d9f89ef781b9","ssdeep":"","tlshash":"e1412697c0f80d531b9c622bb8944a415d54c3c7e8893d1d36ad8abf2f0ceb910e6b6d","first_seen":"2026-03-23T10:51:37.01895Z","last_seen":"2026-03-26T07:39:17.028598Z","times_seen":107,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":59,"dns":33,"connect":8,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/templates/basic/css/line-awesome.min.css","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/templates/basic/css/line-awesome.min.css HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15193\r\ndate: Tue, 24 Mar 2026 01:27:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89780,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e0ed8639610783c423b7537814d3a5a9","sha1":"61bde37197757ebdddf967b690323159b8f9ef06","sha256":"2705f479a533c14dceabeec24ce5233fe6236acb6696624b66ddbee201da16c0","sha512":"c0a21e0fc0c9bd9343f787f3db45aa7c91f042d7e3c9d49f8af4c7f3d1c43e442ecb59f08e98f49eb7245dfb35daf24469d3ce1f496e366fe314b3a6dadcc790","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VN3vTdgBngfy9IcjJv5IopdU6:1b+754u2nOW4xUse1exX7Ha9hU6","tlshash":"49938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-05-30T23:25:55Z","last_seen":"2026-07-28T06:17:53.558093Z","times_seen":59,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasuretradealliance.com/assets/images/frontend/partner_section/6100088e88e2d1627392142.png","fqdn":"treasuretradealliance.com","domain":"treasuretradealliance.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:28.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasuretradealliance.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 06:53:57 GMT","end":"Wed, 27 May 2026 06:53:56 GMT"},"fingerprint":{"sha1":"6D:74:6F:F9:92:E3:54:F3:40:68:56:21:9C:47:70:0C:EE:0F:A8:5E","sha256":"51:02:27:50:1D:C2:99:81:E9:8B:6B:AC:8D:14:7D:F0:4B:20:1E:46:FF:76:EB:FC:C6:47:39:99:7F:54:E2:82"}}},"request":{"raw":"GET /assets/images/frontend/partner_section/6100088e88e2d1627392142.png HTTP/1.1\r\nHost: treasuretradealliance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasuretradealliance.com/\r\nCookie: PHPSESSID=74cbb13e3657387e20ec31311503f631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 31 Mar 2026 01:27:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jun 2022 18:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17998\r\ndate: Tue, 24 Mar 2026 01:27:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"a3b2bb8ce3985dea5cf169c2c4ed8d2e","sha1":"0b546d003c2e1aa1b428d9e307f1053d1280b7d8","sha256":"3838ee068c2be9fbe063809e683af351ce50583cc495935386db6656dfdc2404","sha512":"f8bdefa8d5aa77f69b2987415d5a299757d1ee1f07643ba0b337163e1c7f788bacb476aa9fc042a986711fa3ac0e24cca7f9c60d587c4de4c503eb694b9fcb65","ssdeep":"384:qH8mS2o+JOvOMQ8QO0omdv8yuszi8MTcL5Xdk6t7aJNh6Ca3xKfV:qucQOl/O0o+vDqT85XK6t76uKfV","tlshash":"1d82d0fe588d19fc7a334f6f93e7b00275af32a97529cd7a503ca871c221652984a11f","first_seen":"2023-05-05T08:19:16Z","last_seen":"2026-08-10T03:19:18.57546Z","times_seen":266,"resource_available":false,"data":null}},"time_used":1110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"treasuretradealliance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaOrEtFpBISc36j.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://treasuretradealliance.com/","date":"2026-03-24T01:27:30.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/exo/v25/4UaOrEtFpBISc36j.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://treasuretradealliance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 05:17:57 GMT\r\nexpires: Tue, 23 Mar 2027 05:17:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nage: 72573\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21828, version 1.0","md5":"40836fee7a598ef229d06bf980e0e75f","sha1":"7b52a6ecd225795e276b548eab6f28628eb60b21","sha256":"18bbf39a4e6915f988af7263ab2d92858949dc317e2fcfd3e77908f7a36cbc2c","sha512":"6e511e48953a95876b6327013ba9b231f6d7fdee326b4ba88182f2e4e44d3acda336b3c447cffd6f76880d0bf9bb0be2b8cf75289e3f9eda83da612cfb5c0e37","ssdeep":"384:NA/aRBQ7DN907nJyk+VgjQrIrDibRQvDyvycNsL98A75InDbLXaI9G1Pu:pQV907Jd+VSQ7bRQ7yvDN4fk/7F8Pu","tlshash":"d9a2f110cc5119b88f4afa74c12d7a963ed10358195cbf0cf96cb5eadd71748536462a","first_seen":"2025-06-02T18:19:41.054001Z","last_seen":"2026-08-11T15:12:05.993073Z","times_seen":2845,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":176,"dns":1,"connect":22,"send":0,"wait":12,"receive":1,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}