{"report_id":"cc641826-fa26-4488-bde1-192322dde425","version":0,"status":"done","tags":[],"date":"2026-10-14T20:34:35Z","url":{"schema":"http","addr":"nearextrades.com/","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":0,"asn":53667,"as":"FranTech Solutions","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nearextrades.com/","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"title":"nearextrades.com","dom":{"size":126959,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (50248)","md5":"876e984aa829955f7667f101585dd8ef","sha1":"d3b29ded22777523f8d9ea625b770a602a20c712","sha256":"72e02d8688ef9c0c582a8036fdd272c875f6fbee2f2332ef68ac46eaf43b1848","sha512":"d3118dd9f47739fbe6f03b00a1f0742c51b49c9f915cbad34aa94d1c9642466bd89675b062d46074bc9de0f1f2a364899be62cdb357fa33402bce0531fe157bc","ssdeep":"1536:b4DiBW12Sgl/cccA+Mkbe8MuuuaG3v4838jGgbtfi:w4ag5cfH5Hz/1aj9i","tlshash":"27c3f77486f402be058793d9eb325b682f8d906be8928614b2bc4fd45fd3cc1dd1b899","dom_hash":"domhash59fc158c8626f41d3ae5f28eb2d0f36e","first_seen":"2026-10-14T20:35:03.121467Z","last_seen":"2026-10-14T20:35:03.121467Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nearextrades.com/","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":0,"asn":53667,"as":"FranTech Solutions","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-18T20:34:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nearextrades.com","ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":32,"request_count":32,"received_data":2329994,"sent_data":18061,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"CreateJS","description":"CreateJS is a suite of modular libraries and tools which work together or independently to enable interactive content on open web technologies via HTML5.","website":"https://code.createjs.com","common_platform_enumeration":"","icon":"CreateJS.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":6,"received_data":143558,"sent_data":3332,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":10744,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-11T23:38:49.428366Z","alert_count":0,"request_count":1,"received_data":32010,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.createjs.com","ip":{"addr":"23.36.76.162","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2011-03-20","domain_rank":16334,"first_seen":"2013-05-10T18:25:58Z","last_seen":"2026-10-11T02:16:56.79322Z","alert_count":0,"request_count":1,"received_data":190894,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nearextrades.com/","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6a21804e8ec44ead4900896099528e8","sha1":"3ccefad10cf0c1b024c75c6606225796ec0a6967","sha256":"922e81d60591926f88a7eebf5bb442393a68ade3de7d548bbc53d2b989d8c0c4","sha512":"5bf44af272c9fa9bb669128bcd5bf7090257c5132812693050a9241a089c0308c74aaa7000829756af65d4be3a3727ce2f855b54a59448e147adfee04d90a374","ssdeep":"24:NhZRRR+hXccAYeda0jYjVH0n00hLmKk07CmbIy0LmQSvQWRRwztLVymm+/UbeNTq:NnZc+tVfPdIaQWmpE6U+TDiecvG0wOJ","tlshash":"8d913909e99a12116173b1382feb6318aeb46437a804ca807c7c59c55fbd8b167a7f91","size":4263,"data":"","first_seen":"2026-10-14T20:35:03.205569Z","last_seen":"2026-10-14T20:35:03.205569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/js/app.js","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1895ea244d126e89e43f651594e9cd5e","sha1":"8b6472d42eb722742ebcf0b3e8a9237c78d8524e","sha256":"3080edfd181c84e9a02b4b7c3de1445ff5e8c4d855500deb776b6615dc2a138f","sha512":"5ac01abe17a1852dc4b4647d7db14a7b8f28202dfb55a6399de34a2715ca44bf724eafb238e608530efb9046d4bc0f37897e98494bbae73556b96468a6613218","ssdeep":"6144:swZ7L5KmRGkinigRlVb/Vc4Pf2Kh8T9wR5efIhboFTGI5PGbq82tQtv2yHjakune:Rn5KmRG1i2lVb/VEtnkVNdSL0LzL","tlshash":"0ac43bce7381746142eb71a5416f520bb3376859b8098058b079d8da7d78e8d22bffbc","size":567992,"data":"","first_seen":"2023-03-25T22:30:05Z","last_seen":"2026-10-14T20:35:03.149551Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.createjs.com/createjs-2015.11.26.min.js","fqdn":"code.createjs.com","domain":"createjs.com","tld":"com"},"ip":{"addr":"23.36.76.162","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"54e1c3722102182bb133912ad4442e19","sha1":"38f36c6ec32fd81b36696bde36649898fb851446","sha256":"575c82f23dbb9285df2f62c7c8121c65d89e8137713110a149067d695975215e","sha512":"5afa24219577ef6f86c583f513efddccc8c9613dd3285d6d0b44177863b7f41f8100196a8012677e3ef1c4c18cf79d4df898d79397e796b51ca6f7c693640dc2","ssdeep":"1536:H4fYm38CwnLjOv+pWKE554MPTCBNmCuyE2aSXK53ptxBjESleWmePKeMcZ6i7VOb:sf1tMM2BNmBXtxBjESlF0d","tlshash":"6814d8ca7361a4519192e0a661bf0607a27b648a6808c97e752cddcdbd7cc9d303ff78","size":190630,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-10-14T20:35:03.195807Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/indexAnimate.js","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79f99e233604675c5458747b581be899","sha1":"c8adf5a18f6ff069b212f6165b7bc72120246829","sha256":"140d7ee0f001cd48f774e15d62cad99131e8e49836e1a46276027d815a560a76","sha512":"54a924640c3097d14ed29762c0a3439c9bac0ce2adc93d10ca042a2708a2d0d45b35d5cf44f6ac29199fd9de9b9a1017d678ce54cb9de01a217cdbd90cad656e","ssdeep":"3072:oLw8lmtmZBPWomX63RvmVCTMkLgHKtClL+khhB7ogxX3:oFvVe6BvmVCTMkLgHKtClLzhB7oeX3","tlshash":"6cc47b61b754c05faeb5216bd68c59721f6ebd3372114f8d3c1a02f90aa14af74bc2b2","size":583005,"data":"","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-10-14T20:35:03.124571Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/js/jquery.min.js","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b6ecf17e30037994d3ffee51b525914","sha1":"d09d3a99ed25d0f1fbe6856de9e14ffd33557256","sha256":"f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729","sha512":"468c0f964014d76ec5966f5589b2ccc0a7b5f3e8a785134897dfa282a3e6824ce9a75584c9404b77a6962fef99547356aabe8aa71a6499e2568b9de792d90579","ssdeep":"1536:bYUfBybwh3KRI83RExoulFXo7CkSsz/G0bSVze/3260eMSTC5bqYKKhwFvxizJSM:XIi3kIP9kSsgo/ZvxYrtPTKCNtHyUtCg","tlshash":"c893e7e972d6716387b730a850af510bb13698e6b80c8c60f058d9e47e74e4960bbf7d","size":93435,"data":"","first_seen":"2023-03-07T01:12:05Z","last_seen":"2026-10-15T10:32:21.336903Z","times_seen":11083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"GSAP target [object Object] not