{"report_id":"bb5d8018-04fb-4239-8201-4fc0e9f51e93","version":6,"status":"done","tags":[],"date":"2026-01-03T08:52:33Z","url":{"schema":"http","addr":"upbytetrade.com","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"upbytetrade.com/","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"title":"UPBYTE","dom":{"size":41963,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37659)","md5":"b3a00a67012949e1b04a96df28684b6c","sha1":"9ae8c3a1fc9737785c7941f22f4f15246dca5c99","sha256":"3adbe2160de667543ec558ea3aef7c7989ca2f5f61f8d249d768179868201a8b","sha512":"af1d2cc3fd91dd0a08dec15045ce61ed1abf8f6edc9cebf23e6614e3b2d98efed58826e972c895db44189fdcb489ad44eef531a9a903f8d3a13c245ea38e7870","ssdeep":"768:LfHM4BfICUGctU73MUt/1M4mwYMOKfzHdXOzmcgv8421IsIdojGD4b4YHis7JP+o:Y4bUGctU73MUt/u4FOK5i","tlshash":"871313b658b0192d50234a1ccfe5aa99032cd483bc745ebe7357290bcb8bb4d736e257","dom_hash":"domhashe8df1352fd65223ffd8c34d1d6baedcb","first_seen":"2026-01-03T08:52:45.145501Z","last_seen":"2026-01-03T08:52:45.145501Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"upbytetrade.com","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T08:52:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.livechat-static.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-05-30","domain_rank":339953,"first_seen":"2017-12-15T05:21:49Z","last_seen":"2026-01-01T10:58:39.574322Z","alert_count":0,"request_count":1,"received_data":372918,"sent_data":476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"secure.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2025-12-29T05:26:21.513722Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":714,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.files-text.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2023-08-09","domain_rank":89437,"first_seen":"2024-04-10T05:26:58Z","last_seen":"2025-12-31T22:32:07.903787Z","alert_count":0,"request_count":1,"received_data":4380,"sent_data":564,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2025-12-29T03:45:00.873751Z","alert_count":0,"request_count":15,"received_data":1022670,"sent_data":7202,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"upbytetrade.com","ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":58,"received_data":1249425,"sent_data":30950,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2025-12-29T04:28:54.4625Z","alert_count":0,"request_count":5,"received_data":20517,"sent_data":3016,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2025-12-29T03:12:55.870276Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.C9sqjOJ-.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"70fc421c98bd4890b9d018bba79efab9","sha1":"3c6077cd91cbcbdea1633fe41a2d1f64f5b9e48f","sha256":"0b5a8520979d5001b661a705a3674f2be73ea6ad57e1901dc18f034ad903cf9d","sha512":"cdf42069d1f67cba0941e3de0e3ba71490df155ec6dcc5371203503502dd204095e5fa7741f079c80cbb780cb5574f0d9f77a58679b4709472fc756959e39d5d","ssdeep":"96:GemlKAJm2AllIreQA6Ob1NwmiF2DMrBNaas5pFJprnNCzaNkQQyZFBXfFBXoQFd6:Ghu2UlI/NgO2D6BRiHNqaNkQ97BXtBXk","tlshash":"78a1d7fef365f97097e98ce9e5143043ed3b1268f8ac85b0fa5c4e55214d2889032ba3","size":4900,"data":"","first_seen":"2025-12-18T15:35:53.171801Z","last_seen":"2026-01-08T06:36:03.36491Z","times_seen":1339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-08-04T17:33:10.206718Z","times_seen":29138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026version=3e484e3f8236c9d1f2239ff432260121_f30528130c5ef1f29eab0150d5cea80b\u0026language=en\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9646eaf204de1f42e0eed14fa26f1c3","sha1":"4b5d5818581812038d187b157363e04c2fd9e15e","sha256":"438ad3a646d9d3e69c244db065a062b0e16ce2a43ce925daf2128381e9bbde70","sha512":"dd37b34ce092de8ead2a135f5b9d95193d9339e691b147b7940bfbd4d3ecdae3923136dcd3a61b7c3554ed8fb249316fc1ce35b97b8724e4082d5bf27edbfc7e","ssdeep":"384:s3aZMXVUH0cC9riqHoKwpfi3z80CITojYsPw:+KH0WfilCIToFPw","tlshash":"3b42c819cb527e7e07a365c6b48fba52f4a950d856900437eccc803c9364fca739fa99","size":13099,"data":"","first_seen":"2026-01-03T08:52:45.246659Z","last_seen":"2026-01-03T08:52:45.246659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BP5Mhw0T.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e55e20c6c2e088ee42155bf66c256766","sha1":"6f231b0fd59e770a1edaeb728e07962003317f91","sha256":"28544249628b40ee01ce53980a5b2c8f15b90b03deb527d024c014e21887376c","sha512":"1b730ceb15a5c989f992d53f95102668c14a0c8f649c381afc09595e1dd6dd04570878a08d3ff216b14cdfedd619ad0bf290613c71a6ed1d395e37119e62e436","ssdeep":"1536:ZzLUX9ltgW34stWe4Kw3fvzHHAVVrdXUU7sRbbwFftZxK:ZzLitZ4sUVLHHADrdX0NwFftZY","tlshash":"4f7308d2f686f5398bd794e511385103fa267a18b82cc170f32cce20219e687a177f6b","size":76125,"data":"","first_seen":"2025-12-29T08:53:29.749766Z","last_seen":"2026-01-08T06:36:03.307609Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.2d_8JfRs.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"291a16ff651dc064e86208a740111050","sha1":"7c5216676bfce746ca05557eb2d5725ceb5ed36e","sha256":"80f5bec6750fca95ee77b0c605e40cbce015bab6813dbccc2505196f69532e0e","sha512":"8ec0059ebc6cb0e451dedcdf81b375f58389336ba2b5ef775c173fc383c4cb5d0065f5738840977537c60a58e4954bd9c3841143f02b460a8bd2d000783c0d80","ssdeep":"384:6rU5lrbvy+4nmoHDpXlkaJfnpvW4PkWgpwnxSHI0Ww0/j7JFHyQ:Hlrbvy9JpXlJJfpvW41gp8xSovw0DHyQ","tlshash":"d872d7c5f7aed93e53e7a4917c682003fa786ac4f02cd1a4f3994d62719e8c48177b26","size":17113,"data":"","first_seen":"2025-12-18T15:35:53.085215Z","last_seen":"2026-01-08T06:36:03.128772Z","times_seen":1340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/layui.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","size":7395,"data":"","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-08-06T20:18:18.704099Z","times_seen":571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-07T10:34:55.057904Z","times_seen":138507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/index/d3.v4.min.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e899651bcf1a3591032d7213daeab171","sha1":"607e02087446eb2efadcbee253db3aca3d794a7b","sha256":"8585db4092b8a9d26201e0d58e343d1b40fa034c4b9c343878923d7649bb1699","sha512":"44927534d0bcf1084deddc29098f2b9bfe8ec48f987503f8f03acb19efde48077e9feb353d7c10924a73cc082825ee1c6455b61802d0a31a31eb5812636c907e","ssdeep":"1536:wJdNAq50g6ds5VIG2pUfpgBU3gPDSb7+CmeoA08h6Vh5Lbg5ECfmDoo5rfIrTGE9:wrN3F2pHSYlyLG1sVAupFmuFyiI7R6","tlshash":"092494ccb682b096936320b0417f244bf33b2d59684f4568e029e9d97c7895e51bbfbc","size":221957,"data":"","first_seen":"2023-03-07T21:28:45Z","last_seen":"2026-07-31T00:54:24.207289Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/lay/modules/element.js","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"784379625afe1516f69075a78007e7bf","sha1":"4eca1e2bd313d46ddcf113095074da797b145aa6","sha256":"763c30063a00b2698ab3aa17948b5008a33d477fd7dfd45f11f3d4a49e29b73c","sha512":"f08d8e5c3c091ca2a0f00109cc55dcf9a7ce055996f1fd2d6cc2f7b414e533c0b8356fb5bd3ec7eea1692e5aa56d2be0465465f60479f3eb2afb783cec3ca87a","ssdeep":"192:nZKp8KKtRtwFC2q6IsTPJB91RGRtX9uEUn0Gs:nZltcF+6IsTP5ONN","tlshash":"bfe19518b05236f73197b5d143bfa21da03f4636e70246ac3066d4ba09bbd891673f9b","size":7264,"data":"","first_seen":"2023-03-07T13:00:48Z","last_seen":"2026-08-03T02:10:56.23031Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/lay/modules/form.js","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55a0aaf3d84264e3373f58f347a18fb","sha1":"921760fdababb5639192c73866c1b3b5f2ca0644","sha256":"03315f4a8fa90d66f3115d686bcb50d9356136607f92edbc9c59d4f27090a0f3","sha512":"7295dd0874606a2605b16a49ca696bfe305e16d769a7d037cfba0e074591e4def8dea94e4157cbd7c52e85e8de4ae496155c0af6d21b00943ba04ab6164edc13","ssdeep":"192:7U7m+EjWnSTmyANS4B7R6EoHv9w5iaHe16GL:7U7msqmHBV6LP9yiaH6n","tlshash":"1312a319715135e2367b60a1405f981ba0bf4635ab09c8947093d4f92ebec9493f3faf","size":9591,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.884574Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.CVJRUtO0.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9cb993915ddc0b53612abc4c5917f60","sha1":"56bf44ade98665e7e472b6ad83d77137a73f11e9","sha256":"2bf2e80e80fb683c018db04f4ca96265eed50d9c9ba5b49c0c06f75d77f5d230","sha512":"a4fea0319b7747379987af9a83b0a2ebf137e4b54827ea1ac3191e9f731df7bd96790cdc5c0793b44dc9ee0ea910cb1c1557a71e07814160d78cf7f1a16bd601","ssdeep":"","tlshash":"d4e095caa200bde3f2cacce4c81094e656f353960be483b0c1ef13b20320061ce95a92","size":432,"data":"","first_seen":"2025-12-29T08:53:29.726225Z","last_seen":"2026-01-08T06:36:03.249087Z","times_seen":705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/script.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcd3b96fe52f48f5dde6aa924e019f44","sha1":"3b9b647a6bb2e4bf1722f931274efa124fc1e4b7","sha256":"646737151eebfc520ad7beb27cc7ea99a62ec343e28ac6b10c2ef9651dec88e9","sha512":"4889dafbf3e989b6aaf22cb19be1776d793aaea6930ead190e4f100da5628b81487a30f2fd06de64ce303ea37fed1d0c8e1040734526e5c8763dc845882c38ed","ssdeep":"","tlshash":"276172687511241c93f323b21ebf2508d27946a3092bc7a1b44dfb806f346254feb9de","size":3475,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-05-04T15:58:11.675714Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6a8a3cba0ee16047128b27c59d45f1b","sha1":"ff988f9aa3c7b1b4cd2f33a669e78310232bd714","sha256":"5cedce66a8bcbdd119c1bb8c4e1e1626ed66951d9b54df41a341d021798e4a11","sha512":"8fcabb203b46d27ebb89171bb0ce45f3675530f64ab2b9e88b7063b8adfc3280bae777fe204e36264e2a17e3449d2424768c9f9791d835e7eb1827583c7ec29d","ssdeep":"1536:EnC9o5ri/D+ofycilweyO2PHbxaK4wpe3UHdjmdy0mUF:EC9o5u/Cr9yO4bxbRp0L","tlshash":"eea339d67282b03493f785e7a07f6312b23a6918740d8420f17ced6a395a987c177f6e","size":98305,"data":"","first_seen":"2025-12-29T08:53:29.765227Z","last_seen":"2026-01-08T06:36:03.164768Z","times_seen":801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/lay/modules/slider.js","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c35742db2e72cd4f30cefa23690ecf5","sha1":"b50d4268f547cefd984c069d276c956feef395e8","sha256":"2fdaaa9935b2d19fb54e0798e6e42fc3528d1b2772b46b9aa8731b1ab6947609","sha512":"44d0ab3649b35cec891738e6eb4f28d1857fcb900e2369b9395ea54854717108268c8ce729591923fb094cfe1b34dc0f9b2e9bf35b17b77f34c479ef80deb391","ssdeep":"192:z8Syuw2bmz0DLKypMjYXVp5D8IlM/eq9zwtyd4UduKN:z1yuw2UOPSBMj8/","tlshash":"53e19615314ab5732172c263b59fc84eb2f20779b303c564a6a540a51ebece82b37f63","size":7091,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.886539Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.BiEmow_Y.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7dcfd190dd33470b3403c6c1aae08d99","sha1":"4eef7d04d7ca086e81b9c2b4c1ba63a1aa712d5a","sha256":"f35a28b66907baa86adeb009b8733f708b95c6da0b00cd543968bb83c493a0cf","sha512":"6aaeea23197290bdc58d2e1259ec9c3c07ab49e9a606af5959ab1402eaa25968a3ac62ec397fd0e92dafed166d109c648bdea28ff593b68efca245d508404826","ssdeep":"1536:K1qGd/D3uvxhUEn5thv3KDlCfuP0ws3wJmK/:qlL+phbPvMCfhwsR+","tlshash":"f4335ecef1417531a7e315f3a07fa106b63a192c384c81b0f629dd9925ed04b626bfad","size":53693,"data":"","first_seen":"2025-12-29T08:53:29.752527Z","last_seen":"2026-01-08T06:36:03.079418Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19396999\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fupbytetrade.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__blj0ok2ctor","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a3f87d02944a75d675c0a20f3d6dcb7","sha1":"3cae35b4f1e8947b012b8e5cb8919c367c84244a","sha256":"48a8f8a703f773b2c60c4d60981abe95e2d6d69043ebcfa465f6d6da00804014","sha512":"76bf32103f8f86edae2f2fa2015182ea8752fee4cebc707dede1fe72d3cacd6990518bf4c2fb7e7c3cadc51f4c8e2c3e81f7fd9760f9eb8b9174fdb0c2fe39ef","ssdeep":"","tlshash":"d9e06862fa1151366bc1f3ec688429016a740366940447b8b4691241a61b6ac7364c07","size":380,"data":"","first_seen":"2026-01-03T08:52:45.183163Z","last_seen":"2026-01-03T08:52:45.183163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-07-27T01:40:34.488861Z","times_seen":26483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.BLGyaTQF.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"adec7c24656363f3963461f9ef09dfb7","sha1":"5f05b7d32f71a929e3f913ccf563b991ec07609e","sha256":"bb052cc25364c19b0bac19ee30c39ec992a3a45bd04ae648652ad13f38e16a4c","sha512":"608ce114cde93357276385ecb80c3c7572172bbc9e7a0afab7ef5188bfb0e4eaeed11110cf07e91186c389ea0aaeea1fd609ed741a7bdc1a59f2a2ceb345b029","ssdeep":"","tlshash":"e9e07dce61d2f4f24285fccc45105081d368df801bec81a0c06c5f9027110928836ec4","size":310,"data":"","first_seen":"2025-12-18T15:35:53.134213Z","last_seen":"2026-01-08T06:36:03.423384Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","size":236,"data":"","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-08-04T17:33:10.203066Z","times_seen":16397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.B0_QvnEW.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"bb2424b90285d46f921f699e7b3d17d5","sha1":"412e217bd4cfbafc553fc36b9094d0ece147a429","sha256":"2b1840010c419cf6839e4a18ffd0eec542b4c0d0c49ce5606bf93639afda5ff5","sha512":"f283f440d13fb69e25c115fd3e9dcab60cf937ed1ad964644f9719abba510e9f99ac82747ef2aba6991de08cbe10a8965c0d352c380dfa471d2b6753beba021f","ssdeep":"","tlshash":"a41100d93cc3d8b0d73bd4cc52a899e6d43c0e88a8fd41c0e4f86e853b155b18236ea8","size":886,"data":"","first_seen":"2025-11-05T08:48:35.692413Z","last_seen":"2026-02-25T11:20:48.331177Z","times_seen":7795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-08-04T17:33:10.166857Z","times_seen":29934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/websocket.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5df0f945add36bcf709ddf492dcf68","sha1":"b7829bcc305438d277be129a8107fd74c83800b6","sha256":"5c2c800f2f214f5c134a265d343abd163a50bca639f658becddadff851f742ff","sha512":"a079e503db6e74d0023b38fb6a2b559c96bb97452f689390a4a01e1fe7ed990f356b342aed4d760f201a57c45676defbee352f92f7e521c0beb95714f1b2e134","ssdeep":"192:KO/IyXAfwKXgCYkJJqm0DJpBko7t9s+uEYwlJGAIrccjt4HywGb3DDFr:KeIoIXdYk6DJ/kMjs+uEYwlJG1IH8l","tlshash":"e0728fa0b3ac165f41f6161580bc66c4cfecc672837545e7f2aaa9e05358b09106beff","size":16226,"data":"","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-05-04T15:58:11.618475Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","size":193,"data":"","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-04-09T10:49:40.045057Z","times_seen":23532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/clipboard.min.