found. https://greensock.com","filename":"https://nearextrades.com/assets/js/app.js","line_number":1,"column_number":3154},{"level":"warn","text":"GSAP target [object Object] not found. https://greensock.com","filename":"https://nearextrades.com/assets/js/app.js","line_number":1,"column_number":3154},{"level":"warn","text":"20:21:40:892(ScrollMagic.Scene) -\u003e(animation.gsap)-\u003eWARNING: tween was overwritten by another. To learn how to avoid this issue see here: https://github.com/janpaepke/ScrollMagic/wiki/WARNING:-tween-was-overwritten-by-another","filename":"https://nearextrades.com/assets/js/app.js","line_number":1,"column_number":311854}]},"http":[{"url":{"schema":"https","addr":"nearextrades.com/indexAnimate.js","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.921Z","timestamp":1792009294921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /indexAnimate.js HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 09 Jun 2021 22:01:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 76301\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":583013,"size_decoded":76559,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4086)","md5":"79f99e233604675c5458747b581be899","sha1":"c8adf5a18f6ff069b212f6165b7bc72120246829","sha256":"140d7ee0f001cd48f774e15d62cad99131e8e49836e1a46276027d815a560a76","sha512":"54a924640c3097d14ed29762c0a3439c9bac0ce2adc93d10ca042a2708a2d0d45b35d5cf44f6ac29199fd9de9b9a1017d678ce54cb9de01a217cdbd90cad656e","ssdeep":"3072:oLw8lmtmZBPWomX63RvmVCTMkLgHKtClL+khhB7ogxX3:oFvVe6BvmVCTMkLgHKtClLzhB7oeX3","tlshash":"6cc47b61b754c05faeb5216bd68c59721f6ebd3372114f8d3c1a02f90aa14af74bc2b2","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-10-14T20:35:03.124571Z","times_seen":238,"resource_available":true,"data":null}},"time_used":3497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":2895,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/logo/logo.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.933Z","timestamp":1792009294933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/logo/logo.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Nov 2024 21:13:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3785\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3785,"size_decoded":4070,"mime_type":"image/png","magic":"PNG image data, 230 x 60, 8-bit/color RGBA, non-interlaced","md5":"794b4302575df83e3ccc095ec4de5638","sha1":"7a9340f4c1d57921623785135cad8635afbe09b2","sha256":"bc6a2a4ea7ffc275801c8a2fd8b2217c3ad5745df54242e6f2f1c4d293a8af84","sha512":"8dafc876778f8ff89ab596a3004f6f848b5c74bb6d53432024376dcee3f2cf7c3bd2b2bb63e79b6d9b0144ee6461b2f6715d2b22384c55c894b3fd486f4d5ec7","ssdeep":"","tlshash":"0b716ce2178516a3858d91bb55626851af46c736abce04c0fe7e2d8a7043e080c677c9","first_seen":"2026-10-14T20:35:03.125566Z","last_seen":"2026-10-14T20:35:03.125566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/funds/1.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.940Z","timestamp":1792009294940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/funds/1.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4547\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4547,"size_decoded":4832,"mime_type":"image/png","magic":"PNG image data, 258 x 192, 8-bit colormap, non-interlaced","md5":"562ff539510c580321426f6532d24e61","sha1":"bccae524b8e8aeda15fc487e2fffc968c8f57abd","sha256":"a3eff76292ec942c9f8bdf964a080dc860e84a91d68699f92d03a160bb6104a6","sha512":"88b1f051a1c06b931aede7b36804baf141aa9a62e4f9d79b59d4e6bf462d195608f249b2630d5738764d7fbc0e36d7f68b42640f832165aae9fc7ac75cc579e6","ssdeep":"96:+M00+UQfblZdDePIZwlqGSR+aurm8r6B1u5xGD12BjA+eW5HgD/jovR:+D0oZhwzSR+PrmnBs5UDejLeeHr5","tlshash":"25918ed8c50211c2dd3beff4ac8cc6a1230e7957ed679d5307175c405cace66e4513a8","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.12731Z","times_seen":285,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/investment/notebook.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.953Z","timestamp":1792009294953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/investment/notebook.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4938\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4938,"size_decoded":5223,"mime_type":"image/png","magic":"PNG image data, 781 x 455, 8-bit colormap, non-interlaced","md5":"497d4f2b7616990a18ea385c7ec43988","sha1":"f8d42e3fb99e2765aaff3f835d01f3c00848ebad","sha256":"f72c1bd8b5e68e603cf32a93e0f7f135dc183f03ffb03377bd77508aaa8816ef","sha512":"88618bc261bca0218bf78ecb72de5fd41bb140ae87cbd7b0fbb64268715a01a6ec77608c0ab2310cc8b316d85d734b2b682ede85e686b0af5cf1dc85ef5a0962","ssdeep":"96:Ov61ltFMMMEErynrxALN3R6YHfETyLKFK+xAPvWqMQsS:A61l0M3I0rMh/wyn+OPe/ZS","tlshash":"3fa18fcd677fab35deb64f4160d442a7999c46219100eb6713e62fe5c4b783119fc4a0","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.128256Z","times_seen":256,"resource_available":false,"data":null}},"time_used":21851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9123,"receive":12728,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/logo/slogan-bg.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.822Z","timestamp":1792009296822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/logo/slogan-bg.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2488\r\ndate: Wed, 14 Oct 2026 20:21:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2488,"size_decoded":2773,"mime_type":"image/png","magic":"PNG image data, 285 x 66, 8-bit colormap, non-interlaced","md5":"156a7bad7f67926d7dac3cf24ecbc0aa","sha1":"bbf590f81333d5df8d33c1ae1c9a78b74af65662","sha256":"92d9a45f530f1401ed84926d12d6f33d442a3efcffea91f7532019b5c3020e60","sha512":"fe9d67c84a7d322815ab9880cd0faec8b2b30a6fb7568097f19e59b5dfc0048a728ba383a6bdfcf8eadad78cc69c306af0c6a7de80b10ec909dac69c0879bf7e","ssdeep":"","tlshash":"88514aad551c7c1a8517fa37726b40d18cb669909ff7c6c3204cf4868b186acbaacb58","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.129468Z","times_seen":268,"resource_available":false,"data":null}},"time_used":3569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2717,"receive":852,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/funds/2.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.945Z","timestamp":1792009294945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/funds/2.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7631\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7631,"size_decoded":7916,"mime_type":"image/png","magic":"PNG image data, 258 x 217, 8-bit colormap, non-interlaced","md5":"4428427e9fdb3e44500a1edebf0f68d9","sha1":"ac8232a37aed6ec415309539e1446368fa1eeb39","sha256":"6ce9df0b8ea8c9a1e15d61fbddf1c36fd2ab8b655be29e1caa70b6cf2b23e697","sha512":"d4dc9dff5898aac7eea692f445e59d1f8ea3a9184cd9d636c8d9ddc98c4e21d2e3117dfad300ed8dcf905f17d6cd5a198ba19ce10f2ad69c29a563a8f3c178ac","ssdeep":"192:UkvkUmjcJwAXn08E/D/sPtVL29ooBL0P79AM:Zv8HAX0b7/skooBwD9AM","tlshash":"59f1aef01f06089ef8fd8d140686e973de36744f902e8a575faa3a4378f1170ab8c159","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.13146Z","times_seen":283,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/icons/star.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.956Z","timestamp":1792009294956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/icons/star.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 491\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":491,"size_decoded":775,"mime_type":"image/png","magic":"PNG image data, 21 x 20, 8-bit colormap, non-interlaced","md5":"a0e1aac6987f9a0b48fbd692c8f6d7a5","sha1":"181ada06e84162313149f51aff0e969a013a9804","sha256":"63bc2f8cfd02d879bb10e481af3a8b8911316b48d7042b7b74eed4124cbd9cce","sha512":"e0934cfa1ecb942be368e2f02ed5f0e64149f6b82d8dbc5b17cff9cb9dabef1d72502e7ea8a04961b31482d836f0ff10bee06c1d6ede0b5e47fe6331c205c81e","ssdeep":"","tlshash":"80f08af331103919c5bdc2320e26041c4c3113575c935e43c40387387574004c37d7d1","first_seen":"2025-10-20T04:05:52.205307Z","last_seen":"2026-10-14T20:35:03.13235Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9120,"receive":14510,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/cross-line.svg","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.959Z","timestamp":1792009294959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/cross-line.svg HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Oct 2021 22:49:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 264\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":530,"size_decoded":597,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c84b8126c1f17c0ba261b99c7fe84618","sha1":"e5f56290804dd219092c0d1fa605f2c1abe9b856","sha256":"a589274308bad146e1d77555edd9a7203ca4e8ddae9224c8ccd857d2cdadebb3","sha512":"ddfe2cd4c5d0cdae7992487f7b3fef71bae20d73b2354c147da2e1c1a6ebd49845724f8e9a0f9305fb09542bde186aa5b445e5df6ad90415c6379e403c40eee8","ssdeep":"","tlshash":"bef059dc431a2428f00f4d244e2e78e59297a7a77ccc02a444d211beecc4197f6e0d1b","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.146193Z","times_seen":261,"resource_available":false,"data":null}},"time_used":23626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9116,"receive":14510,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/icons/sprite.svg","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:40.488Z","timestamp":1792009300488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/icons/sprite.svg HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Oct 2021 22:49:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18641\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50209,"size_decoded":18976,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82cd27193a7004498a22c5481045d17e","sha1":"153e87dd1e5eefee4d546452d6e66a001a6e27c0","sha256":"e76d2ca9da28e340036f24f8406a389fa31c9ca94bdcad9dd7d88b8108953b6f","sha512":"2412bf9df01ed4b002748dd20e14e9c94e3673055baf16cd4807ce57a2111b7e07ffd29c95770a04d15a5301d8a06df0da11b4cd50936e6d1746a419ee2b1aaf","ssdeep":"768:e4YMizv9WA41JawNsJSVLWlXvRW6bcrlALTw/tjAFJvThsbc7PivK/uy:e4DiBW12Sgl/cccA+Mkbe8Muy","tlshash":"3a33a6e8d77843fc5c8a87fe9b3264a4365e50be75e1c628857d8ee062c34d8e55acc0","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.147908Z","times_seen":270,"resource_available":false,"data":null}},"time_used":4979,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3586,"receive":1393,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/js/jquery.min.js","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.911Z","timestamp":1792009294911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 25 Sep 2021 22:43:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32364\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93435,"size_decoded":32622,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65480)","md5":"0b6ecf17e30037994d3ffee51b525914","sha1":"d09d3a99ed25d0f1fbe6856de9e14ffd33557256","sha256":"f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729","sha512":"468c0f964014d76ec5966f5589b2ccc0a7b5f3e8a785134897dfa282a3e6824ce9a75584c9404b77a6962fef99547356aabe8aa71a6499e2568b9de792d90579","ssdeep":"1536:bYUfBybwh3KRI83RExoulFXo7CkSsz/G0bSVze/3260eMSTC5bqYKKhwFvxizJSM:XIi3kIP9kSsgo/ZvxYrtPTKCNtHyUtCg","tlshash":"c893e7e972d6716387b730a850af510bb13698e6b80c8c60f058d9e47e74e4960bbf7d","first_seen":"2023-03-07T01:12:05Z","last_seen":"2026-10-15T10:32:21.336903Z","times_seen":11083,"resource_available":true,"data":null}},"time_used":1817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":1206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/js/app.js","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.917Z","timestamp":1792009294917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/js/app.js HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 13 Oct 2021 22:50:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 169297\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":567992,"size_decoded":169556,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"1895ea244d126e89e43f651594e9cd5e","sha1":"8b6472d42eb722742ebcf0b3e8a9237c78d8524e","sha256":"3080edfd181c84e9a02b4b7c3de1445ff5e8c4d855500deb776b6615dc2a138f","sha512":"5ac01abe17a1852dc4b4647d7db14a7b8f28202dfb55a6399de34a2715ca44bf724eafb238e608530efb9046d4bc0f37897e98494bbae73556b96468a6613218","ssdeep":"6144:swZ7L5KmRGkinigRlVb/Vc4Pf2Kh8T9wR5efIhboFTGI5PGbq82tQtv2yHjakune:Rn5KmRG1i2lVb/VEtnkVNdSL0LzL","tlshash":"0ac43bce7381746142eb71a5416f520bb3376859b8098058b079d8da7d78e8d22bffbc","first_seen":"2023-03-25T22:30:05Z","last_seen":"2026-10-14T20:35:03.149551Z","times_seen":245,"resource_available":true,"data":null}},"time_used":5473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":4868,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/funds/3.