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa7c9d74f567a8877522f816d7c387cc","sha1":"d79bfe29e732477cb27598dedff9495ddc05f390","sha256":"6717dbf025d81f537cc639903fb560e01912c0467e8da579fcdf92c6f58f7a65","sha512":"da4a20fae935b42cb957a322479c0e779835b37291c6ac8cb41f300dde796847897f788e849ff6153a32004cff087615d37f9f2cb8aa5751cdb1b8bab2534b16","ssdeep":"192:q0Z14dOk1XSHkKpI/230xlH3G4Ly9+vxo53CoD87JxKllkvc363Pw/3JyUZu5MpL:HZCQfI/wsXCz3rbllC3P83JVu5/Gz","tlshash":"6122a68cb29071b156eb50ba802f420fb271c42db06e40a8b21de8f56c7de9d4627f3d","size":10111,"data":"","first_seen":"2023-04-08T01:19:22Z","last_seen":"2026-08-07T10:40:30.54909Z","times_seen":2256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/index/index.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"787494578e1b5ccaba5768c92f4f40ff","sha1":"aa7c095b139b7a2734d5707da7429826ea593469","sha256":"8a54b5c04b597a626f98aac24e8ad89169b4c3f3a19308c3b2914e4528b26655","sha512":"c0d71e9dc6c4c0ebd8b9561a02e711f988c6a4c96371511536b210f3bf18bf31c317f22db700b87682ee80e0a9d999c887d0bb45fc8424394da9c73ddf229928","ssdeep":"48:4jHsJYS7AEGyUjmHAuEZBnZBJOt9dxGiKsu5Rt/PtzPDvuli+hIg:gHsJ/oQARZJZTADoPt/Pt3v4ikIg","tlshash":"ae913406e4e314536f13a09a8feb5005a1add033d20acc4dbb4dd68e2f5ca7c5565eee","size":4407,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-03-26T00:30:53.894233Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd8c3829d432c7c6db1ee56b1f7af93e","sha1":"46407772ce9305b43b79575cf2658d629e2affc0","sha256":"cf31f8054ef909b8e2a7807039b7bd57773636443df3933a868e76a382889998","sha512":"e7aa56d31c960932a74f7f1bdaff482900b51b334a66b85ee2c1759593194465191eddd2e6929e827c368f4ea62994f0ed7f9b88d9dd4da7787892722eaf59b6","ssdeep":"","tlshash":"b6e0c2008e634bc43c082c40136d363b70a288034141e505f9aeb04a9fd758fa8ed3ec","size":298,"data":"","first_seen":"2026-01-03T08:52:45.260363Z","last_seen":"2026-01-03T08:52:45.260363Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19396999/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-05T22:39:31.440318Z","times_seen":28115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.DiEu57nc.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"47eb50052f15cfc1d88aa1554601e55e","sha1":"f805750b3d2e016885055b29a6e9ab8394c8599b","sha256":"7b86440589ee714b1c7a6d74e6d9a691f1280d57a36376c440cf949ceed5381e","sha512":"addcf2f225368a1dd929e431171096fd397be6d2175d4923be40eb5b8fa10d0934ce036b63bcb76b95444653e0b4db6d80c06885f4b3535c89e24b6420298da2","ssdeep":"1536:9gZQTsyz+6WzvhFCvB0Hx6J+vXlKAwTwH7nDPWnYlkChX8qg4JklHYD8b:9gKTsyzTWzvhFCp0UcDOnA5sFikRYD8b","tlshash":"dad3f8e83996f5626bf312b700af1817733c192b280c4990a211fdddb5b845ea17bf9d","size":138434,"data":"","first_seen":"2025-11-10T12:08:03.375538Z","last_seen":"2026-01-13T13:49:38.678696Z","times_seen":5241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/lang/en-us.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26fd80f238136ab70ac2545308240972","sha1":"9c53209dece13d2ea508801018e17a48ab20ec52","sha256":"4bc90ecaf4541f9f71e04744f90b02ec404ddb22aab1dac753d96e171e1c1185","sha512":"efb3db97c63e2cd7d447f8337e3b29c7cf369b261eadab75aa887d196feb57c4e44d0f1f2a96fb82190673acddb1c8735221617f1d6d1e4c119dbf4b5c0cd10d","ssdeep":"","tlshash":"87115c55520c9494050694cb76a716c5df8540770981768ab7dd81dc7f8bc2be2f7189","size":970,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.854766Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0497fbd2698ce07ebcff4741381c0390","sha1":"767642e0d7f40f6cf76264ff94a0f7b16fce9152","sha256":"04e0a21fb5a6ef5601039551a3c767cf78937ffedd79b408506080e34de79b37","sha512":"f0fc05cee66a7f707bf6e5d7185907692be05f462e8132f8d7b0bfa7621575a4274ec1c447ac9bd7b68276dedef48a2ac22a4d75acb17da345ca1c3d068e9bb4","ssdeep":"","tlshash":"3d11ef99fc42b07696963228763bfa07516212261884a4337efdc36fef32d97811368c","size":868,"data":"","first_seen":"2026-01-03T08:52:45.261373Z","last_seen":"2026-01-03T08:52:45.261373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b079015879110e8d38fbde163d145292","sha1":"c38f410062f607117a5cb1de8cbc1d6673aa9210","sha256":"acd5895bd78407e9ea93750a80a9c12ae0d5d0609809a4861dab028f128597a4","sha512":"a0006071d2bb6658c336f092a73160f967a13f74d75f07bbd0269b218e7f4fa24dc76a602377f1747cdc0908f035f99ee85a16ea7dec4e7cb63b920dd11eba64","ssdeep":"","tlshash":"a470000c8f2a8000a00a8cc0208082000ca8200222200000a80a0e0030802a0802a0a8","size":20,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.896717Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/lay/modules/layer.js","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ffd5603784dbfeef189498c1a705c15","sha1":"983f2308aab1a1addad5be4f1c49099f5dd589cc","sha256":"2aa83aee413f9b91a2dcc536cfd6acd6e44b3fcdb59c26586e32d083396a8db5","sha512":"76d0b3952e17783ab3b597d0db1f734bf7b933ef8ff316c8107f5192f1ecf318c3f11c9ba10a4d15063b26cbb32133af7581070d7c782ebbbcd6580cfd21545a","ssdeep":"384:619Cih92A3igTLXSt/SdMrXqE6K+LxzAOTElH0jjhtjfs8:614iV3iaWtXIKiF13k8","tlshash":"b4a2b66a754034976323906ad11fba0b31f21d24d7078128f22ba4be1dbcd95a2b7f5f","size":22041,"data":"","first_seen":"2023-03-07T01:06:17Z","last_seen":"2026-08-03T02:10:56.239734Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.DL3uqfmp.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d8c422c49d1adbedc53e3407ceb4a50f","sha1":"d4f7be0e623f3a86123d58dcd16495f6ab505106","sha256":"da6bdc91dab29d0686d4c32666656928f142b32c0af92ce75c30675dab3c1466","sha512":"4d49afb21f9f82809447f33b3f36c2e18874ba4a84ec2f5edd9258e6e7a7340d7650ad9f27a7816f19bee216acc2c3d82b60127878ceed847de79092c55c801c","ssdeep":"3072:q8zvDq2gkDPXWdLbWFI1Gy57IG4OiZSksfpcigtofnfYcd2:5DRgkDviLahtOiSksfpcltvcd2","tlshash":"30146cc8b186b53587e734e6487f1002f33d6d19784c8564fa99eea63da418a9233f2d","size":195015,"data":"","first_seen":"2025-12-18T15:35:53.170321Z","last_seen":"2026-01-08T06:36:03.334474Z","times_seen":1356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.c23dWw7V.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ee405093d35483c67f1ab7a9f108af07","sha1":"dcb80b1a82d1887f44860563518e6bb3a90aa0a5","sha256":"f639fa33e9ca56666ee14394566608b5627981e56b215d73deb56d425ad01e92","sha512":"a6161148eff9daf8e63b34bee0fb24476208f0948165cb658acf462f660e6022fdb12a1ba91dbb4055af18d343ea5d42056d0f3c718bee19abdbb567c68d0c3f","ssdeep":"12288:iG1MfNkbS8vkC8RMQKiHGOK1rPFlmO2tS7YoSrRZg974f+5NqPFqReY1q9qBbFFL:iG1MfNkbSmFl6el","tlshash":"b5946ae87242f538d7e7c19b94bb1609f23d3d09b42e9660f1ade85e33904489267fb4","size":424126,"data":"","first_seen":"2025-12-29T08:53:29.709785Z","last_seen":"2026-01-08T06:36:03.175965Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"932f13fe5aeefea5df75c4aba8422a44","sha1":"48681a767bbd8f881a2c089069b941f4befa131f","sha256":"68ac0553cd1333a1bcee197c23d1b0283d3aec5b9b238c6ef095b7f1c87ec969","sha512":"24c3581bf3941fe72f7be18da525b49f853fdd4b1b3f2ee78b848b7077566daa4f36ef2cf53b375c11f0febf8201332da91101bd4bfc04196d09987af5ca3c58","ssdeep":"","tlshash":"954194c2f754316951a7133a0b4f0007a3aa65670daaa0adf40da7101f94a125dfeffa","size":2036,"data":"","first_seen":"2025-04-20T10:29:07.874902Z","last_seen":"2026-03-26T00:30:53.903448Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026version=64.0.2.7.13.7.2.3.1.1.1.5.3\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"31929d8b7cbc1f69e7b626fbb336895c","sha1":"a382b28eb994a78e051bd43d4d72a05c24278bc3","sha256":"8c9e2a80c4b3874786063873e288aa0be4884460c5c5cb2fea3a9cc72e3e37eb","sha512":"205bb6d004839a1dd7a4485295814ff11190194641116b6b890e2b364e515bcd3935de0ebed2acdd4caad019628b06902e872ca423eb821a1604269e6ddf01ae","ssdeep":"96:aOhUwhUzhUsXhUAVzQl0hQ0O/mpEIiiyfwPJwn/mpYPE2sU6ymTp3PJvCLq:xGwGzGsXGApE0iBN9fIAZmymtxK2","tlshash":"a6b12f29835fc8bb7377914a62cbbb0b7418407970f8593be064c674e1951c7d305eaa","size":5562,"data":"","first_seen":"2026-01-03T08:52:45.155502Z","last_seen":"2026-01-03T08:52:45.155502Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"e6c768b5dafc620746e2daa923e4bf45","sha1":"d638c237dbe9e09b2dd7cd1b65b206168b2a1d72","sha256":"57ba0ff4f114ea7d950d426fe29259e803e9b7751ca6c4987638ae5152d6f9cd","sha512":"8982243e33be05ac097aff6a3fdf9bdaafcc61e1bbb93eae648a2839ac8411df843e03e491a46fa4c671ebcbae206ed9604760dd170f82cb1727859088a05797","ssdeep":"768:XfHM4BfICUGctU73MUt/1M4mwYMOKfzHdPOz5cuX8426fIjmIdojGDU74YHvsBRN:k4bUGctU73MUt/u4FOK5gwl","tlshash":"bf1335b658b0192e10234a5ccfe4a699032ce483b8745efe7357291bcb4bb4d736e257","size":42977,"data":"","first_seen":"2026-01-03T08:52:45.263704Z","last_seen":"2026-01-03T08:52:45.263704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"73d5015c210cae718f2e381b5b2cfe87","sha1":"e6f30c40e83a9dd29077807b1b9bef91b8a645cf","sha256":"69996db6afeb3c6c29c998f02f8c7eff87c3caa87403e988cbf377612595fb3e","sha512":"28d752e5e2babb0f409c83c034c9264fdc183f9f8613c4245d1947f984192ea5d590960a78fb9a14ad0374226b1856af1f5e3b1a1cd2c1c6aa0c128c430f566d","ssdeep":"192:lmC2vs2FMrcII+Jz95HjLMHOghfHFOz8KHLMHwfwLp+V:Gar/jLGOOOz8KvfwLp+V","tlshash":"aed1353f416123259027ddac4bb877178168e466bc6973fd19136b29c7cbb4215f228f","size":6395,"data":"","first_seen":"2026-01-03T08:52:45.264738Z","last_seen":"2026-01-03T08:52:45.264738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d5e83219ca6f81f98421428230a4a34b","sha1":"5c44bfc03331249e52d36583b43a5e10f7be35b2","sha256":"09ebfafef2d2c48fc00e6838671dfc73fb8ee4a7cff07e9bb9802f3eed68d834","sha512":"b966d358db1dce17b2994ee753c2dead0fff57dc41c5241719a1cf9075bd7e359ffb8c9199686c0771c0449b573971e84764dc116db2c6064faf7d96903b9ec4","ssdeep":"192:lmC2vs2FMrcII+Jz95HjLMHOghucK+7AXYX5qHgOz8sUHBDH9cnH4+R:Gar/jLGOJuZOz8dxt+R","tlshash":"05f1422f912123355027dcac4bb467174168e467ada967fe68127b2dd3cba4214f338f","size":7520,"data":"","first_seen":"2026-01-03T08:52:45.26554Z","last_seen":"2026-01-03T08:52:45.26554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"30bdf3402c8d4000d560431693fcf06d","sha1":"0bb923593206d9cba5e62c77631b17e015aaa10f","sha256":"0ab77fbad69f840971db75b21f561ae54c0fe73eec01731e6938cdf26f8eb6c8","sha512":"445ccc825e7fcb281b622910f7482ddfa105179b7b90c746100c62146309f36f636e3e9f0ec52d8ef0c9225ab228803101245c27b442511e727670d274551316","ssdeep":"768:XfHM4BfICUGctU73MUt/IOzpuhqzlFgOIHcg3+R:k4bUGctU73MUt/PN","tlshash":"97c291f65cb01d2d50234b18cfe59a99032ce142a8746dbe734b290bcb9bb4d73ad257","size":26603,"data":"","first_seen":"2026-01-03T08:52:45.266449Z","last_seen":"2026-01-03T08:52:45.266449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.2d_8JfRs.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.2d_8JfRs.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxMqzMGe2SbC16FUC_0kDTGE4_ia9QBT7c2Ws0-EdFA6sOXdf9oCpig6KwiXYFaa7JRgCWh_49U\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\nx-goog-generation: 1766997546850716\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 17113\r\nx-goog-hash: crc32c=nvgbeQ==, md5=KRoW/2UdwGToYginQBEQUA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 5369\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":17113,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17112)","md5":"291a16ff651dc064e86208a740111050","sha1":"7c5216676bfce746ca05557eb2d5725ceb5ed36e","sha256":"80f5bec6750fca95ee77b0c605e40cbce015bab6813dbccc2505196f69532e0e","sha512":"8ec0059ebc6cb0e451dedcdf81b375f58389336ba2b5ef775c173fc383c4cb5d0065f5738840977537c60a58e4954bd9c3841143f02b460a8bd2d000783c0d80","ssdeep":"384:6rU5lrbvy+4nmoHDpXlkaJfnpvW4PkWgpwnxSHI0Ww0/j7JFHyQ:Hlrbvy9JpXlJJfpvW41gp8xSovw0DHyQ","tlshash":"d872d7c5f7aed93e53e7a4917c682003fa786ac4f02cd1a4f3994d62719e8c48177b26","first_seen":"2025-12-18T15:35:53.085215Z","last_seen":"2026-01-08T06:36:03.128772Z","times_seen":1340,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/images/ko.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/images/ko.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 4035\r\nlast-modified: Sun, 12 Sep 2021 07:19:18 GMT\r\netag: \"613da9f6-fc3\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEOuOvZebN%2FU0BUzX9KhT4rjqm8yYsWxm%2Fe7pz0l84acaS3Kjzb27nYjyaAD07g9%2BAlbAnCnBp25T8EvGj93hGvTIcaySY2eu7ErcbTXtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb81783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4035,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x133, components 3","md5":"08db97ed0363573d61eaa015088a2559","sha1":"ef309a9c508819cad0ff80619210513f9671c441","sha256":"386bb37ce7c7097716e95618a789d011a08ff3dbc519d34a5642c5dd0c398eca","sha512":"8ac9d23f79a5c7aaa8e52a84c68f63857fb4bd93860c42d0b12364f19f169e83292bb765f22af092242b29ec61901f56e01daba863acc433998d58e9b3798685","ssdeep":"","tlshash":"f9815d937a97ce83ff28da7540a3106027da405262d787755aaeb47fb1acfb59812420","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-27T13:45:14.651002Z","times_seen":233,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/images/de.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/images/de.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 220\r\nlast-modified: Mon, 07 Aug 2023 14:42:36 GMT\r\netag: \"64d102dc-dc\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3fg6Wz8uFSE9cxjI%2Bv2O1Hav%2B1PsBRorKWwBVNj%2FSOGTb3hlbhfzgCV2Mc5loGSBVuZMAJniMinuGYptFxcV%2Bnm9Rs1DlPXX8JOn0F7Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb84783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 205 x 123, 8-bit colormap, non-interlaced","md5":"f3c0fd19eec2f9df5377e4ec14f8f93e","sha1":"fc9f7601a52e6b2a14967aec13973351c588b27f","sha256":"a9b65ee936ea35969484d6503696dda195fbbe0d7eaa580fa4d7c8a97433d6ae","sha512":"fe143b9f65c3b6a48f9c1fb63fb0a54b9bf7aac1736771e01a3820d8b46b8682b8effa3680b55b5a7394267619e5e972961369f148788a942c6afceb7a4dce49","ssdeep":"","tlshash":"bad0a7e5ec14dc5cc50f7170345321d196889876fa72c109f4cdd5f4e40aa4a0085159","first_seen":"2026-01-03T08:52:45.148217Z","last_seen":"2026-05-24T18:27:37.90691Z","times_seen":11,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/clipboard.min.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/js/clipboard.min.js?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 02 May 2021 06:55:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"608e4cc8-2780\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HuwdcBQHIVHB4cTHazqZDOsX1KZjX%2FqLyFP%2Bjvm2Gn%2BvXmZ1FMEbO6jQAtKu8%2FEdKfntR2wxulqXHY4ydue2TJKJv8D5UhEgQkV11mixA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8142351ba1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10112,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10002)","md5":"aa7c9d74f567a8877522f816d7c387cc","sha1":"d79bfe29e732477cb27598dedff9495ddc05f390","sha256":"6717dbf025d81f537cc639903fb560e01912c0467e8da579fcdf92c6f58f7a65","sha512":"da4a20fae935b42cb957a322479c0e779835b37291c6ac8cb41f300dde796847897f788e849ff6153a32004cff087615d37f9f2cb8aa5751cdb1b8bab2534b16","ssdeep":"192:q0Z14dOk1XSHkKpI/230xlH3G4Ly9+vxo53CoD87JxKllkvc363Pw/3JyUZu5MpL:HZCQfI/wsXCz3rbllC3P83JVu5/Gz","tlshash":"6122a68cb29071b156eb50ba802f420fb271c42db06e40a8b21de8f56c7de9d4627f3d","first_seen":"2023-04-08T01:19:22Z","last_seen":"2026-08-07T10:40:30.54909Z","times_seen":2256,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/lang/en-us.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/lang/en-us.js?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 16 Sep 2021 03:33:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6142bb16-3ca\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrEfHfE1iMa6N2SsdzajL6hugy%2FyP0rN3p72pZaS9fcTIqxzM1ri6KnqLfzRkonVIAA%2B1YFIDOPUO3NyZye8DxSJ9TZ2SJhz%2Ffr9T9yM0Q%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b814234db78783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":970,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"26fd80f238136ab70ac2545308240972","sha1":"9c53209dece13d2ea508801018e17a48ab20ec52","sha256":"4bc90ecaf4541f9f71e04744f90b02ec404ddb22aab1dac753d96e171e1c1185","sha512":"efb3db97c63e2cd7d447f8337e3b29c7cf369b261eadab75aa887d196feb57c4e44d0f1f2a96fb82190673acddb1c8735221617f1d6d1e4c119dbf4b5c0cd10d","ssdeep":"","tlshash":"87115c55520c9494050694cb76a716c5df8540770981768ab7dd81dc7f8bc2be2f7189","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.854766Z","times_seen":119,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/images/hk.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/images/hk.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1520\r\nlast-modified: Sun, 12 Sep 2021 07:19:18 GMT\r\netag: \"613da9f6-5f0\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0h0rBrFaXF%2BMD%2FJ4JMAVU1LsomGNI2SYaPVuVt7oqFIrucoNaFF%2BDux9dbJbffLs5sDNmlij%2FVv4bGu77Se2dQv77ngKObduE07eyNj7OA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234db7f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"199fe88db3fdff594016f2344256f05e","sha1":"e05d0b865be8418dc92a019a2b90e61bbbf315c8","sha256":"417a37b4988d0520ea83dc2c570100c6a7a86dbcd5bf7ca1113659c38d5101d9","sha512":"4992cda3d76d807af483a733d670d7a3b5e866c5b61442462247ecec75bd4e4d416bbed256593e3b58dba94b64b5bd83ef6147aa83275bb986ea2d68e47f2fe4","ssdeep":"","tlshash":"0031f9e7cdb29da0c07b0671383af59dc4331401a5fd0813ea1a056b69a001a7cfeddb","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-07T11:15:24.513602Z","times_seen":324,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026version=64.0.2.7.13.7.2.3.1.1.1.5.3\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:13.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026version=64.0.2.7.13.7.2.3.1.1.1.5.3\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1548\r\ncache-control: public, max-age=600\r\nexpires: Sat, 03 Jan 2026 09:02:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5562,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (5562), with no line terminators","md5":"31929d8b7cbc1f69e7b626fbb336895c","sha1":"a382b28eb994a78e051bd43d4d72a05c24278bc3","sha256":"8c9e2a80c4b3874786063873e288aa0be4884460c5c5cb2fea3a9cc72e3e37eb","sha512":"205bb6d004839a1dd7a4485295814ff11190194641116b6b890e2b364e515bcd3935de0ebed2acdd4caad019628b06902e872ca423eb821a1604269e6ddf01ae","ssdeep":"96:aOhUwhUzhUsXhUAVzQl0hQ0O/mpEIiiyfwPJwn/mpYPE2sU6ymTp3PJvCLq:xGwGzGsXGApE0iBN9fIAZmymtxK2","tlshash":"a6b12f29835fc8bb7377914a62cbbb0b7418407970f8593be064c674e1951c7d305eaa","first_seen":"2026-01-03T08:52:45.155502Z","last_seen":"2026-01-03T08:52:45.155502Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251115/fafc3c66631dc41c4697804761e21509.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251115/fafc3c66631dc41c4697804761e21509.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 5288\r\nlast-modified: Sat, 15 Nov 2025 06:12:08 GMT\r\netag: \"691819b8-14a8\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BcE8yjl3ibPeKDxiMeuMJoCMh3zAnMCP4I2A6fjVtqciK9hG%2FJLObHCg3jbBw7pLutAOFQ%2FA%2Bb1C2ENWaPDYDdP9mrz%2B0jg010DPV7BSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142350b99783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8232e5159b88a7f6053703e265c05f5c","sha1":"50d121a6aaf23ed28cf0909bbdc8fe8dbaa82612","sha256":"d9da0587d96f640bf385e883058730ebb576bdefe1218ce527498c41a23ffc6e","sha512":"c987de0d320c8270b69141fa5ea3781f610982d6ebb299d2af064cad4793b414968bdecd6d9117d91162b04d730c877694cb8053fa4ece7f5f6fa0d937ad5226","ssdeep":"96:oQgSjG0w9JFXEhjMEm2Kxys7idi5wf6/N+THaybxYE9GFDb0b4iq8BgfRGaa+u:qSXwpAI92KcduTmao4PWCRGnX","tlshash":"e2b18ed363c2e7c5a96ce67a7193a2bea5f3e0343a05151aa4d19c81ff1b7c30c94365","first_seen":"2023-12-04T18:38:17Z","last_seen":"2026-01-03T08:52:45.156528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/lay/modules/form.js","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:13.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/form.js HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Aug 2021 08:56:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"610904aa-2577\"\r\nexpires: Sat, 03 Jan 2026 20:52:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gluj4Bg%2FEwX8Vr1ZXkk2G%2FBuhB8zOKdztquGaxnQnOso7tf1LtmH46vxPQnp%2BbHByPI9kMtaSju6%2FBJnaQdwyCzfkU%2BEkcVBYQ2NczLrfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b81423e7c93783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9284)","md5":"a55a0aaf3d84264e3373f58f347a18fb","sha1":"921760fdababb5639192c73866c1b3b5f2ca0644","sha256":"03315f4a8fa90d66f3115d686bcb50d9356136607f92edbc9c59d4f27090a0f3","sha512":"7295dd0874606a2605b16a49ca696bfe305e16d769a7d037cfba0e074591e4def8dea94e4157cbd7c52e85e8de4ae496155c0af6d21b00943ba04ab6164edc13","ssdeep":"192:7U7m+EjWnSTmyANS4B7R6EoHv9w5iaHe16GL:7U7msqmHBV6LP9yiaH6n","tlshash":"1312a319715135e2367b60a1405f981ba0bf4635ab09c8947093d4f92ebec9493f3faf","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.884574Z","times_seen":116,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.al-9NYxR.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxNOl4O8Kn0jxWZWl_LNemlQn4Ici2egqSJp8l3d_d72g0Pop8XQQQVzhL9mzRbzYK4LsdrPUOo\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\netag: \"4a073c5805819d74eabd3e843372d502\"\r\nx-goog-generation: 1766997546768826\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 236\r\nx-goog-hash: crc32c=6eM7Vg==, md5=Sgc8WAWBnXTqvT6EM3LVAg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-length: 236\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-08-04T17:33:10.203066Z","times_seen":16397,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"response_type\":\"token\",\"grant_type\":\"cookie\",\"client_id\":\"c5e4f61e1a6c3b1521b541bc5c5a2ac5\",\"organization_id\":\"c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\",\"redirect_uri\":\"https://secure.livechatinc.com/customer/action/open_chat\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\nset-cookie: __lc_cid=718e6b15-7c05-4e67-83f1-5db43181462c; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Mon, 03 Jan 2028 08:52:13 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=6a1b8727a04525ca702129141ac212f415485fe394f74a83c8b987817a86e6dbad88ad0440c1665afdc01fefbfe7bb7a194b06a13fc51cfddb29e4e742f9; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Mon, 03 Jan 2028 08:52:13 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=718e6b15-7c05-4e67-83f1-5db43181462c; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Mon, 03 Jan 2028 08:52:13 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=6a1b8727a04525ca702129141ac212f415485fe394f74a83c8b987817a86e6dbad88ad0440c1665afdc01fefbfe7bb7a194b06a13fc51cfddb29e4e742f9; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Mon, 03 Jan 2028 08:52:13 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1767430363\u0026tag=dc85ec02d386835d51d4f8d68dab739316e6281d; Path=/; Expires=Sat, 03 Jan 2026 08:52:43 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6812005d85a5cfc21f8683e1d28f7f10","sha1":"bf738e93304972ad8b8d823fb0d83fdc99cd4758","sha256":"43720661e5bfabaa156f569cb9a4bddec10e233195036f3db183e88b08e396f8","sha512":"ed36228c5df2e2786d6e0c27f3caa5986c07a4c44d04cdf6ceb656e5ac1abea3554aab3a8328db772ceae99372e5860d021d46637762b2ce103fbe3c41a59759","ssdeep":"","tlshash":"22d0228b96a239a2cfd98f132acb449860996262d2c8008d5a7ad165af0682093d7f14","first_seen":"2026-01-03T08:52:45.159629Z","last_seen":"2026-01-03T08:52:45.159629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251115/cdb2939aa474e2f9ef11c2e32ce2a4b8.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251115/cdb2939aa474e2f9ef11c2e32ce2a4b8.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 8636\r\nlast-modified: Sat, 15 Nov 2025 06:14:31 GMT\r\netag: \"69181a47-21bc\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgBiwlxVuOmm4A3Y8lPKdyF3D0XZVa2WPafjuOEjbxnp1q%2F2Denkq3RzDmqSyWnAfhnu87gUk5jQ7OWchQElIK4Dro%2BV9ZCqiktH3BE8jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142350b9a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"cb8800411d543098e22df02717eeba20","sha1":"bbbdf91053f0c720de0f6cde23d64691f6945cec","sha256":"325825f388f3084cef5e9d4c02f42badf58e2e8186fb032d78e214e702abb474","sha512":"063c0f0dc9e635410b6eac1d93b4a6a866f6fb78ccc954a798f8924e7e3e4fb62a80694bd799ce34901f2a2b8d41795b40ad38b62205d4538929654af7e5a983","ssdeep":"192:DST8ABKqPpjCNjZXmpVTl0fwbNQrQtX8kqcxGqAO8f6QXPlg:2TbKYh69WxzttX8kqcxGbO++","tlshash":"ad02cfc642680198fe92c67f55a6bb34c4a507a8b71c530269588ae52b05ff2e4ccb84","first_seen":"2026-01-03T08:52:45.160447Z","last_seen":"2026-04-26T15:32:39.962562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxNRP9OpQUWxBY7Cjv4OcCSNuR0dnPJrRm1pCRXaCBr57rwPxunTyX-fPvo6KY52GJzf\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1766997546851768\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-08-04T17:33:10.166857Z","times_seen":29934,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251110/4459d07aac1f1febbbb637f13b4e4349.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:13.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251110/4459d07aac1f1febbbb637f13b4e4349.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 49273\r\nlast-modified: Mon, 10 Nov 2025 12:25:26 GMT\r\netag: \"6911d9b6-c079\"\r\nexpires: Mon, 02 Feb 2026 08:52:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSbUtM%2BK4kVLK%2B5PDALXUYCPxRbXlZVOFiMq0s6n8Lq1xUceYK003b5B7WYgpLp%2FGMMNKOUdWzVPnUQHqAgUzuGhNKLEtZs9PEp7enFl5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142418cea783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"9ae206153a2a5acdcf385864dc03c841","sha1":"a875b7ffbc97a04432f608251ecf433606942847","sha256":"f744c2cc4c11ad3bb8092b50e425f3d41194a41815c511eb45571f93d5165420","sha512":"b3e85e90ad1e10d542d3a72697cb9a88c390d648b6f139aed21760d008663e63a63e69cad67ccf8c7a3f08c7d177d82e8119feebd59b2e9831c1c13c52c92799","ssdeep":"768:Q7zRU8+xHd5B1ogn3Cavh48EMC3zM5DS5RUA5WuVQjRLzGyu+GCmYDkz9:G+x9pn3B4sCoJwMNRLzZDTDO9","tlshash":"972302224ecda6b85d286861e92519d3777bf3871c1f4df53918e4c0c30a97d2ef6621","first_seen":"2026-01-03T08:52:45.162091Z","last_seen":"2026-01-03T08:52:45.162091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":562,"receive":367,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 Jul 2021 08:41:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60dd7fc0-7918\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k0EY%2B1RaNTeVbw0lHX1SDq%2FTwpbR4e%2BPyIImWWA7hWw2d19HMjxaYRdCZuG42%2F147vWzpLDPePuSJak%2BD%2BMnaZb8i2w%2BegfsZtL9Wb6org%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b814234cb76783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-07T10:52:51.525424Z","times_seen":306712,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/05b753051a4d9379614370e96ade2ac8.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/05b753051a4d9379614370e96ade2ac8.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 18553\r\nlast-modified: Tue, 07 Sep 2021 16:36:40 GMT\r\netag: \"61379518-4879\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NL6mznPsx02cXc1UfJyx2l9OID3IrbAjoUG%2BmjUoQJt9XZ7129UJnQkk3CeZDd0Lr6je1xveGiPHyc8zDegNyHXoL6NLF5JDNQSa3ZXYfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb8c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"41173f1fac2d8fe9fcf0285d0e7d6acd","sha1":"2262cedafbeddfe8d47ffbd2ac442b0b92e681fa","sha256":"25f2ced7253fac8937192733091dc789301446bb306bdda4e7814999d03dc692","sha512":"73354a1dab8eec7ae4d2ea5c65ae235c9b9fe2860806f1a4825284a6971a001754649f868c91bd9e29e4141e6ac8bbad092296439678b02a26e9d3463e0ea070","ssdeep":"384:ci7lfIt9MsjkET7AlZaxL9qiCH5cAWs0IMzz9zgDlV52smW7NZorx:lRfTstPSa9SDIzVgbkXWAN","tlshash":"c682e0aee2d37c184a5bcb144be634b26cd23e694b636c43703dc70c9e5481963a327b","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-28T19:23:40.84226Z","times_seen":354,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.DiEu57nc.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.DiEu57nc.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxPyP72iTz0HjTE19MMFhZQ9Eb9ZsKtixx7KD3MV6K175z5VXqas_-Bu5t3DVOIlhrLKhalBN28\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\nx-goog-generation: 1766997546882667\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 138434\r\nx-goog-hash: crc32c=qbZ6Bw==, md5=R+tQBS8Vz8HYiqFVRgHlXg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 43575\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":138434,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48031)","md5":"47eb50052f15cfc1d88aa1554601e55e","sha1":"f805750b3d2e016885055b29a6e9ab8394c8599b","sha256":"7b86440589ee714b1c7a6d74e6d9a691f1280d57a36376c440cf949ceed5381e","sha512":"addcf2f225368a1dd929e431171096fd397be6d2175d4923be40eb5b8fa10d0934ce036b63bcb76b95444653e0b4db6d80c06885f4b3535c89e24b6420298da2","ssdeep":"1536:9gZQTsyz+6WzvhFCvB0Hx6J+vXlKAwTwH7nDPWnYlkChX8qg4JklHYD8b:9gKTsyzTWzvhFCp0UcDOnA5sFikRYD8b","tlshash":"dad3f8e83996f5626bf312b700af1817733c192b280c4990a211fdddb5b845ea17bf9d","first_seen":"2025-11-10T12:08:03.375538Z","last_seen":"2026-01-13T13:49:38.678696Z","times_seen":5241,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.C9sqjOJ-.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.C9sqjOJ-.