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.948Z","timestamp":1792009294948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/funds/3.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6019\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6019,"size_decoded":6304,"mime_type":"image/png","magic":"PNG image data, 258 x 217, 8-bit colormap, non-interlaced","md5":"4dbc22849af350b597d33b52e2d8f769","sha1":"810a18eb78033e0642a64594897893547dedbe73","sha256":"ed1fd187e5f842730e1c71c7fac127ebf2df5b8274a272b89614f161f20131fa","sha512":"49f0936e216861be2437daff27fce6d963bc83468eeda52f2cf9b7d419fda5e0df7f70ff57588283b42c4a5cbb7a9d93861721619dc04acd0579a8321470225b","ssdeep":"96:0Mj13xF7dwgP7fuulFVr1TdDYPT6pF2U0FhlyYMQ19wU9+UEyKp6hDF:dJ726lfE+vj0QYFV+UEv6hR","tlshash":"dac19eb42b694eb7e15d11bb707a05c5ca623cd9a2e80c6fba41cf203ee364d517f290","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.152122Z","times_seen":284,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/steps/1.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.951Z","timestamp":1792009294951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/steps/1.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:50:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29774\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29774,"size_decoded":30060,"mime_type":"image/png","magic":"PNG image data, 600 x 233, 8-bit colormap, non-interlaced","md5":"7c7334408a7750bde8d6f5fab124d22d","sha1":"b7077633931d6fa0a512d982853029518db94e52","sha256":"d802ce8db43ae41e1e2cb5b9365b1f8586453a1bac39fe4d7204a8c8ffca518d","sha512":"3d5ada24ccdad8345558dcecf64e801ca2214bc015e1293c3c08c85ab1a86b174cc4183352d06b5d33b0e391478b9bf9c027cfaee7bf79d06fc65447ef5a3adb","ssdeep":"768:FEihiatJXkGoq2ld/eAPJTvVO+ffIfzey0:CXDldGAFVOYfMSn","tlshash":"99d2e1dae71ecb3b2ac8720eba2a7862a5cdb4574025d40343660973dc4d377e2d9c56","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.154101Z","times_seen":284,"resource_available":false,"data":null}},"time_used":20200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9125,"receive":11075,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/check-line.svg","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.958Z","timestamp":1792009294958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/check-line.svg HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Oct 2021 22:49:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 228\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":377,"size_decoded":561,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec3aabc7b899df83e302c6261cab4297","sha1":"a85d1fabe8227e113cd901399691206e4dc9d505","sha256":"c9687fe531edffc905520c7782d00fbbba55873f7194d42959dc1d384faebc82","sha512":"77ebd660596bb03bc2d0885a7fcefc3fd90cece774214b71b266fbeecdf90a5bdc29d799d82dacd79404c1f523a618ff21e36c944f8daede9184dbb0bc46e0c7","ssdeep":"","tlshash":"14e0c0d8472a854cf0c2c8965f71b839102f9ae333c755e48f409216f84cbf599b709c","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.155933Z","times_seen":262,"resource_available":false,"data":null}},"time_used":23628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9118,"receive":14510,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.859Z","timestamp":1792009296859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nearextrades.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:58:09 GMT\r\nexpires: Tue, 12 Oct 2027 15:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188607\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T13:22:16.87404Z","times_seen":50124,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":31,"connect":0,"send":0,"wait":125,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.861Z","timestamp":1792009296861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nearextrades.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:58:09 GMT\r\nexpires: Tue, 12 Oct 2027 15:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188607\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T13:22:16.87404Z","times_seen":50124,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":30,"connect":0,"send":0,"wait":104,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/favicon.ico","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:44.652Z","timestamp":1792009304652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:43 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 17 Aug 2022 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 451\r\ndate: Wed, 14 Oct 2026 20:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":783,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"b9e9cfccd15ebf492b4410f605037a10","sha1":"d866c1eb6918ac833f5ae69b8a3b6c9314968aa1","sha256":"fd0d560d08308290efaa44db399268fba4e8957d3927a6f189c665a9f5b8aa2c","sha512":"936fdc33e7e889830d3d2d11a536948e4a006147130954e9005f1950e28a55f1382fa0d713f353da397f2cdae30bd1980f7643e1624e9bbc7ed75c505241564a","ssdeep":"","tlshash":"f72199f0ba477e54fd324370d1d6bf02820ebc63900042cdb368bc5bb883458e923a89","first_seen":"2023-05-23T21:09:26Z","last_seen":"2026-10-14T20:35:03.160196Z","times_seen":207,"resource_available":false,"data":null}},"time_used":4803,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4426,"receive":377,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/spinner.svg","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.930Z","timestamp":1792009294930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/spinner.svg HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Oct 2021 22:49:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 