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxPlpgHjpWdD7nfeJI4UHvLvWpQ5s4-PnJyo1L3Qa-JP-qKGuPuCfjVvDU0AYxB7FlvHmJpw_yU\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\nx-goog-generation: 1766997546748412\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 4900\r\nx-goog-hash: crc32c=GJR0Lw==, md5=cPxCHJi9SJC50Bi7p576uQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 2033\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":4900,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4899)","md5":"70fc421c98bd4890b9d018bba79efab9","sha1":"3c6077cd91cbcbdea1633fe41a2d1f64f5b9e48f","sha256":"0b5a8520979d5001b661a705a3674f2be73ea6ad57e1901dc18f034ad903cf9d","sha512":"cdf42069d1f67cba0941e3de0e3ba71490df155ec6dcc5371203503502dd204095e5fa7741f079c80cbb780cb5574f0d9f77a58679b4709472fc756959e39d5d","ssdeep":"96:GemlKAJm2AllIreQA6Ob1NwmiF2DMrBNaas5pFJprnNCzaNkQQyZFBXfFBXoQFd6:Ghu2UlI/NgO2D6BRiHNqaNkQ97BXtBXk","tlshash":"78a1d7fef365f97097e98ce9e5143043ed3b1268f8ac85b0fa5c4e55214d2889032ba3","first_seen":"2025-12-18T15:35:53.171801Z","last_seen":"2026-01-08T06:36:03.36491Z","times_seen":1339,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/img/serve_03.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/img/serve_03.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 6954\r\nlast-modified: Thu, 01 Jul 2021 08:41:34 GMT\r\netag: \"60dd7fbe-1b2a\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaqe1X1Ak4dQRehAPzjQj8A4kuXqsr0Fy3gYss3UBPCh%2FwjGNGHp836dQj7%2BRVWQ620d6W22TbRMPvsAIQAVlGDVhAlvUix8ZxXfjYXbiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142350b9f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced","md5":"76bc12ded9830a64cafb55dc4f3eca75","sha1":"c52d15aea5f06b3cef67ffc3cfe1571e13f1186d","sha256":"4f495282f1df7ca21ef057e67f7157029dd423718acefb39f0561f799f387849","sha512":"637a9689bc5c57fb2de69bde33e28b9dfe9db3aded60da85adaa8f92fb32d0f9cc2434c32b22285ae5b7247e8a446f616a139401479eff80eb149522ca921971","ssdeep":"192:5HHgA2UNO4rlDwfbwGhp7yWjDpwrTfU8pBtTc:5HRPNO4rK5htynTpvTc","tlshash":"86e17d5fbc177821b5781d8a66a8203bfa274cc43980e027c193e92f05791fddb1d2ca","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-05-04T15:58:11.652073Z","times_seen":31,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/315ba4b3a7c32f5dd920eea7dfb1ef7f.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/315ba4b3a7c32f5dd920eea7dfb1ef7f.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 7037\r\nlast-modified: Wed, 08 Sep 2021 13:17:36 GMT\r\netag: \"6138b7f0-1b7d\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6izbUfO4F2GmhtWxfQRd7vGRT%2BfcSH0772b6dLh0Nt49nIcm6poBDvx1KvL8hxAkyCYYMSla0LUuoB9mvJpjHnLO9OEeF88b8YGlz%2BzYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb8e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7037,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"04579b0e931d4de1eff2108468ad518c","sha1":"3731484ee0b9ab9b0f4fa977f861f6fb6cdec8b2","sha256":"48cc3486a90c7cc75e9b675e62abfc5ac78c17ba81b54f7f1053f569bad73c7c","sha512":"f63b21e39f1e00ec70ffe4d20871a3759f8851ddf22ed7549be613529a3ad33e5deca1b507911d7bb21e4b751d183d21fc87953ad30a56ea5684d8e06ad66121","ssdeep":"192:CrZ3rmpzbvJlngM1TD+g1IqdfzWP76dkFfRyNxOJcU:CtwvDgMNdfzLQR4OiU","tlshash":"4ae18d878101ed88ec2f4722639b0c6d2fde4f9c86059ff199d30b322a49d661008c3b","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.86376Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251115/845db6effa28d4e7a9a77e3f483cef10.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251115/845db6effa28d4e7a9a77e3f483cef10.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 6147\r\nlast-modified: Sat, 15 Nov 2025 06:17:28 GMT\r\netag: \"69181af8-1803\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMLv2pf%2FSxaNr5CVmmTzfZ8N9aLLQaEbJOZ4vmzk1VbhG0SqS4WBn1WU32ri%2BnJHvmsLSZjM9l3MxH80NyO6owui3DLRr%2BDFMbM8ouoCDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142350b9c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b4d43db205f286b9fa31e74961c94eb4","sha1":"9924dc4d985ceb521a2a37eca8c2439d895a87f3","sha256":"d3c60e4d9778bff3efb88b46f2cd28bd7bab96b9c057b9ed8a88ea3d23811a3c","sha512":"8827ded653aee8ba3d85e50cb2a01918bec05d5f831b08830c5bd682d380f6bd9496cfac70b2f62d409626a7a5d5c135e8a32240a0ce130707016702d433b37b","ssdeep":"96:kGAl5p9wpS0XhwMENoVJo5OaopQDDwZr7F5tChuCU7J+TFCrHs591UH2jPChWgJ/:kGAlP4S0WoVatgjEXUUMHo9PbSWmrS/4","tlshash":"8fc18e1e44515051e06b8a769c483e2cacb34ee37f453acebe6c89616f20cd63a2f395","first_seen":"2026-01-03T08:52:45.168929Z","last_seen":"2026-01-03T08:52:45.168929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.B0_QvnEW.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.B0_QvnEW.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxNhfvWYKOR-wRJ-wYje25GyVe_9EAn8ycgys1grRcB_xlWK8jsKpCAFIXbVLINMsE43mgr3T3U\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\netag: \"bb2424b90285d46f921f699e7b3d17d5\"\r\nx-goog-generation: 1766997546869632\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 886\r\nx-goog-hash: crc32c=LRbwvg==, md5=uyQkuQKF1G+SH2meez0X1Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-length: 886\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":886,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"bb2424b90285d46f921f699e7b3d17d5","sha1":"412e217bd4cfbafc553fc36b9094d0ece147a429","sha256":"2b1840010c419cf6839e4a18ffd0eec542b4c0d0c49ce5606bf93639afda5ff5","sha512":"f283f440d13fb69e25c115fd3e9dcab60cf937ed1ad964644f9719abba510e9f99ac82747ef2aba6991de08cbe10a8965c0d352c380dfa471d2b6753beba021f","ssdeep":"","tlshash":"a41100d93cc3d8b0d73bd4cc52a899e6d43c0e88a8fd41c0e4f86e853b155b18236ea8","first_seen":"2025-11-05T08:48:35.692413Z","last_seen":"2026-02-25T11:20:48.331177Z","times_seen":7795,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.BiEmow_Y.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.BiEmow_Y.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxNIxQUt39BXVYA-poZGTurp7t_gaZQnQY7XVXb_ru7JC9kV9XneyzKZ9X8ep-gvvGLL3C03tS4\r\nx-goog-generation: 1766997546765492\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 53693\r\nx-goog-hash: crc32c=57KHMA==, md5=fc/RkN0zRws0A8bBquCNmQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\nvary: Accept-Encoding\r\ncontent-length: 19448\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":53693,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36653)","md5":"7dcfd190dd33470b3403c6c1aae08d99","sha1":"4eef7d04d7ca086e81b9c2b4c1ba63a1aa712d5a","sha256":"f35a28b66907baa86adeb009b8733f708b95c6da0b00cd543968bb83c493a0cf","sha512":"6aaeea23197290bdc58d2e1259ec9c3c07ab49e9a606af5959ab1402eaa25968a3ac62ec397fd0e92dafed166d109c648bdea28ff593b68efca245d508404826","ssdeep":"1536:K1qGd/D3uvxhUEn5thv3KDlCfuP0ws3wJmK/:qlL+phbPvMCfhwsR+","tlshash":"f4335ecef1417531a7e315f3a07fa106b63a192c384c81b0f629dd9925ed04b626bfad","first_seen":"2025-12-29T08:53:29.752527Z","last_seen":"2026-01-08T06:36:03.079418Z","times_seen":712,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/img/earth.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/img/earth.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1399\r\nlast-modified: Thu, 01 Jul 2021 08:41:34 GMT\r\netag: \"60dd7fbe-577\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWDZjnsCdcIfhXX9nIMXQInrRuyJt1sMjJ89R8mUMcidP6OH6UuFYbQTHIgRPyVzrmM1r6lRYkwCxXnBf36k%2BRa67doH87cJUYqO8WOOYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234db7c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced","md5":"bd7509524149fae4f9f0426c905c0049","sha1":"4b8ce008c3c9ca4fec5d3922725a9a08ca2bda28","sha256":"9e0e214322debbd5294bc34b610cd067d453d830336d00b18b6c2be2854d593e","sha512":"875addcaf253f291f199c9a58853d6c65732b412838778dffc1be655d40896d48b7e83e1879405862d2829aeef30ad54704a40e92cbaf72beaa767be89e79a30","ssdeep":"","tlshash":"a4214119b5502b40c56dd8a32cfa802798774885c9d4f05a798dc51b0c722f9193e9ef","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-05-04T15:58:11.678403Z","times_seen":27,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/images/cn.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/images/cn.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 574\r\nlast-modified: Sun, 12 Sep 2021 07:19:18 GMT\r\netag: \"613da9f6-23e\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pigQzsHWdoxSqvWOB70%2F5d54DdE5RiqVacBaE1xpaUmx6r3LBa8rONBLw8LVDBQGqWlimDxF1VWyL4W1k0IR79KLyYvZB%2FKs6tGb81Ftw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234db7e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"09029b827b228c61914d429e5f098372","sha1":"2607dcd4c11f5518ca031ef5f053427ba64bce87","sha256":"d4b56d87fd85cde734c00c125f652f584523cf19d167948bf5c97fde047ed706","sha512":"22d7e76c58ff6d021495f9fb65c695f1a5a9f376d8c190982e0e40d03bf89478c1f9f154ee4739c896cd14cd345e0b5dd7febf1a5f2df46f73745bf6d5d9cdba","ssdeep":"","tlshash":"e4f09606628b7c142f1f9db3e2326430ac3eeccb91ca9436900c146153a0764f734547","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-07T11:15:24.537213Z","times_seen":302,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210903/de2ad50b4fd1c5cbc1ddea2bba258958.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210903/de2ad50b4fd1c5cbc1ddea2bba258958.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 105551\r\nlast-modified: Fri, 03 Sep 2021 08:41:26 GMT\r\netag: \"6131dfb6-19c4f\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qV4Pcbe7Vb70AlO0pdw7T5bHZNd9UnkK8ntZ5Xnc5IYtQlDr1LUcS%2F7r0W7nIPw1Jp49Z23M0vEJ1eBVEidi2MMhiato2UAhEVrv9Z4i9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"bd8a66a284e28bc271f6d0209f2de868","sha1":"3dc24b1050b2323a1eab7e5a1c22f468bf2d2168","sha256":"e0d0a66b7a841e058be92f18728cfb51c998058845bc485bb0415faaee7762e9","sha512":"758e97ccc449483036b4d683727a18c67b0295c84a1b011fe8c9a98f85170811e8fce035994c1835fa8e56a804fb54cb3834f37dddb4593b9d306ac88b9829f1","ssdeep":"3072:1prX+roURTat7D8nCXjto/jN1HXIZ28fj3qOdAM:1pSroAatMnko/j/Y0e2fM","tlshash":"50a302646d9d1dd1ccb3f6346e3b8ecd3b4940a93956dc870872fc6dbe5a402ea4a05c","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-14T06:55:27.868279Z","times_seen":56,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":578,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 05 Jul 2021 06:00:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60e2a000-15851\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLp9K%2F7hK5Q%2FThYUwys9tdppVAygxzdUzUzgUZmtllInvZJNgaYwPXjPB%2FUN6%2FFpeSM3mQiU8eEMG5Y%2FWUycUSQJPE9SjjqAxzaD%2BqYCug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b814234db77783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-07T10:34:55.057904Z","times_seen":138507,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/layui.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/layui.js?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-1ce3\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWWD5gX1OApCrFdGFjW9N3WT4kbqtGUwHSfANaTvfcywjnv7Z90vHZEYPlj9tJtHLuF31fHECygBAMzXilLiDcZz75UewWy43DXiuAbOOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b814234db79783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7395,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7324)","md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-08-06T20:18:18.704099Z","times_seen":571,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251115/5f0658605212825d149d5e7e81c776c0.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251115/5f0658605212825d149d5e7e81c776c0.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 7227\r\nlast-modified: Sat, 15 Nov 2025 06:17:03 GMT\r\netag: \"69181adf-1c3b\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzcf1fbHUkk7cXe4HaOLKE1eXXxbX4hcdrzIvem8t4ff%2BVCYLjGqTFd9QbnzwisApefKwaNLwlayBROcRPpURHRPxX%2B8mNlnrvZTh6PlTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142350b9b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"02dabe6e0bc3b051c8e9a2f92f9cc8c2","sha1":"bd41a0faca90f8209dafbad57f836a3a82a6a1f0","sha256":"f545619c9ca0554838bd1c2bcd18bf544bff1ba28d303eba6cff66643fb5a0b9","sha512":"1e4f53ad62a71024d170e8257c86e26ad58c6790f49c5051ef2df6e2d84e246e82a3ac3ad324494526878c62fb6ca7304fd8b6510ea584bf56b00363fa4f2ff1","ssdeep":"192:6yAS0bx/u/LdYtmJyQ6AI2BnTBPzsFzCJVII6CfaL:hn0FAUTNU7PczCJ+afI","tlshash":"03e18d97875c50b2ee9bca748ef51723dc3b88662b859081f36d2cf19f954d02f0a085","first_seen":"2025-09-28T09:46:11.71573Z","last_seen":"2026-01-03T08:52:45.180502Z","times_seen":3,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/index/index.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/js/index/index.js?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Aug 2021 11:00:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61125c50-1137\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhOjcXUmQGJJ5XXFukJ%2FJbNHeSiRxJPYRLwFWrkLFMdzQ9nAboF9M57uxLxm6ZZdYhnBNZny6bWjYSkMX2pd0emBP1w7WcyZPPmhvCd9Ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8142351ba3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4407,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"787494578e1b5ccaba5768c92f4f40ff","sha1":"aa7c095b139b7a2734d5707da7429826ea593469","sha256":"8a54b5c04b597a626f98aac24e8ad89169b4c3f3a19308c3b2914e4528b26655","sha512":"c0d71e9dc6c4c0ebd8b9561a02e711f988c6a4c96371511536b210f3bf18bf31c317f22db700b87682ee80e0a9d999c887d0bb45fc8424394da9c73ddf229928","ssdeep":"48:4jHsJYS7AEGyUjmHAuEZBnZBJOt9dxGiKsu5Rt/PtzPDvuli+hIg:gHsJ/oQARZJZTADoPt/Pt3v4ikIg","tlshash":"ae913406e4e314536f13a09a8feb5005a1add033d20acc4dbb4dd68e2f5ca7c5565eee","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-03-26T00:30:53.894233Z","times_seen":68,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"upbytetrade.com/wss","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:12.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /wss HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://upbytetrade.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tX6pbsqp9pqkXicTEXVD3w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 03 Jan 2026 08:52:13 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: gh0qSugzfIXQASwf9Ugna2BKTHU=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=StWrDkZGyHbpF9wOru%2FNoApNIpgRdUrPrTQyPwGrbso%2B3qnsdWS82trN1C77GF9eeCuZ%2Fkr5YgrD2jazeXPRDhwO7wzoSe5OfJ1EdTEm1dvzvHhrn7E3tiffAYRFAXZGrv0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b81423c98664c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=470\u0026min_rtt=453\u0026rtt_var=124\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3126\u0026recv_bytes=1225\u0026delivery_rate=8290076\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=c050f40b320ceba2\u0026ts=616\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T11:07:12.655044Z","times_seen":17760269,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":0,"dns":94,"connect":84,"send":0,"wait":576,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19396999\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fupbytetrade.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__blj0ok2ctor","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:12.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19396999\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fupbytetrade.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__blj0ok2ctor HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://upbytetrade.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://upbytetrade.com/\r\ncontent-length: 380\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":380,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (380), with no line terminators","md5":"5a3f87d02944a75d675c0a20f3d6dcb7","sha1":"3cae35b4f1e8947b012b8e5cb8919c367c84244a","sha256":"48a8f8a703f773b2c60c4d60981abe95e2d6d69043ebcfa465f6d6da00804014","sha512":"76bf32103f8f86edae2f2fa2015182ea8752fee4cebc707dede1fe72d3cacd6990518bf4c2fb7e7c3cadc51f4c8e2c3e81f7fd9760f9eb8b9174fdb0c2fe39ef","ssdeep":"","tlshash":"d9e06862fa1151366bc1f3ec688429016a740366940447b8b4691241a61b6ac7364c07","first_seen":"2026-01-03T08:52:45.183163Z","last_seen":"2026-01-03T08:52:45.183163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.C_rgEAoe.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxPI4aRZrWXRweKPYQ4sEic4tdQafsiJIlS4zxC2lZ-6A22yrFqEC8nKv1ZI8aC2t2wq3KUpkUE\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\netag: \"1771376dc07da48b3f03339d86d57b7b\"\r\nx-goog-generation: 1766997546827428\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 193\r\nx-goog-hash: crc32c=C03sAA==, md5=F3E3bcB9pIs/AzOdhtV7ew==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-length: 193\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-04-09T10:49:40.045057Z","times_seen":23532,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/websocket.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/js/websocket.js?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jun 2022 18:08:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a8ceba-408a\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0AclNnceV5GHMIcipvcsxVunRbnOPLGj%2FtPcJLtue8XnwDhwFPKfFI9szL0VSPC%2B5dbh77m%2Birw3kbymC%2BjVMVLzlzcLLEEYMcfjQv5vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8142352ba4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16522,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"dc5df0f945add36bcf709ddf492dcf68","sha1":"b7829bcc305438d277be129a8107fd74c83800b6","sha256":"5c2c800f2f214f5c134a265d343abd163a50bca639f658becddadff851f742ff","sha512":"a079e503db6e74d0023b38fb6a2b559c96bb97452f689390a4a01e1fe7ed990f356b342aed4d760f201a57c45676defbee352f92f7e521c0beb95714f1b2e134","ssdeep":"192:KO/IyXAfwKXgCYkJJqm0DJpBko7t9s+uEYwlJGAIrccjt4HywGb3DDFr:KeIoIXdYk6DJ/kMjs+uEYwlJG1IH8l","tlshash":"e0728fa0b3ac165f41f6161580bc66c4cfecc672837545e7f2aaa9e05358b09106beff","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-05-04T15:58:11.618475Z","times_seen":12,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/css/dark.css?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/css/dark.css?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Sep 2021 15:00:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"613a2182-fd8\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8NrCngZHXmmHPZ8DMMnYLGjLqRquhC8DJZwthaWbPicQPvkHA977GWIndHNMIH8IccsaGOj5Crni5CFRQL3lgwSjZK9rTLD0iPOirSfXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b814234cb75783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4056,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"0f8179d14c1c02f39bd4b2cb027524fa","sha1":"c294af35ffb8bb7a29d392baef9f77ec1a617f5a","sha256":"f32af026b79787b0dcd5a5cb18efc1fc46aadac19a9f3aae68f25b0ac3116c1f","sha512":"7361c48a47c68e48d220739000fb6b9e92504416856c0ea10ff926eb48eaec55bc7a70a6e0c7e993ff7ab90e8e2304ebe5838f7118ef86087b159b484846fb4c","ssdeep":"","tlshash":"28812466a34f28db3212c535863dd530ef7d6284894f4b3dba28a0bb2541c9735b6c53","first_seen":"2023-12-15T10:23:13Z","last_seen":"2026-05-04T15:58:11.615265Z","times_seen":71,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/images/ru.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/images/ru.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2823\r\nlast-modified: Sat, 18 Sep 2021 13:27:54 GMT\r\netag: \"6145e95a-b07\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kV3lZpwb3HTivsCtVbXoYgwZdniOUIX%2FQGJsSvj7ktbmFI2I0js51dH52Pw%2FBMCNq21bgAlUY1uNh1ibzoMxMrdzdrPtrRWYcAMAbZbOiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb82783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2823,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, baseline, precision 8, 268x179, components 3","md5":"bf6ba80ad73b1536ca1eaadcf1e6d7ee","sha1":"3655aa6557d155cb171cf75181ff885d7024561e","sha256":"1ba143597a6f749bd4bd2234bf37a6290df1adff1efe8cee9907b7233c6a8b26","sha512":"fb74f5dc8d38d00af7e869a264279a5137b482a65b011f9cdd9d3d3a59acd46fc9913cb9194feff203b147e6ff536af8eab15a16c88c78809df5bf123ef7f1d9","ssdeep":"","tlshash":"be51256eddc17f89db60ae382079a402b2c745ef8d53679c70466e04ee17ab7140ef82","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-14T06:55:27.861117Z","times_seen":62,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/img/serve_01.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/img/serve_01.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 6351\r\nlast-modified: Thu, 01 Jul 2021 08:41:34 GMT\r\netag: \"60dd7fbe-18cf\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2F6h%2FZ08rYQQ2XzWmeG9YoyNo%2FKD0Q5lKJqgyHxQd2477P1SmTFitdAE4whlFmObh4WwXEZOAaSG%2B%2BmtXbDMWq4omeSqZaeHqT2rpWv5rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142350b9d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced","md5":"2655d2813ddb21249cb4cbfd934e7f40","sha1":"b945ef603fa86f9e888d83379362bc90c98b6f0e","sha256":"cd058d185d26bce1a9073d235fa3fd561f70a45d3ab5fe8be6993fc0a947b29a","sha512":"936cc6642a1b02d47a49e566701d8fa91f006fe600dfdc5a553388b28359b1c0023e84e0ae11c85cbe0ec83344c8314f5fcdaceaf35a876aefe669e039512b1a","ssdeep":"96:5X2Ai6hB0bUk2EH/aAxyr8lP50yGhS+88Ih8CP8RCwLlDg6hqTup+eloxaTC:5HhB0bUkFCAxxGyGhS+k8a8RC80HubZC","tlshash":"44d18deed8896ad8d394512138ffa4018c7a0280eb61e2f7b9f5c2047f912f76156ed6","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-05-04T15:58:11.683415Z","times_seen":24,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/css/modules/layer/default/layer.css?v=3.1.1","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:13.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-3859\"\r\nexpires: Sat, 03 Jan 2026 20:52:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BgMk7hKJlyHRLjyzObPvGdWllifu3PaiWdzT3PM9I%2B3rOtVZSncQWnJCHfDTWiFepc2gLlm3RhpV9XaMGE1aTnJjTSuWkl6Q9HUfBp4Jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b81423e5c8b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14425,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14368)","md5":"cdf467c11d77287b09cec22297aa06b2","sha1":"57e147ee3cf8a1ea2194bdfbad5e69083fa578bd","sha256":"ba2baf1bb08b0bff57cce75934bab7768c52567bf389479bed787004ae6e653b","sha512":"9c24a7c4d5d151652e246375c42f4ef2eb29a33dd9b4bad8c19ac2dd52086db91988d0f87c5d547f377499649f02e6ac4dbe4ee7a06d8a65cb2b445482104ab5","ssdeep":"96:Jp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:KWmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"f55231e144811299b0278721d6dc7eba32f88d43e5630daef2573c1f874c6dba2b6647","first_seen":"2023-04-16T09:58:27Z","last_seen":"2026-08-03T02:10:56.240938Z","times_seen":611,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/layui/css/layui.css?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/layui/css/layui.css?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 Jul 2021 08:41:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60dd7fbe-12261\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKfnN9vz%2F2L6q773lrCNEl86mRhI38%2BSuBYCk15KqU6Ix2ApCeXXtW6r0DvUxbKeAzM54RV%2FnlG5%2FHdss9R0iMkRJmtQ0k9okIxECiuTkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b814234cb73783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74337,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65504)","md5":"defe062a02a02ff8f6f67d0fe4353721","sha1":"b2769cceb2d57fabd27e46616ad054f84ff45682","sha256":"013b6d47529039d31670f5c6f1ab780d1345bb6d1a643beeca1176f6311067b9","sha512":"74307e63485a4f89c5a7b8e6c79680f1427e3f696ba7d670d816ce4aa7087b47db97265bc0742c7a28879174a678e271fb9ec220876063aaaf91f683ebb5fcd8","ssdeep":"768:4/nEWwcY/8zYbRzyclDj1JpZlwyQaIYKsR3zdVhlu9Tr1BpRBtfKa6G6nr4wdk7p:tWwcY/8oG68weHmavq8","tlshash":"d8739632e6012ca5762bd215b1dcbdfda0789512ea634e6df3823b1b87848471077f6b","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-29T23:48:18.424013Z","times_seen":82,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251110/4fd65eaf0f9b53bd73eb92d17a96f40f.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251110/4fd65eaf0f9b53bd73eb92d17a96f40f.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 49273\r\nlast-modified: Mon, 10 Nov 2025 12:24:30 GMT\r\netag: \"6911d97e-c079\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcjH7unX7aAXPbNQpabeTPJz21uprw4kUdGqLNt44cfgqxJxCbcp2s6ln8j2GiOchUZHujtbzDSIQLYVFsDvRZElA9DHCyt9u5lInNxDYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234db7b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"9ae206153a2a5acdcf385864dc03c841","sha1":"a875b7ffbc97a04432f608251ecf433606942847","sha256":"f744c2cc4c11ad3bb8092b50e425f3d41194a41815c511eb45571f93d5165420","sha512":"b3e85e90ad1e10d542d3a72697cb9a88c390d648b6f139aed21760d008663e63a63e69cad67ccf8c7a3f08c7d177d82e8119feebd59b2e9831c1c13c52c92799","ssdeep":"768:Q7zRU8+xHd5B1ogn3Cavh48EMC3zM5DS5RUA5WuVQjRLzGyu+GCmYDkz9:G+x9pn3B4sCoJwMNRLzZDTDO9","tlshash":"972302224ecda6b85d286861e92519d3777bf3871c1f4df53918e4c0c30a97d2ef6621","first_seen":"2026-01-03T08:52:45.162091Z","last_seen":"2026-01-03T08:52:45.162091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":377,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/images/th.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/images/th.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 3491\r\nlast-modified: Fri, 16 Sep 2022 08:43:38 GMT\r\netag: \"6324373a-da3\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwBZcwEW2osgtvpnAn4TCUINlzt55I3mGoklyg%2BEeIZY3%2BfcDKOvM6p%2Fd0lVvj9TcgRYb0KbEFDUTnDTthPrZ8BaTxd5t2P7KRULEvEqQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb83783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 629 x 416, 8-bit/color RGBA, non-interlaced","md5":"59412d1973ca740decb8a224d9650905","sha1":"0f637efaab53b4d563e077840c04faa14073fa8e","sha256":"050d0707f05e5c793402c8584d3d9dfae330f67e9ff3e757d100bff03bb54591","sha512":"f6653b1da50bed712e620d1b2a1bde850050e0ca9a3c452b910d7cd55601e54598bea3766dd3a2daa129cf0b0ee66af56054c35149287b66301a8fb216c1ab69","ssdeep":"","tlshash":"3d71749b113ddfd58eeadaa951e27c2535210342844fe8fe95dc229c1f37cc7b992105","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-05-24T18:27:37.889815Z","times_seen":12,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/9cff45c6f19606e24322bdc360a3f4fa.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/9cff45c6f19606e24322bdc360a3f4fa.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 69758\r\nlast-modified: Tue, 07 Sep 2021 16:28:34 GMT\r\netag: \"61379332-1107e\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwRaBG%2FuWo0oav7LrAnoaJryiMlAgk0KV51mua8%2BcJCA%2BqE10YDLK7eV0LqAZX%2BR14Zhu9zYbJDZvWyf2Hao5BTZhxjHLuJQ50paGDNuNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb8b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69758,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0df4aab369a6c36d83c82135515ef396","sha1":"97bdb7b344ebdca8f4ae31544508e1d1f9f67d2a","sha256":"dfffb03e0c61454ce9e192436fbfaecfbf3c64a5ba0090aaf603a30a71b1af54","sha512":"702968522498e8a124eb0a8db4ed14eb0ac7489c3c616100293c1ff6e740111cdf0236c7770c8974d5f9e68b4965dc031bcfab82d54dfbdae6bc328948d24dd8","ssdeep":"1536:7QVd1/t5rOup+XgFWGpg47y6By/xkgpvehUVdrP4PrGGmbLkQm1w0oz:yd/5p+XgFY47vBYjp7rPQGGYk5Iz","tlshash":"1e6312a8b3fc665f8ff1a44a70c28d50ea1954773474264ce97d93b29e7ce2392142f8","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-05-19T06:31:41.598804Z","times_seen":1134,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251115/1dfbc19c47dcdc27a74ca1fa7c136832.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251115/1dfbc19c47dcdc27a74ca1fa7c136832.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 3243\r\nlast-modified: Sat, 15 Nov 2025 05:26:48 GMT\r\netag: \"69180f18-cab\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cj9QWU52H%2Bq9Gkahi7CQNypKanP68Hsm6UMksEvfH9zoZIOBhTxvcOCryvbfy5tTHt2Kpx7wcvurrI90uhsaFpWklhmsAXxgK4c9w7%2BXkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb96783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c2f20802cc457f7a9068e6807ffcb35d","sha1":"b5cc6d5cc982d487c69d859501745e7c1321e35a","sha256":"73e257de8482c3e4244b934b1659dc747db128ffc6e97618748bf05bd5b9b834","sha512":"00505b2af44e3d7e502c471726c7d83957ad451bcd6d00030c82ebd36210d0aff7b99c79f51f26d7bc8af9467b5117ae9c0fcee6fa30584d5d5d31877ef1096f","ssdeep":"","tlshash":"d9615c61c3014b5ce118b9b28a5b263a5c0a9cfbd91c6f31da4aa13b3f101e32e9d715","first_seen":"2023-08-13T05:27:55Z","last_seen":"2026-07-17T10:25:13.796616Z","times_seen":1135,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/img/serve_02.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/img/serve_02.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 6316\r\nlast-modified: Thu, 01 Jul 2021 08:41:34 GMT\r\netag: \"60dd7fbe-18ac\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOGWMoJZIsq6LrvvlM5SbsXPI%2BIcn99dWAiQPp3SSGxo39H%2FqpqfGdTr1njaguE8TXuRCjJ372Z8zWb%2BLAUkbXXfTDQI4e3HgZKyOZGw1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142350b9e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced","md5":"008dd92ea04ecd1c0cb16f43ded9e442","sha1":"b18332e8d54c836d3927263e27c5fd1bbe6c2398","sha256":"d80a19efb21f6abdc4a7a0df9676788dee8cdd6740e5055f3c943c530faab08b","sha512":"b007da86ce1b56387563ed26aa2021b75846922435ca35ee957b726fe62de18a4025f97461eaaa9313534dd1cad7f6dfe4c5392069a5f3986eaa0ad4b7d78859","ssdeep":"96:5X27alKymOzE4epKqj04GTNIwsGtA08ndq8Z+M8SvCSuy/76Mzr43MP0Z7c:57lKyWQquIwsYSZ+M8SvCSBr4cP3","tlshash":"0fd16d0ff043fd5085dde0a02bb5d02a5087d7d19a0bc2b8ba5a65d88ff29e854591c7","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-05-04T15:58:11.616467Z","times_seen":26,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.c23dWw7V.