227\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":398,"size_decoded":560,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c96699603943e28d51374ef9157176a1","sha1":"4c0ed8c18c5489163b9d6fc1e91179ad79fbef67","sha256":"6ed0c4b4fbde2f09a72837f7cef3fa19effe6af1d50a4d73946c71b36d7b7bf2","sha512":"ef8d7738420aef5be892ac46f359b8f454cbc10a1379f78292509fe0eddf0d2c669abb014aff156559fdc897f7842fde3f4a9c8388d7964665f17e3432b1a6c8","ssdeep":"","tlshash":"a4e0ab65d4944b0c1028d7a293f8481c223fb0a7e346008ae792212250098ee7b2470d","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.164749Z","times_seen":257,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;700;800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.551Z","timestamp":1792009296551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:43 GMT","end":"Fri, 11 Dec 2026 20:01:42 GMT"},"fingerprint":{"sha1":"A6:C0:81:49:02:5D:55:F8:AA:9D:F1:C6:9E:4A:41:81:F1:AB:0A:88","sha256":"80:F5:46:E0:B9:70:82:92:76:41:07:3D:0C:47:81:6B:0C:25:BA:5D:3C:80:F9:ED:61:2F:24:50:D3:99:78:A5"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;700;800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 14 Oct 2026 20:21:36 GMT\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10060,"size_decoded":1395,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d2699f858fe2202688ba56e98dc9db83","sha1":"7935d6656ba67c74c6c9ab02a0e384dbc141f9c5","sha256":"1de280579bc36326c1ebfc716e4eb7e9c662a1406e9f39856bd3adf38751a6dd","sha512":"48227a29b404263d3042b9a57c5aa8cd31fb1a9021dd9f7020415dcb2ffbcd5bacfb91137b3acda0ddb9f82f7d3c3492440b406219106586b5a1c1b641d5f5be","ssdeep":"192:4JorV3dd8OoJx2V3888DzJ+pV3nn84tJMPV3hh8aEJFqV3QQ8/s:K24I02zmQoH","tlshash":"a22277a0012be804ab471cd677ce7d399d4e6186708584b69bfe1c9cadebd32336075e","first_seen":"2026-10-07T08:39:47.937231Z","last_seen":"2026-10-14T20:35:03.167148Z","times_seen":9,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":42,"connect":39,"send":0,"wait":96,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/icons/sprite.svg","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.838Z","timestamp":1792009296838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/icons/sprite.svg HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Oct 2021 22:49:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18641\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50209,"size_decoded":18976,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82cd27193a7004498a22c5481045d17e","sha1":"153e87dd1e5eefee4d546452d6e66a001a6e27c0","sha256":"e76d2ca9da28e340036f24f8406a389fa31c9ca94bdcad9dd7d88b8108953b6f","sha512":"2412bf9df01ed4b002748dd20e14e9c94e3673055baf16cd4807ce57a2111b7e07ffd29c95770a04d15a5301d8a06df0da11b4cd50936e6d1746a419ee2b1aaf","ssdeep":"768:e4YMizv9WA41JawNsJSVLWlXvRW6bcrlALTw/tjAFJvThsbc7PivK/uy:e4DiBW12Sgl/cccA+Mkbe8Muy","tlshash":"3a33a6e8d77843fc5c8a87fe9b3264a4365e50be75e1c628857d8ee062c34d8e55acc0","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.147908Z","times_seen":270,"resource_available":false,"data":null}},"time_used":6208,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":4365,"receive":1842,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/decor.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.881Z","timestamp":1792009296881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/decor.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109200\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":109200,"size_decoded":109487,"mime_type":"image/png","magic":"PNG image data, 621 x 865, 8-bit colormap, non-interlaced","md5":"703d3c160a6110eb3c9ab430b1b99e31","sha1":"5bb7ca21ab0b48919523a7fb7a08c4abf3853a3e","sha256":"991d749ff2a480508e4f99c6d19305a40a45e1ab26f9a8306a6061cf9d140007","sha512":"3fcd46008126238a08d24635c1ea6ef766f355c095cada7f3c4aff8b526027a8a17e815dcf462471c291da7421d26e6123c4bab9472682ecc2b9e2b77ab7e4d5","ssdeep":"1536:tgWnc/KulGNziy3OtgSlwyqlpcARFTJCSD3eT5qPK+gtbU2sDtBPhnm4LildrAAK:tK92zV+lwyqD/FBDYqPKEtN5LCJAAE1V","tlshash":"55b312ebd9f516ca7dc0ce59d44a60e40b1c38ba67023cef0ce1125a5ada3d9284f797","first_seen":"2023-05-16T12:30:07Z","last_seen":"2026-10-14T20:35:03.17089Z","times_seen":157,"resource_available":false,"data":null}},"time_used":14793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4323,"receive":10470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/fonts/ProximaNova/ProximaNova-Bold.woff","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.898Z","timestamp":1792009296898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/fonts/ProximaNova/ProximaNova-Bold.woff HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:36 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 13 Oct 2021 22:49:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52068\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52068,"size_decoded":52354,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52068, version 2.3","md5":"e2cf3dc2f079bf3d5185a02552f153c4","sha1":"9e900ba7e0890a12a5697fc7ce86c058b145d215","sha256":"99a24fdd4e16d8dd4fdd79a5dd2dd7b71c2c68473fd6b3cb4eca4fa3f33d9ac1","sha512":"1043f0d116fcda17bd933ff2594b7c79a1fd41259f28aa8283d90e1a56eb6b8830861f109f9eeb3b81d79408e8a6a3648d973ee8a42fb5c096b0f84138392935","ssdeep":"768:gUZ1BWLCju+iIoHoWcknJh+7x77rai9YTRPxnE6eWPeLJWPznTdpjXeE8vFmdn:fX6Cjuct8QxDai9YLE6eWGYfbX98vMd","tlshash":"2433f1a524350e2797b7f4fa349d0665cfc6024db42b55faa4cbca019a5bff8b530823","first_seen":"2023-04-07T12:58:50Z","last_seen":"2026-10-15T03:41:57.210362Z","times_seen":25958,"resource_available":false,"data":null}},"time_used":5280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4306,"receive":974,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/company/cert.jpeg","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.949Z","timestamp":1792009294949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/company/cert.jpeg HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 17 Nov 2024 21:18:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 261412\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T13:25:33.985972Z","times_seen":19122735,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/fonts/ProximaNova/ProximaNova-Regular.woff","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.866Z","timestamp":1792009296866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/fonts/ProximaNova/ProximaNova-Regular.woff HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:35 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 13 Oct 2021 22:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52396\r\ndate: Wed, 14 Oct 2026 20:21:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52396,"size_decoded":52682,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52396, version 2.3","md5":"2d2ae2556b24a45ff8d5ed86b07b5783","sha1":"0822c310a60c575dc88a74a53df20b46c8c97bd4","sha256":"81c6d1a13227777d009f275f5ecb80bd6c780d2843b9b18fe2809ff9822a2066","sha512":"9e13478a6f5c9c7ee6442e09c7f1e2c6769fec20b40124739e19f8faa73686b069369707e12cac83e40d368f54b90b097a003ff781eced1d756789904c6a9a74","ssdeep":"1536:3vJ2FfsnhtDIj0vx8b8Fu8ZXZQ3TsbX98v2Dd:/9hG2Ui3XS3gbX9vd","tlshash":"f433022aa7d3cc9cc77b527a04dc3b8172530a9c4e7b64fb5824e65744ea62f1f0289d","first_seen":"2023-04-07T12:58:50Z","last_seen":"2026-10-14T20:35:03.17898Z","times_seen":1301,"resource_available":false,"data":null}},"time_used":3525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2674,"receive":851,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/investment/notebook-shadow.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.884Z","timestamp":1792009296884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/investment/notebook-shadow.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3329\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3329,"size_decoded":3614,"mime_type":"image/png","magic":"PNG image data, 1014 x 31, 8-bit colormap, non-interlaced","md5":"c527ed45584353c3c5b53fd6943049b9","sha1":"259606d0c8cb9fc0cd431d9ca1a99abe85463574","sha256":"4c4c044dddc599dbe4427a1dd8e4fef1d0a97dc8b55719f463f41054404203f0","sha512":"ab01af975dea546949f6d4216d4fdb78553b16482b2c63afe476050d6b7a151165e5e5a1ccf384603dec859342f3af5a3c7d9ab650869c76afc08793b751e82a","ssdeep":"","tlshash":"0a615b2365901f54d97335b93d31129866faecacd1fa881a0c03ee4e3091ac441b7361","first_seen":"2023-05-16T12:30:07Z","last_seen":"2026-10-14T20:35:03.180334Z","times_seen":250,"resource_available":false,"data":null}},"time_used":8585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4321,"receive":4264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/light1.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.887Z","timestamp":1792009296887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/light1.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35686\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35686,"size_decoded":35972,"mime_type":"image/png","magic":"PNG image data, 923 x 935, 4-bit colormap, non-interlaced","md5":"396805e17da85a6ebb16319608eb4175","sha1":"bc57986a68fc96139e31a05d9c99bdc4187b01eb","sha256":"84e4c31f3f105397e084146d0659875bff20fb02e8c49008ade52b446697580a","sha512":"11fe66ad064aa684cc26c8538cdcd2347d48ac51bdb357752092c62c1f8a6dc4498890e8beabafcb716d7bfa4e8f2c8a28cfe04671b72e5b9dcdb56a7aecae3e","ssdeep":"768:YPUTZmxl7E/ApLr322yIgFmz3DVzqWQq7QKOZdzKlUw6xSxBoS2:YPUTZ4l7pLy3Fm7DVXQ0OZe6xiBD2","tlshash":"5bf2f18f67df0e33945a477806046389e6bdd0393c533da2f3939ae611eb0439af5869","first_seen":"2023-05-16T12:30:07Z","last_seen":"2026-10-14T20:35:03.18156Z","times_seen":274,"resource_available":false,"data":null}},"time_used":9805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4318,"receive":5487,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/light2.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.888Z","timestamp":1792009296888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/light2.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50537\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50537,"size_decoded":50823,"mime_type":"image/png","magic":"PNG image data, 786 x 1023, 8-bit colormap, non-interlaced","md5":"bb0dad0f15f5b1d5f46c149c625dc688","sha1":"452697f998b497778ee5376c2f900be0db4df057","sha256":"4aa9fdb6f7054cd7f2bfca348d013a070c3b16cf6a7c9b5aecd03321e00078c2","sha512":"717b508e55af90ab753d09b966ebabb2403f9524311aa34d301e45ccf39466229b15b6a2101393b7f6d6850d215196447bb9edc7c55f1317a027d840d506c46a","ssdeep":"1536:NG4a+FFuuiaLKo8YA3D2WAVpzxb3E/Czz5ygH:b7FTiaLKo83CWAuQ5X","tlshash":"0433f2cf339d2a10f19479b3fef492a141b32e9d18378394a25778ac8a046df6572636","first_seen":"2023-05-16T12:30:07Z","last_seen":"2026-10-14T20:35:03.182595Z","times_seen":270,"resource_available":false,"data":null}},"time_used":13141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4317,"receive":8824,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.903Z","timestamp":1792009296903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nearextrades.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:07:56 GMT\r\nexpires: Tue, 12 Oct 2027 16:07:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188020\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":15313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-10-15T14:01:44.471973Z","times_seen":4323,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":51,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.915Z","timestamp":1792009294915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1809123\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfuCYLtxwL%2FAYB3o3bSrJf1MCs5q2nidV7J34T5sf4T75IVgAGqJCQg%2FRKwRfB438Bd5%2BP5GSjmC33LIeDukg3V956s%2ByoB6%2BbYIRKMyVTLfaWz1Zlsh6OiLP8%2ByfLz9hImUTHzd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4a94a8d59dc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5631\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":6641,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-10-15T13:23:14.807505Z","times_seen":323884,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":10,"connect":13,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.864Z","timestamp":1792009296864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nearextrades.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:58:09 GMT\r\nexpires: Tue, 12 Oct 2027 15:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188607\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T13:22:16.87404Z","times_seen":50124,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":27,"connect":0,"send":0,"wait":85,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/flag2.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.879Z","timestamp":1792009296879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/flag2.