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.c23dWw7V.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxNXq3shiy6smhCssYalcMaoNrfqf4r_Ifc5A9n6W-nYQrgkWyYbgjtJze6CDgu-4WOi5n3p-9U\r\nx-goog-generation: 1766997546885709\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 424126\r\nx-goog-hash: crc32c=EDvwcg==, md5=7kBQk9NUg8Z/Grep8QivBw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\nvary: Accept-Encoding\r\ncontent-length: 119876\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":424126,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ee405093d35483c67f1ab7a9f108af07","sha1":"dcb80b1a82d1887f44860563518e6bb3a90aa0a5","sha256":"f639fa33e9ca56666ee14394566608b5627981e56b215d73deb56d425ad01e92","sha512":"a6161148eff9daf8e63b34bee0fb24476208f0948165cb658acf462f660e6022fdb12a1ba91dbb4055af18d343ea5d42056d0f3c718bee19abdbb567c68d0c3f","ssdeep":"12288:iG1MfNkbS8vkC8RMQKiHGOK1rPFlmO2tS7YoSrRZg974f+5NqPFqReY1q9qBbFFL:iG1MfNkbSmFl6el","tlshash":"b5946ae87242f538d7e7c19b94bb1609f23d3d09b42e9660f1ade85e33904489267fb4","first_seen":"2025-12-29T08:53:29.709785Z","last_seen":"2026-01-08T06:36:03.175965Z","times_seen":712,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T08:52:10.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 08:52:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: lang=en-us; path=/\nPHPSESSID=05c3558cdb9629c7e25548755babc3de; path=/\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYeohcR%2Bf3J3S9qOPde5zgAFPgoq%2Ba0cXGxAlsg8%2F6fo9Lg3PBpWwStsUKFx2wFAQfE8n3gY7XBQgVP9y8Kqfkp4L8f5PPYqvcxRo9s%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b81422eeb720b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30878,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (676), with CRLF, LF line terminators","md5":"3fef748ee41d316818780e485f89b933","sha1":"8aeb1854dcb01dfafcb295df6c28b599cf2cd81e","sha256":"eff5964941df6d936e735679902304139a2b8d896a36ef295c774f1731c3593f","sha512":"de22924582303b102fe903ec7bd88291f7d12945f9da1f0d0b173c6154e8b284a75ef2c05d2ca334e7a0b88f50c4fac0f01c7978654f140025c7b6e94f34ae8f","ssdeep":"384:r4cZ8wh+dhrupzMOzOgzIzBzyzFzaHuDZVQr2iloprMY/5wg8zD3SExJxjbAonb6:McWGZMi5QR21veJ/heL7Qk","tlshash":"8cd2941051ec183711b3609996ed9f2ce4ef28b6e36a0548f3ff0dab5bcad55381b149","first_seen":"2026-01-03T08:52:45.207959Z","last_seen":"2026-01-03T08:52:45.207959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":48,"dns":24,"connect":1,"send":0,"wait":668,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/images/en.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/images/en.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1856\r\nlast-modified: Sun, 12 Sep 2021 07:19:18 GMT\r\netag: \"613da9f6-740\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iv2p3JKpMyatKgHJy%2FuEyE7qA%2B0ZyZAiuCToY2j5RwFOybBMTPfEU08Rf%2FYGDVjBF8XoVsS7P9SaLGTP%2FLCaic2u%2BLr9IOe2lwcGS4qZ9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234db7d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"19e8aa640b1d129c94e299dfd580f210","sha1":"ccfa030c16120a11d224fa1ba72afd55f0776523","sha256":"7385aee2de7d89a525b33e6ff1e8c1246de9234fcc7346f5877ee7d3301f8ca1","sha512":"6ca9e3f44d4ce8a0f7734c8f814138fe54c3224f08905a6e0634f36f1c4de6ecef43281df8a7b29f473300a1096565b148ced5e51fb23b050457c63714af11c3","ssdeep":"","tlshash":"e4311bb469a26052fa5e2ad4be1045df4ef89c0605d89251e60645e13c9eef19f0c437","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-07T11:15:24.567541Z","times_seen":456,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20220609/b84775dd2601805e6474b2f896831338.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20220609/b84775dd2601805e6474b2f896831338.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 3600\r\nlast-modified: Wed, 08 Jun 2022 18:19:10 GMT\r\netag: \"62a0e81e-e10\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oeijnp4lIadvbtBqOH7bmCj%2FgslYe0irEYujQgxzfp9E9zHOWYD331KULBccwF1dFUfRQeT%2BV5vl0YjVI6RkTXWRB4mOzihFQ67PjTSt5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb87783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"bea6dbc6797917e594a9d4ec1bb9a9ac","sha1":"a6c15fda67423093c86b0b08ca1190f9c983a5e4","sha256":"2f48f95e0af263832f5bcc706f601b63f6a4ac71a6fc92d5c5887de0937fed37","sha512":"d2ec27016ae5231e59ad057acf2ef2a6a263f566149ff3f1072bde0797f4bb397bcbd1a5a9eac5af1026e1248aa895104cabbce81ee91c46949bdc4bba5d3335","ssdeep":"","tlshash":"35716e9323f26183d329016dfa056ecfb65074e83e4cea046e329806546791c7477ae7","first_seen":"2025-05-26T15:15:56.449897Z","last_seen":"2026-03-26T00:30:53.887678Z","times_seen":26,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/lib/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:12.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/lib/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/static/index/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1.1.1.7\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nlast-modified: Thu, 01 Jul 2021 08:41:36 GMT\r\netag: \"60dd7fc0-12d68\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7H3T4b5Nyb2gV7A%2FGy9LNBWAK%2FmH5fkoFyQrpuSEkOYJFyVpvVMXgatDx68%2BCFTokpv5haexhLunLhgX9IC8h8tz2iWEcJxNT1x3hobcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b81423b0c2f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-07T11:00:00.179507Z","times_seen":528250,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/layui/font/iconfont.woff2?v=256","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:12.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/layui/font/iconfont.woff2?v=256 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/static/index/layui/css/layui.css?v=1.1.1.7\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25964\r\nlast-modified: Thu, 01 Jul 2021 08:41:36 GMT\r\netag: \"60dd7fc0-656c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weMOQFVEEULXqlW1m2hxRMdsul%2BWkw6jaBYUrMPhHY8LMn2tszFUj1YhxwuukpebseGvcorAhGy94KjwF8AzSzfMRDKe4%2FoPvYBYt5dmrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b81423b0c30783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25964, version 1.0","md5":"d8c214c89e33a7bea93d656bd865e869","sha1":"c188dbfc6951b7c305940ac3a279227aeb5617f4","sha256":"bef73f87b8a3972427dcece922ed8f59d1d01c4a3fd572316efa70de9aec9c09","sha512":"0e5897c1b874a714fbab221e97717c5bd8b6c525b539a24eca76391206f931abf5cad2441743c441239ca2830f3fb33c34d207e13ee4d1eb3eeba806763f8405","ssdeep":"768:4kZIXl8feK5HavVh7VQB+l9yDbzKu1eNxECo:4kZIV8fqxQB+l03zdeNq3","tlshash":"fbc2e1c340bb8ab8b077783c6a9e96b9d51134261dde919427cc096043feb49eace701","first_seen":"2023-04-14T13:17:16Z","last_seen":"2026-08-03T02:10:56.233428Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/lay/modules/layer.js","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:12.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/layer.js HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-5619\"\r\nexpires: Sat, 03 Jan 2026 20:52:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9v72k7nM%2Bu0QSyRUakmtNHxVNk4hBWetkrVn2LemHIaSIygj8FkBMauTIhgSJRn%2BajZC8EfEPjFvq9o6WbwKO4u2gF1hq36%2BwOXggySSvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b81423a7c09783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21984)","md5":"3ffd5603784dbfeef189498c1a705c15","sha1":"983f2308aab1a1addad5be4f1c49099f5dd589cc","sha256":"2aa83aee413f9b91a2dcc536cfd6acd6e44b3fcdb59c26586e32d083396a8db5","sha512":"76d0b3952e17783ab3b597d0db1f734bf7b933ef8ff316c8107f5192f1ecf318c3f11c9ba10a4d15063b26cbb32133af7581070d7c782ebbbcd6580cfd21545a","ssdeep":"384:619Cih92A3igTLXSt/SdMrXqE6K+LxzAOTElH0jjhtjfs8:614iV3iaWtXIKiF13k8","tlshash":"b4a2b66a754034976323906ad11fba0b31f21d24d7078128f22ba4be1dbcd95a2b7f5f","first_seen":"2023-03-07T01:06:17Z","last_seen":"2026-08-03T02:10:56.239734Z","times_seen":452,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechat-static.com/api/file/lc/img/rich-greetings/handwave.gif","fqdn":"cdn.livechat-static.com","domain":"livechat-static.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:20.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/file/lc/img/rich-greetings/handwave.gif HTTP/1.1\r\nHost: cdn.livechat-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 372763\r\ncontent-type: image/gif\r\ndate: Sat, 03 Jan 2026 08:52:20 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":372763,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 460 x 300","md5":"b833044c92652fa9fab0e3210c3a57c4","sha1":"47e4ab00ff06878f861d731ee9f0891beb7bad88","sha256":"d368f73655941321fa294f8c0f5d63f0a6caaab3dccac499800b4e2e49358a51","sha512":"4f46bb8319c32dba7db576462cf6ed7329950c0bcebc80f14517a157d1b244526145ddda41814a83f0b41806a4fb4cc4ec33cadef82511daf46540f77884666b","ssdeep":"6144:Crs32NvcWwZlIhPDqvN4GS4bDzKTzIsiMB8etGHL7RNnADttE:yvcFbINsN4GScKnIsiVztNADta","tlshash":"d784126127a95f3efd3a38b4452e52aaa01c5802dcedc13e5ce8f2d167833168865ef5","first_seen":"2023-04-09T13:57:14Z","last_seen":"2026-07-11T03:55:59.179399Z","times_seen":3443,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":4,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20220609/842612613ecf00f03c0d055226bdb648.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20220609/842612613ecf00f03c0d055226bdb648.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 3503\r\nlast-modified: Wed, 08 Jun 2022 18:21:04 GMT\r\netag: \"62a0e890-daf\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYzbuoWJVLGnvi9qbUt2xQuQXwhkEobboC83Lve3MQ0ste%2BRn%2FSoVQHEvA1NZdo1yBeMLHXjjT9ShqiYghallF1aoPJK%2F80xaLL0p0%2FfYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb88783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"7f12c62da7ad94b172877ac53ebdd61b","sha1":"21f24f573374db32888e89a90a01b5dbb4d79373","sha256":"5aa229dcc7bb37400ff085320165829fc9ccdc8243ae090933298162ebde1f05","sha512":"7991be5cc1893691d0e19a764d8a08a33e0687902d8b1d9dc6ac3f478e7927e5e3960061be504cf853daba03419fdab137313dd4c3aa1f43444f487485b1bcdc","ssdeep":"","tlshash":"b4717ec3f865f6994109993644b35f12b9911d32531d62463369ec3d8acdb0b07ad32f","first_seen":"2025-05-29T13:18:10.866631Z","last_seen":"2026-03-26T00:30:53.855922Z","times_seen":13,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/lay/modules/slider.js","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:13.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/slider.js HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 29 Aug 2021 07:25:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"612b365e-1bb3\"\r\nexpires: Sat, 03 Jan 2026 20:52:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhzdKDsLa%2BNdSC5KIArQ1wbnFAPEwOTS%2BBLrGUEpIFfdXKJddLznt4cvVsDqDNQa6yBxCJGCcj2TXS4J1NIlMtc1m8zJgRGfYp2sIVoeMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b81423faccb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6929)","md5":"6c35742db2e72cd4f30cefa23690ecf5","sha1":"b50d4268f547cefd984c069d276c956feef395e8","sha256":"2fdaaa9935b2d19fb54e0798e6e42fc3528d1b2772b46b9aa8731b1ab6947609","sha512":"44d0ab3649b35cec891738e6eb4f28d1857fcb900e2369b9395ea54854717108268c8ce729591923fb094cfe1b34dc0f9b2e9bf35b17b77f34c479ef80deb391","ssdeep":"192:z8Syuw2bmz0DLKypMjYXVp5D8IlM/eq9zwtyd4UduKN:z1yuw2UOPSBMj8/","tlshash":"53e19615314ab5732172c263b59fc84eb2f20779b303c564a6a540a51ebece82b37f63","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.886539Z","times_seen":120,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.DL3uqfmp.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.DL3uqfmp.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxPv1DMcaAQdNesFZCc4xI3jMEh3qd9v7Q8Xx_uJXZz0F_sltWPb9us6FR849iznjeT95VYTkNA\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\nx-goog-generation: 1766997546887656\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 195015\r\nx-goog-hash: crc32c=5iqKaQ==, md5=2MQixJ0a2+3FPjQHzrSlDw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 61316\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":195015,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"d8c422c49d1adbedc53e3407ceb4a50f","sha1":"d4f7be0e623f3a86123d58dcd16495f6ab505106","sha256":"da6bdc91dab29d0686d4c32666656928f142b32c0af92ce75c30675dab3c1466","sha512":"4d49afb21f9f82809447f33b3f36c2e18874ba4a84ec2f5edd9258e6e7a7340d7650ad9f27a7816f19bee216acc2c3d82b60127878ceed847de79092c55c801c","ssdeep":"3072:q8zvDq2gkDPXWdLbWFI1Gy57IG4OiZSksfpcigtofnfYcd2:5DRgkDviLahtOiSksfpcltvcd2","tlshash":"30146cc8b186b53587e734e6487f1002f33d6d19784c8564fa99eea63da418a9233f2d","first_seen":"2025-12-18T15:35:53.170321Z","last_seen":"2026-01-08T06:36:03.334474Z","times_seen":1356,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/9911518f2ea41dffe86efc9bf3b9f07c.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/9911518f2ea41dffe86efc9bf3b9f07c.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 7083\r\nlast-modified: Wed, 08 Sep 2021 13:31:06 GMT\r\netag: \"6138bb1a-1bab\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgYmsAczr81T0xCMY17Sg%2FEP0ZeLvwcAZPDN6Af8XFbAbBAgN4vwWw8lfmF%2FnxkEtPIRlI9HvrAcyUMVqcZ01USUqWCxvDACZTMpJdN67A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb90783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"32d33b7a7a8eae613f02c047312a8563","sha1":"d73de138788be5f3a0d98f5bbbb2fec67a2b7e14","sha256":"dbb41643b69f311f7417c8e28671fd3064edb363a60d315d91325010616334f8","sha512":"e83e3dfff490f6554eb807c370fae71c16ab5aeb35dc6cb760be034f9b86afacee5026fd8cbbf592fa2dba9dda8adbc66079f76cd46c9031def466de629ef3b6","ssdeep":"96:60U9UIToHr+uc5Zs/ovvIepK064q3gCPsaHaY/9ua4D7JfmOELFUzV6U8d1cESiG:60OxChgZzDpK0jqDlRFr4R9ExIbzBi4z","tlshash":"68e1bfd8f9b98a40c473b231ec5860ec37a4fd08de91916f105abf8d8372bd6c8a6117","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-14T06:55:27.880804Z","times_seen":55,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251110/9f91ddb3c6a00492488f6e01c2b4961b.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251110/9f91ddb3c6a00492488f6e01c2b4961b.