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106073\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106073,"size_decoded":106360,"mime_type":"image/png","magic":"PNG image data, 1191 x 1624, 8-bit colormap, non-interlaced","md5":"ceb1a52644b7a584d9b8d170899c94b0","sha1":"fcf5b15e1e87ee60fb24a01979b4e885bc46e0b9","sha256":"9e076fcab7f9ef001f9b923b9e6a53a792fa37273865b9ac954f63de806f1131","sha512":"d30c9264cfbdf28c857ef0cb899244103fb32e4155e8978abb96c826160fea668b4aac61607eec8e593e23f7cfbb2cd1aac39821fbf1ef5752ebfcaa0f77d696","ssdeep":"3072:/7rIB5LKu56KteNww54bL5zhcwYROkPYO:ABz56O8gL5F61d","tlshash":"83a3123e4986d4b36b6bfd0474ec18d2379b0dfac825602cd0bd564d738d4abed09988","first_seen":"2023-05-16T12:30:07Z","last_seen":"2026-10-14T20:35:03.186259Z","times_seen":252,"resource_available":false,"data":null}},"time_used":12200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4325,"receive":7875,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T20:21:31.491Z","timestamp":1792009291491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=82c19b6856500e4441f48336c8a1534c; path=/; domain=nearextrades.com; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7628\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Oct 2026 20:21:33 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"CameFrom","value":"deleted","quoted":false,"expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure"},{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c","quoted":false,"path":"/","domain":"nearextrades.com","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=82c19b6856500e4441f48336c8a1534c; path=/; domain=nearextrades.com; HttpOnly; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"CreateJS","description":"CreateJS is a suite of modular libraries and tools which work together or independently to enable interactive content on open web technologies via HTML5.","website":"https://code.createjs.com","common_platform_enumeration":"","icon":"CreateJS.svg","categories":["CDN"]}],"data":{"size":70913,"size_decoded":8176,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"984bb0823662b3b44eb20906d5a81680","sha1":"c529aab8a6757041b6ea056ecd55d3caa1bc727d","sha256":"b21c6759a832b42e53e89582d995ea2d132535844243a8006fb2bef464ee6dd6","sha512":"732b0a51dc05b883facf54ef4ceb3c5daf6784539efecfa9fa80285e84d16748967e926696407c3b64c731c424779f7e9b6ffc0098ef9a6f8807888196590d23","ssdeep":"384:LTOL1odaP3b4j3PsEwAMmRr2JYT4/DGyEEJ8Lu:LTLaP3b4j383mIs4/DGyEy8a","tlshash":"5263a62254f511370293a1c5bb615f2b2fd1d907c80b5a02b6fc4f999fe3d82dd2b1aa","first_seen":"2026-10-14T20:35:03.188034Z","last_seen":"2026-10-14T20:35:03.188034Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3143,"timings":{"blocked":-1,"dns":466,"connect":243,"send":0,"wait":1112,"receive":0,"ssl":1321},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/css/app.css","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.904Z","timestamp":1792009294904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/css/app.css HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Oct 2021 22:49:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35733\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":251603,"size_decoded":36063,"mime_type":"text/css","magic":"ASCII text, with very long lines (41724)","md5":"4ccf7f84eaea6cbb2996e56e1e3a3760","sha1":"7a6a6ca17c368befac186e9f4079521b0bda6895","sha256":"6ba50b3c4d301bc3a392196b51b8864b4d1682ccde8862bcd2b4a3320c097ae7","sha512":"c8e279cbcfee627a8f3d37251f8987ec63413ad79edec4c864857ec52c50f29decaac68c66cd67f6b8f2e878cc6ffd677d7e15cf3cecc1c7fd30acaa1bbaeeae","ssdeep":"6144:C63gyfi5olXk02h/q3SYiLENM6HN267j7dOnl1XuhTZh:CqWl1C","tlshash":"f7349473b991220ce027ce1593d07bbd5279c017e2132affe992ba25c7c67d605b264e","first_seen":"2025-03-17T10:02:39.871677Z","last_seen":"2026-10-14T20:35:03.193495Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":1021,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.createjs.com/createjs-2015.11.26.min.js","fqdn":"code.createjs.com","domain":"createjs.com","tld":"com"},"ip":{"addr":"23.36.76.162","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.919Z","timestamp":1792009294919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tls.adobe.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 19 Dec 2025 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EF:83:F6:91:8A:EF:74:74:D8:71:2F:CF:5D:D5:71:4D:73:F2:6A:C9","sha256":"9F:F3:6A:1D:58:08:98:EA:9E:34:98:3C:8E:7A:3E:50:20:F7:F9:92:C9:CF:31:35:20:38:D2:6F:5D:12:7D:44"}}},"request":{"raw":"GET /createjs-2015.11.26.min.js HTTP/1.1\r\nHost: code.createjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Apache\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=900\r\nexpires: Wed, 14 Oct 2026 20:36:34 GMT\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nx-n: S\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":190630,"size_decoded":49608,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32022)","md5":"54e1c3722102182bb133912ad4442e19","sha1":"38f36c6ec32fd81b36696bde36649898fb851446","sha256":"575c82f23dbb9285df2f62c7c8121c65d89e8137713110a149067d695975215e","sha512":"5afa24219577ef6f86c583f513efddccc8c9613dd3285d6d0b44177863b7f41f8100196a8012677e3ef1c4c18cf79d4df898d79397e796b51ca6f7c693640dc2","ssdeep":"1536:H4fYm38CwnLjOv+pWKE554MPTCBNmCuyE2aSXK53ptxBjESleWmePKeMcZ6i7VOb:sf1tMM2BNmBXtxBjESlF0d","tlshash":"6814d8ca7361a4519192e0a661bf0607a27b648a6808c97e752cddcdbd7cc9d303ff78","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-10-14T20:35:03.195807Z","times_seen":630,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":24,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/intro/robot.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.936Z","timestamp":1792009294936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/intro/robot.