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 7871\r\nlast-modified: Mon, 10 Nov 2025 13:23:17 GMT\r\netag: \"6911e745-1ebf\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juYec%2Fpp%2BcTvLd%2BcRZRdqqYatYQmlFNcmerdZ9iTQM8ao1xfhB9b81fkGEix%2BpKV3eRZM%2FegnY2dEV3RwQydqdqyHG3K2UUf3o6BBVCKUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb95783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b1b6c559858ccc0b1c9ca756cdb61c60","sha1":"3f716d8a92422256ad7d501f76916774084f9ea5","sha256":"cb3d2cdd4bac4e8596900aff024f983bd0b224d905816874f069376149cfec7f","sha512":"166b96ad74c71a587667c5112a308d6744349723ad1ecf655a211ee8a6a3cfd7d0aba4d578aa6fa02783653fd347009fbce0ddb395d68157dc1bfed7c5114e3f","ssdeep":"192:qSSp+kkaR7hvxlJtxBHLJvuQWqAUIktEs9OdtQ/hV:lYFbxBHLgXUIkVA8D","tlshash":"aef1c05523be59efc2c4aabcdce98d41117bef9a8c18df0317d8972059aab1dc19f104","first_seen":"2025-12-26T09:31:33.457916Z","last_seen":"2026-04-03T17:10:28.359905Z","times_seen":4,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251115/9fb219556e93a2c103d1ed0578add2cb.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251115/9fb219556e93a2c103d1ed0578add2cb.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1125\r\nlast-modified: Sat, 15 Nov 2025 06:09:19 GMT\r\netag: \"6918190f-465\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8kb4fJrbxWeQuJValavz0Slxbp2HLQ4p0WlYJnKmRj3Os%2F%2BWvZm164bRE4pjHVlK%2BdiUZ0URWDyyktenjq%2Bz1v4Ua82chzftYZDGExSJmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8142350b98783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"1730f848f59cbf0939f137edb0d31daf","sha1":"653003f779a4df452e5d6bc48aad976a964100e3","sha256":"baf77e7d4ade720ceb7edfafbaf6e3aa636f2186920a27f76abaf0d03bb5ecb7","sha512":"9cd2111bdf247ea3d62787347025fcee7a9af626e453a3b725c0ba0621079391e22ab7c2760ab73622207599f275b0c5adafa0384841f2e32a8b3f9f21d40649","ssdeep":"","tlshash":"8521c6df40842c3cb96f002c2438becccc9a813a744f125f5a16d1e0f6af814990c2e8","first_seen":"2023-08-13T05:27:55Z","last_seen":"2026-04-22T18:24:09.882837Z","times_seen":1091,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/index/d3.v4.min.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/js/index/d3.v4.min.js?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 05 Jul 2021 17:16:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60e33e86-36305\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZfWzQq%2FSTXxBbJB3kjMQ2jbUI0vw%2BB8kPkuARjjQw6g3O0w57Ozm8EyQMv1owWiJG5U0HyAI3QrP8%2B5KWCO2SEEQIxFryIX25MBY0q3Kyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8142351ba2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221957,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"e899651bcf1a3591032d7213daeab171","sha1":"607e02087446eb2efadcbee253db3aca3d794a7b","sha256":"8585db4092b8a9d26201e0d58e343d1b40fa034c4b9c343878923d7649bb1699","sha512":"44927534d0bcf1084deddc29098f2b9bfe8ec48f987503f8f03acb19efde48077e9feb353d7c10924a73cc082825ee1c6455b61802d0a31a31eb5812636c907e","ssdeep":"1536:wJdNAq50g6ds5VIG2pUfpgBU3gPDSb7+CmeoA08h6Vh5Lbg5ECfmDoo5rfIrTGE9:wrN3F2pHSYlyLG1sVAupFmuFyiI7R6","tlshash":"092494ccb682b096936320b0417f244bf33b2d59684f4568e029e9d97c7895e51bbfbc","first_seen":"2023-03-07T21:28:45Z","last_seen":"2026-07-31T00:54:24.207289Z","times_seen":447,"resource_available":true,"data":null}},"time_used":965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19396999/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:12.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /global-mapper/lc_license_id/19396999/region?jsonp=__lc_region HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nuber-trace-id: dea709eb6b63c64b73ff567df4fadf53:b9f18da68cbb7110:0:1\r\ncontent-length: 35\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-05T22:39:31.440318Z","times_seen":28115,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":51,"dns":30,"connect":1,"send":0,"wait":130,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/plugs/layui-v2.5.6/lay/modules/element.js","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:13.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/element.js HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-1c60\"\r\nexpires: Sat, 03 Jan 2026 20:52:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6byZs2Df%2Fa6NK9zE4zwrHRZVBMLE0LSnkkxuWXheHTS3u8%2FlUzalWvG%2BzcSsneoktHPhFNiAc88OvSn5BDpn58VRWTqur5J6pVXykFKdWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b81423e5c8c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7203)","md5":"784379625afe1516f69075a78007e7bf","sha1":"4eca1e2bd313d46ddcf113095074da797b145aa6","sha256":"763c30063a00b2698ab3aa17948b5008a33d477fd7dfd45f11f3d4a49e29b73c","sha512":"f08d8e5c3c091ca2a0f00109cc55dcf9a7ce055996f1fd2d6cc2f7b414e533c0b8356fb5bd3ec7eea1692e5aa56d2be0465465f60479f3eb2afb783cec3ca87a","ssdeep":"192:nZKp8KKtRtwFC2q6IsTPJB91RGRtX9uEUn0Gs:nZltcF+6IsTP5ONN","tlshash":"bfe19518b05236f73197b5d143bfa21da03f4636e70246ac3066d4ba09bbd891673f9b","first_seen":"2023-03-07T13:00:48Z","last_seen":"2026-08-03T02:10:56.23031Z","times_seen":283,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/js/script.js?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/js/script.js?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Sep 2021 08:31:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6131dd4a-d93\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTF7OgUubXOpEqq7hhbjz%2FWGeGtokbxno3yqxrNLaClR5vIC97nVW7pMBz0A4I2KGkttJbZw4qTnsKOMKw9gI%2FaoG5xI3X5BjuVEbUMGWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8142351ba0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3475,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"dcd3b96fe52f48f5dde6aa924e019f44","sha1":"3b9b647a6bb2e4bf1722f931274efa124fc1e4b7","sha256":"646737151eebfc520ad7beb27cc7ea99a62ec343e28ac6b10c2ef9651dec88e9","sha512":"4889dafbf3e989b6aaf22cb19be1776d793aaea6930ead190e4f100da5628b81487a30f2fd06de64ce303ea37fed1d0c8e1040734526e5c8763dc845882c38ed","ssdeep":"","tlshash":"276172687511241c93f323b21ebf2508d27946a3092bc7a1b44dfb806f346254feb9de","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-05-04T15:58:11.675714Z","times_seen":77,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20220609/de535942f320b534c0fc258442ad33f9.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20220609/de535942f320b534c0fc258442ad33f9.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 5641\r\nlast-modified: Wed, 08 Jun 2022 19:06:14 GMT\r\netag: \"62a0f326-1609\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTKmy4nWzh6cnFsB%2BoST486P9cckJrnd4igN50INyeUZzxs0SngTRdhVOGiuO3MLaun1AccbZ35A0501pIRweVORRPonlf0GKhlukb8buA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb8a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"dad5c5e00245ebfd0261ad557b795874","sha1":"4a09fa3141152d1bf040010c3ab5691e2eee6fdb","sha256":"991b14f66c96a68d3ce703ff232458a509522ce063744c1b1080e2410124f390","sha512":"824c33c2b8cc9eb27b29c348fc11b5f85baaf413120da00864af0a7ab73d973c98555d8fe41dafe75fb2b335cf793cc0dd7464ce0fe41110ce651aead250304b","ssdeep":"96:9RTZHOa+VHkLTuObFrnzVIcMWT1VlkRMQUUBO+bngT1Xc4p/vzosjA84RTR96hSr:9RI96Xt9hRMS1VOMPUB1gxM4CC4n96IJ","tlshash":"b9c19ed76f6ac938375c29f395a7e974466e1ccb1f07f2fd20299813623a1200aaf700","first_seen":"2025-05-26T15:15:56.454608Z","last_seen":"2026-03-26T00:30:53.857037Z","times_seen":26,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/851d2468d967e3d35bfec8e7e12dff18.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/851d2468d967e3d35bfec8e7e12dff18.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 14881\r\nlast-modified: Wed, 08 Sep 2021 13:39:10 GMT\r\netag: \"6138bcfe-3a21\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uucbAsdSRUbMCsj0N7N5v9wUaiuC65rVy3hiMwRQLPcki50Cr3hQ3CQybnbDnhUyGiwB5QJn4ZPX2R3xCELDOu%2FT2xraiBN2JMKCOH0%2B2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb94783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"69be70e170d43397fd1fdd93316b56a4","sha1":"3a59d13559293f7c82884cc096a0a2e44556d979","sha256":"52398d735f894782e3387013587a9e8aa14423f541f3d9a131ca440f1d30b886","sha512":"422ef75b86bbbb21ba98f09fdd00c6aaf70ab3c7b30ddb87332bf1e1fbe87ad5c00f851fc88ec53cd20337483ac1169a29a17db4989cae333aeca1cce447eb13","ssdeep":"384:2TQWUv1by4/SxzUDjiSKf//FXKFkscSDWSZPQBF10/fH:Zv1by4/S5UDjivFFn6WSeBF10HH","tlshash":"1962c07a2b24b82fb9964b5d29f4a23f45544dc378786bac2fc074283376978636d2c1","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-14T06:55:27.840386Z","times_seen":21,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/images/jp.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/images/jp.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 7623\r\nlast-modified: Sat, 18 Sep 2021 17:20:06 GMT\r\netag: \"61461fc6-1dc7\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vtots2BDq5MjDis0EUKsI9ToQ0Y6qupnlz3mpvKITPYNSXNesJAHRuwAYMAwNfEXbxwT1W5svumrRsygZ6JpplRCeylfPolQ5wtnXyz2tQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb80783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7623,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, baseline, precision 8, 268x179, components 3","md5":"2c1af6592dad54dc0ca627bfa876b424","sha1":"b6d122cfae18620c59dc31c52df8fa79ac2973e3","sha256":"3fc7b561aa8629c9e0a7d904a0f75e80bcb47268a549e1bd44705bb6518aea22","sha512":"bbd01ad1bbd449cb41a45ab4e20747562bcfe75c3505a93f01a9d20d6cf01d73970c4bd8cea9518351a716af6165280335bf7b1119630bdad0cc0e0e4635e399","ssdeep":"192:BoVwrqC8KG3v7HbONd7sqi2KiD28OCha5aq:BZlwj7G/KctOF","tlshash":"6bf19e7799370b91ccafe335242e939ccf44f00217499f24c588adc2d8b2ae9db75808","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-04T05:32:09.951765Z","times_seen":52,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.BLGyaTQF.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.BLGyaTQF.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxPGMIWNnyoCB_2vJiFK3SBakP7NGE-14qdLkO7Ke5A3BnlvvDSQnOmKUsXcmeHjt3zuFJiUWnk\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\netag: \"adec7c24656363f3963461f9ef09dfb7\"\r\nx-goog-generation: 1766997546897782\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 310\r\nx-goog-hash: crc32c=x28ZVQ==, md5=rex8JGVjY/OWNGH57wnftw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-length: 310\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":310,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (309)","md5":"adec7c24656363f3963461f9ef09dfb7","sha1":"5f05b7d32f71a929e3f913ccf563b991ec07609e","sha256":"bb052cc25364c19b0bac19ee30c39ec992a3a45bd04ae648652ad13f38e16a4c","sha512":"608ce114cde93357276385ecb80c3c7572172bbc9e7a0afab7ef5188bfb0e4eaeed11110cf07e91186c389ea0aaeea1fd609ed741a7bdc1a59f2a2ceb345b029","ssdeep":"","tlshash":"e9e07dce61d2f4f24285fccc45105081d368df801bec81a0c06c5f9027110928836ec4","first_seen":"2025-12-18T15:35:53.134213Z","last_seen":"2026-01-08T06:36:03.423384Z","times_seen":1353,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/0e3bc88bcf1739272a781dc68ee40b00.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/0e3bc88bcf1739272a781dc68ee40b00.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 55728\r\nlast-modified: Tue, 07 Sep 2021 16:38:12 GMT\r\netag: \"61379574-d9b0\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xByWri4vjF4NZB6YlVTgveztDa2DQahd8wwUG%2FAjg1kIjfI5IRkRdu13BoAMLDFUStjNEEJ5fTb1idAzwtAjlmmNq4203KhllpkxXzphDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb8d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-30T19:44:59.567355Z","times_seen":915,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/259232d0bde771fc930bef7532f3e086.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/259232d0bde771fc930bef7532f3e086.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 3324\r\nlast-modified: Wed, 08 Sep 2021 13:32:38 GMT\r\netag: \"6138bb76-cfc\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyXWG9nTK0%2BxYgf%2B2ZJPECjHkXVKKuH9Dh9OlQm9m9lOZvXscS1fpnmSQmD5RUipCsSGuXXdM9C3VtUc3QVOIDlRlMHIqsquGIBO4esC2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb91783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3324,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 250, 8-bit colormap, non-interlaced","md5":"30724277cb16d714c2634075aa6149db","sha1":"93a46b50196b0f53c065a0ee26e97807815d182b","sha256":"39d5f84e3ca9a8f532d434a27be910e40ceb526bd86ef08e1b7017ba846370c7","sha512":"eb3da0d961dad39e8b0bfa7814efaca012ef560e1b3c1f9764f99b69979b592d3a40a1c98b6834f02ba6177ce328e386a131bfd7552da43ad8d15c1c536e910d","ssdeep":"","tlshash":"a0614bc3986822bc8784a4563418e6bce8d4f8d373e8ee760b8bd9556138083d1d8e5d","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.870683Z","times_seen":55,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/img/header-bg.jpg","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:12.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/img/header-bg.jpg HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/static/index/css/style.css?v=1.1.1.7\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21946\r\nlast-modified: Thu, 01 Jul 2021 08:41:34 GMT\r\netag: \"60dd7fbe-55ba\"\r\nexpires: Mon, 02 Feb 2026 08:52:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMlZHo%2FGPPWwi6dQJSO80pcWiK%2F7%2BPZHg5XzISPoaFPZU16q%2BfvE7qxDYEejbrrDxjGHRKuhart58MP9c3VsXhIoix4fLXhkrgTbRjONng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b81423afc2b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21946,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x600, components 3","md5":"82e6c1313e8afbd9b207e722c389db1f","sha1":"4617be77c4f6edcdda6a499c0c7c63227c53c693","sha256":"909a1538f0d41462bf37b9c46ae457f723ac2eebc2c91641ba448b5fc2111fdb","sha512":"dae83f1eab73912c58618d7f4e2391c3bc7960e29319a30590b75ae92d021f91c7e3ad34a0ac7c262c4ff51ff3cd01fb440b7629b82b8f68c0c6a1b731e903b3","ssdeep":"384:J4dXzh403p1QG27c1AS56wzlLQ0vW2XcqsqRRwrdB8qE:Jmh4MGcz56whLBO5qsx78qE","tlshash":"4ca25b17b712dba2c8882b34dce38b1a7b1708f8825945cac7f6897708ba35c7c5a5d4","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-05-04T15:58:11.646013Z","times_seen":28,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026version=3e484e3f8236c9d1f2239ff432260121_f30528130c5ef1f29eab0150d5cea80b\u0026language=en\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:13.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_localization?organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026version=3e484e3f8236c9d1f2239ff432260121_f30528130c5ef1f29eab0150d5cea80b\u0026language=en\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Sat, 03 Jan 2026 09:02:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-length: 4618\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13099,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (13082), with no line terminators","md5":"c9646eaf204de1f42e0eed14fa26f1c3","sha1":"4b5d5818581812038d187b157363e04c2fd9e15e","sha256":"438ad3a646d9d3e69c244db065a062b0e16ce2a43ce925daf2128381e9bbde70","sha512":"dd37b34ce092de8ead2a135f5b9d95193d9339e691b147b7940bfbd4d3ecdae3923136dcd3a61b7c3554ed8fb249316fc1ce35b97b8724e4082d5bf27edbfc7e","ssdeep":"384:s3aZMXVUH0cC9riqHoKwpfi3z80CITojYsPw:+KH0WfilCIToFPw","tlshash":"3b42c819cb527e7e07a365c6b48fba52f4a950d856900437eccc803c9364fca739fa99","first_seen":"2026-01-03T08:52:45.246659Z","last_seen":"2026-01-03T08:52:45.246659Z","times_seen":1,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.CVJRUtO0.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.CVJRUtO0.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxN-D07A9XPpdH_lYUrFbVvashSijmQ7E9ma0j0LX4ot54Wot2aPTdKouqIa8qw33mArFl6DqbU\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\netag: \"f9cb993915ddc0b53612abc4c5917f60\"\r\nx-goog-generation: 1766997546875294\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 432\r\nx-goog-hash: crc32c=nna1Cw==, md5=+cuZORXdwLU2EqvExZF/YA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-length: 432\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (431)","md5":"f9cb993915ddc0b53612abc4c5917f60","sha1":"56bf44ade98665e7e472b6ad83d77137a73f11e9","sha256":"2bf2e80e80fb683c018db04f4ca96265eed50d9c9ba5b49c0c06f75d77f5d230","sha512":"a4fea0319b7747379987af9a83b0a2ebf137e4b54827ea1ac3191e9f731df7bd96790cdc5c0793b44dc9ee0ea910cb1c1557a71e07814160d78cf7f1a16bd601","ssdeep":"","tlshash":"d4e095caa200bde3f2cacce4c81094e656f353960be483b0c1ef13b20320061ce95a92","first_seen":"2025-12-29T08:53:29.726225Z","last_seen":"2026-01-08T06:36:03.249087Z","times_seen":705,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BP5Mhw0T.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.BP5Mhw0T.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxNJwRl4LpVBYNfdsy_y-hDG_YmBLbacFeKZrztDoKpzOIZAAszfpbBufWxQzeATvK_Q874PeSA\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\nx-goog-generation: 1766997546755550\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76125\r\nx-goog-hash: crc32c=13cH0A==, md5=5V4gxsLgiO5CFVv2bCVnZg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 23827\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":76125,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e55e20c6c2e088ee42155bf66c256766","sha1":"6f231b0fd59e770a1edaeb728e07962003317f91","sha256":"28544249628b40ee01ce53980a5b2c8f15b90b03deb527d024c014e21887376c","sha512":"1b730ceb15a5c989f992d53f95102668c14a0c8f649c381afc09595e1dd6dd04570878a08d3ff216b14cdfedd619ad0bf290613c71a6ed1d395e37119e62e436","ssdeep":"1536:ZzLUX9ltgW34stWe4Kw3fvzHHAVVrdXUU7sRbbwFftZxK:ZzLitZ4sUVLHHADrdX0NwFftZY","tlshash":"4f7308d2f686f5398bd794e511385103fa267a18b82cc170f32cce20219e687a177f6b","first_seen":"2025-12-29T08:53:29.749766Z","last_seen":"2026-01-08T06:36:03.307609Z","times_seen":709,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/1f43841470a7b1a5be381e40ac7af721.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/1f43841470a7b1a5be381e40ac7af721.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2559\r\nlast-modified: Wed, 08 Sep 2021 13:34:46 GMT\r\netag: \"6138bbf6-9ff\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YR9EC%2BHKT6AcRPz3lb5Kxzi0Gxp0hQ7D0U2lmOdciaEXgGEfckMBKjyv7473gDbsa82r0MqYEOBnMqyV%2FK%2Bjjvg4pH6a6r1gHypE9Ld1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb93783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"a6f6dbbfa8b81a764b530d6af26df859","sha1":"15e3d707247c6a2249d4fc5fde0eca9a9542ab67","sha256":"180ab392ff5f9fa71c27be78a9c7c92f16bf7973dac0cc9299f46471d5b41fef","sha512":"8a9e7e993104e721eee6c38139e68b16ccd14507fdec65b88f4f7b91674ef7d1b2cd6bcc7ee671af650219e56cff1d5be56c12aeccb68797112953996792fcf2","ssdeep":"","tlshash":"ca515dc68853f4b8ddb850231417b8ceee380c112839568d5080727f707d75416777f6","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.873188Z","times_seen":47,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/static/index/css/style.css?v=1.1.1.7","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /static/index/css/style.css?v=1.1.1.7 HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Oct 2021 08:16:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"615eacf6-734a\"\r\nexpires: Sat, 03 Jan 2026 20:52:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aU9T%2BjBRhYznXMwF9vIsdXZR2gkDAUgpVak5HfCGqOt73opDM8PN77VTi5HiesOZe0I8vCiVm%2BMygBXXHXrpj27mby0qGBosjdYEQ857eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b814234cb74783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29514,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d48eaf24508362effad05eb8e304bd6b","sha1":"340d71ede966246ce4d719eab35adfa590489551","sha256":"c73e7967f1d530814c5c6b41aeaf3010d39b1f8c3e4c761adb4707b9c47cd01a","sha512":"992c36a43c257b889f38a42352bead52a2bb51aacb34194f449fcc0b13e0124fb9aba308b2168c093054abc38cafa8969dda6dd0ef634c1686b5e981afcd98f3","ssdeep":"384:hPCsDA4FwstYXXCoBpClAuQTTo5GEn8VDyRVwslfFofEw/UYysGH47V+7dbS:hPCsAstYXXCoBpCWbOg","tlshash":"82d2657df649184e7313e8b5ebbc5771ee7c40939a0f46b5b9a07219c342c592872ac3","first_seen":"2023-12-15T10:23:13Z","last_seen":"2026-01-04T19:45:18.055475Z","times_seen":7,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20220609/b7781cd9cb345c6a3d7df288c00c3db6.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20220609/b7781cd9cb345c6a3d7df288c00c3db6.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2767\r\nlast-modified: Wed, 08 Jun 2022 18:26:18 GMT\r\netag: \"62a0e9ca-acf\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I30vFKzY8wl29r8JG1cuqTpdwIXLdYH4A%2FhiVi%2FX%2Brlb0e6IUgrtvT%2F1w4FNnGjOLExrP3nGvUwOo%2BD0rzeyqVkOyiVBPDAC5gajtH%2FCiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234eb89783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"8dd754e0b98957bda08fe509e6d6f395","sha1":"9caf676af0c242cff50f8576fe505b5f44036572","sha256":"a614ba41549b00dc15b03e0d0515c560bb1c8220fdff076347c1744376b65657","sha512":"3d8b6b2ba69b85dc3cfb7e26bf3b0d1edeb73e59887d8a0b552b8e1e9b4a808c8b6a996a53d52367451a5ce34c2187cdcc38bb015d5b439be13f7226c2fddf75","ssdeep":"","tlshash":"1a516c53f98faea7b21f9ea32f74244b9e0417c4909b400c1244f0a6caffc30285c928","first_seen":"2025-05-26T15:15:56.475747Z","last_seen":"2026-03-26T00:30:53.883328Z","times_seen":26,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20210908/1daa415d3161b100b21eda14d61a99cc.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20210908/1daa415d3161b100b21eda14d61a99cc.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 14216\r\nlast-modified: Wed, 08 Sep 2021 13:28:56 GMT\r\netag: \"6138ba98-3788\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TD5gPFu2KN2HQaQMV2jiMTHWbFjbl6C%2BJKn4CZODbXgv9Q6khwwNI%2B1%2B8df7uq5YwcrdoJST%2BkfFCQ2yuBV%2FH3spke01T%2Fk7eCDTHcEF2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb8f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"39f7b58012edd7f003da1056cf2dc725","sha1":"c44d086f0b415930146f8bdf3483121b1248f739","sha256":"799db04a5d13f456cf8e146818025e8afb4e457d2f225ab69f5593efede4f2fc","sha512":"2d2e010a00cdd1a45bcace62ff8f1d52398ef210bbb7d76f12b2cead465d42d2ac749c29dea69f73128760e0649c62d31ea3f6e97496d85c2e2b46674907f956","ssdeep":"192:AlZ5KKIOKfs8xgjWQRyVqHc5TAYA02gvH3j4oqduETvLQm+rJTDixLvrMLaiFdR8:wlK3gbHc5T1Argf3j4FwEv+4tvguZ","tlshash":"8a52d1cf6adfee009b6d4076d4386509c7bee0db6067663c4405c8413fe146fda5546d","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-14T06:55:27.859568Z","times_seen":44,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upbytetrade.com/upload/20251115/a6b6f6b2123d89b3e6ff04e4f8b95a77.png","fqdn":"upbytetrade.com","domain":"upbytetrade.com","tld":"com"},"ip":{"addr":"104.21.68.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:11.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upbytetrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:05:09 GMT","end":"Sun, 08 Feb 2026 14:03:33 GMT"},"fingerprint":{"sha1":"F3:4C:7B:A8:2F:AF:A7:03:09:3A:95:B6:F6:2A:CC:76:CD:51:85:1F","sha256":"26:A2:CF:52:69:BB:40:9C:CC:45:5F:51:B7:19:41:1D:8A:98:C1:C8:F8:51:34:14:DC:D1:15:BF:1D:49:B0:AE"}}},"request":{"raw":"GET /upload/20251115/a6b6f6b2123d89b3e6ff04e4f8b95a77.png HTTP/1.1\r\nHost: upbytetrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nCookie: lang=en-us; PHPSESSID=05c3558cdb9629c7e25548755babc3de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 764\r\nlast-modified: Sat, 15 Nov 2025 06:00:19 GMT\r\netag: \"691816f3-2fc\"\r\nexpires: Mon, 02 Feb 2026 08:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Dolny%2FTCjLbHcfqd4fRR%2BeVca8Dp6BqbH2MsdFSYdyKhLmy4KOlMgjyUnije8yEzCwVd3zZ5Sc5Dhg9qqAjg5KTHdTh7ih9K3khOxxF5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b814234fb97783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"3f7868ff2c147e93822fe2a4705eadf5","sha1":"fd7fb1c66a103b470344fa9bbf4353a5a3914f92","sha256":"6fc697cd7dd11502480526e5fe0973a1622287bdb45b408012360847db5da926","sha512":"1ab16000340ea09a976a818020ae3e043be87161456f7ce163aa66be521e2edef1d146de2de05cdfe081abdab6d88ee1593d6321bd52abfc61d2e4a62ca34278","ssdeep":"","tlshash":"9a012067a20d2ab849d59ab9062809a3e25221b420d0428801858e3e1ea7bc0dce6be2","first_seen":"2025-10-29T02:15:11.58289Z","last_seen":"2026-01-03T08:52:45.255304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"upbytetrade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:12.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxO-vs1PmZrnlg9exw67BcC-3LKwcY83SiDVyhtmom1WEasd0OfvFnePHty3drp8Itt3nSlIbSQ\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\nx-goog-generation: 1766997546887290\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 98305\r\nx-goog-hash: crc32c=IFcucw==, md5=pqijy6DuFgRxKLJ8WdRfGw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 31814\r\ncache-control: public, max-age=28800\r\nexpires: Sat, 03 Jan 2026 16:52:12 GMT\r\ndate: Sat, 03 Jan 2026 08:52:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":98305,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"a6a8a3cba0ee16047128b27c59d45f1b","sha1":"ff988f9aa3c7b1b4cd2f33a669e78310232bd714","sha256":"5cedce66a8bcbdd119c1bb8c4e1e1626ed66951d9b54df41a341d021798e4a11","sha512":"8fcabb203b46d27ebb89171bb0ce45f3675530f64ab2b9e88b7063b8adfc3280bae777fe204e36264e2a17e3449d2424768c9f9791d835e7eb1827583c7ec29d","ssdeep":"1536:EnC9o5ri/D+ofycilweyO2PHbxaK4wpe3UHdjmdy0mUF:EC9o5u/Cr9yO4bxbRp0L","tlshash":"eea339d67282b03493f785e7a07f6312b23a6918740d8420f17ced6a395a987c177f6e","first_seen":"2025-12-29T08:53:29.765227Z","last_seen":"2026-01-08T06:36:03.164768Z","times_seen":801,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":51,"dns":33,"connect":1,"send":0,"wait":2,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:13.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 758\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"7208aef444d46d1ef46e9432ce02f7c2","sha1":"276890b0854befa7a9051dd82465916026113ddc","sha256":"a6077388afebd60731c48645080789146ece45ebf509a304462b7695a3c88721","sha512":"1b5765951fa642ad816eda8e6d032aa619d5a2863553de1faebb24ed6cfc396afb2b3fd2e9c493326e20bdcc4ac5eae6852270524ccbac023cec87fbc3ad963f","ssdeep":"","tlshash":"25314177aa00c91d71748221b99bb08e895d534e8644acf2b29412fe0ee0ed58173e29","first_seen":"2025-12-29T08:53:29.761452Z","last_seen":"2026-01-08T06:36:03.14632Z","times_seen":704,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.files-text.com/api/accounts/avatars/c19ff4c3-2b65-4b65-9f90-9b690f05e5ad/08348e7e-67d0-4cb8-a679-ea792add8678/d20f8af8-ec8f-4eb4-9d7d-77ad0f6d854e.jpeg","fqdn":"cdn.files-text.com","domain":"files-text.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upbytetrade.com/","date":"2026-01-03T08:52:19.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/accounts/avatars/c19ff4c3-2b65-4b65-9f90-9b690f05e5ad/08348e7e-67d0-4cb8-a679-ea792add8678/d20f8af8-ec8f-4eb4-9d7d-77ad0f6d854e.jpeg HTTP/1.1\r\nHost: cdn.files-text.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upbytetrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 4226\r\ncontent-type: image/jpeg\r\ndate: Sat, 03 Jan 2026 08:52:19 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4226,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 180x180, components 3","md5":"064c0b57b78afccb84ba2bce638fcad6","sha1":"76785c9b88595e3b697f9aacc6e96c46edc282f8","sha256":"ba826bddec60245de6312f40963a468d294e7051509a741fdb185744424b5b8b","sha512":"c671806e9b4e50441e87ec8f2eef68cf0db76a4ef3dac9dec4f13634dd2deb835d19f0d5b7942329df604114db06fb6bf8fe8eb5d95f9b32c114364133522eb7","ssdeep":"96:ohiYETEXWbExjq0KPYjKGozzzXRTFdykcgTYZhqW:OBomODQlojVFdy3FhqW","tlshash":"ae913a4bca142392df16c2f939071ee2910e975cbcd327bb7a320ee99804c766c4a274","first_seen":"2025-11-20T05:57:11.803175Z","last_seen":"2026-01-03T08:52:45.25796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":202,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/12.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxORwAlYnxzDEzKPBJNQCsUvBPSycupbDx0YdF5Y9Qfya-t7LQYwU3AGxlj8PZuAfW4TePxjgEg\r\nlast-modified: Mon, 29 Dec 2025 08:39:06 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1766997546756957\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 03 Jan 2027 08:52:13 GMT\r\ndate: Sat, 03 Jan 2026 08:52:13 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-08-04T17:33:10.206718Z","times_seen":29138,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.livechatinc.com/v3.6/customer/rtm/ws?organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19396999\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-01-03T08:52:13.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/rtm/ws?organization_id=c19ff4c3-2b65-4b65-9f90-9b690f05e5ad\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://secure.livechatinc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DI0mNCR64vAQGJDPDbsO+g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nsec-websocket-accept: EznqYElbWjrhfhBDNY5jXniNoZQ=\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://secure.livechatinc.com\r\nDate: Sat, 03 Jan 2026 08:52:13 GMT\r\nUpgrade: websocket\r\nConnection: Upgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T11:07:12.655044Z","times_seen":17760269,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":144,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}