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 122539\r\ndate: Wed, 14 Oct 2026 20:21:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122539,"size_decoded":122826,"mime_type":"image/png","magic":"PNG image data, 534 x 683, 8-bit colormap, non-interlaced","md5":"92f6bebd998cdcd64189703d7f74596e","sha1":"b6d73cbecdd20c59f9a1ba749ff2c7b1a37609d0","sha256":"d8ec07205248151f8d0876f4f1592acf2e0f3bc6df442623396e1e22b825e463","sha512":"d5fc37c23d6127c2736470a9db9cb970753e1e589f496966df1002b72eb325c6723c78d481f7dee5aa046d1ffa7136d2466a498a0953cc70e830d697285f48f9","ssdeep":"3072:+g+F91e7Bz5KQWKqMotsGk3n6c8nwEjK8/AvG/5MSYy6djjN:miXlWKQtsFn6lG8IvGahySj5","tlshash":"6ec31280d603a6aa0ead8be3711d07dd614d71a3db18a15ede0fcdd4938d6ab54cc20b","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.20074Z","times_seen":287,"resource_available":false,"data":null}},"time_used":25745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":25159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/steps/2.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.952Z","timestamp":1792009294952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/steps/2.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Oct 2021 22:50:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23246\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23246,"size_decoded":23532,"mime_type":"image/png","magic":"PNG image data, 486 x 190, 8-bit colormap, non-interlaced","md5":"c4ee3bdcd7966a0985d18a48af069469","sha1":"e118f3741f983ee77a190b0eed2bd08b7d741400","sha256":"1a48f6c4d84091ed3fcef8a5e2f65354dbb1c1b6dc3ccdb13afd8ed0eb020bd4","sha512":"2c869710f549484bcdb3534a6d3d9d47696024286a0ee5f9066020af770eaeedcc602d766e91f8a2416057859171ea4c8ca528849215b2d13ad5ace9afe04245","ssdeep":"384:geCaqNXl22mJy1tr/rfaafqzAPMiIL2uCvO9AXtBAgT1Xi3v7Jo42ua:cVlh1pbfqzAELUOeXtBAgT5i3zJorZ","tlshash":"b2a2e0f74a152476222155f76bb00b5b4b7783ceadd500ae440f90fbd2aacd217a0bf9","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.202401Z","times_seen":284,"resource_available":false,"data":null}},"time_used":27507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9124,"receive":18383,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/intro/bremby.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.825Z","timestamp":1792009296825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/intro/bremby.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Nov 2024 21:55:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3785\r\ndate: Wed, 14 Oct 2026 20:21:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3785,"size_decoded":4070,"mime_type":"image/png","magic":"PNG image data, 230 x 60, 8-bit/color RGBA, non-interlaced","md5":"794b4302575df83e3ccc095ec4de5638","sha1":"7a9340f4c1d57921623785135cad8635afbe09b2","sha256":"bc6a2a4ea7ffc275801c8a2fd8b2217c3ad5745df54242e6f2f1c4d293a8af84","sha512":"8dafc876778f8ff89ab596a3004f6f848b5c74bb6d53432024376dcee3f2cf7c3bd2b2bb63e79b6d9b0144ee6461b2f6715d2b22384c55c894b3fd486f4d5ec7","ssdeep":"","tlshash":"0b716ce2178516a3858d91bb55626851af46c736abce04c0fe7e2d8a7043e080c677c9","first_seen":"2026-10-14T20:35:03.125566Z","last_seen":"2026-10-14T20:35:03.125566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2714,"receive":851,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.856Z","timestamp":1792009296856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nearextrades.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:58:09 GMT\r\nexpires: Tue, 12 Oct 2027 15:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188607\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T13:22:16.87404Z","times_seen":50124,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":43,"connect":75,"send":0,"wait":66,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/images/payments/payment.png","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:34.954Z","timestamp":1792009294954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/images/payments/payment.png HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Nov 2021 02:43:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31354\r\ndate: Wed, 14 Oct 2026 20:21:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31354,"size_decoded":31640,"mime_type":"image/png","magic":"PNG image data, 572 x 472, 8-bit/color RGBA, non-interlaced","md5":"e7e74180798a40edc45887a7b558ad7e","sha1":"e559b43ae2ceeeb254743c6c74b7bd2167d5ad1f","sha256":"a678b09ac6bb860198b42b8aa6bb4b295365daf56f6e10bb1a902a47d473b3f3","sha512":"714c8d01aa09896622b25691ab2ee456eb64fe9e970f0d74015000f7b4391e6e60289a71b14daf103398a2bc592f58e56429a18a417fe5b290ae24abaaef76e1","ssdeep":"768:J9kx2DIiqbLLYzQtxIiH7+0c7/BaLyri2ZIP6jdc:JmxMIxLLMMxIiH7ZsosCP6jdc","tlshash":"36e2d02868b13aa6cb64a4eb59c052b5c67ab4d3d514cb3d3de635f108851fe9a0a4c3","first_seen":"2023-05-16T12:30:06Z","last_seen":"2026-10-14T20:35:03.20393Z","times_seen":290,"resource_available":false,"data":null}},"time_used":23632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9122,"receive":14510,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearextrades.com/assets/icons/box.svg","fqdn":"nearextrades.com","domain":"nearextrades.com","tld":"com"},"ip":{"addr":"198.251.83.119","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.885Z","timestamp":1792009296885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"owealth-trades.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 12:53:58 GMT","end":"Thu, 24 Dec 2026 12:53:57 GMT"},"fingerprint":{"sha1":"68:4B:C6:0C:91:C9:6C:F0:11:8F:D7:70:CA:5E:DF:4D:4A:B0:54:F9","sha256":"ED:C0:29:99:BA:A9:43:2A:22:E8:65:86:17:C5:3A:7D:3A:00:31:A4:82:68:95:C4:96:CE:10:01:81:6C:4F:8C"}}},"request":{"raw":"GET /assets/icons/box.svg HTTP/1.1\r\nHost: nearextrades.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearextrades.com/assets/css/app.css\r\nCookie: PHPSESSID=82c19b6856500e4441f48336c8a1534c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"82c19b6856500e4441f48336c8a1534c"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 21 Oct 2026 20:21:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Oct 2021 22:49:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 335\r\ndate: Wed, 14 Oct 2026 20:21:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":577,"size_decoded":668,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e1800d7ce06ab8ad37757f015bf8c05","sha1":"cd23cb71080351e7ef1a80d276550add654ed26e","sha256":"e8123108cb4f9223e7f7a15e362fdd629ecfe4d8815b785f208ac9d2b142c766","sha512":"aa64e94b4fd9ff758927cca4b655a1c0c54a72da37355f2b27489143931cd5f6834518dee431961e242678eba2eb93362b4e41af388ff7b453e4f7baa0429704","ssdeep":"","tlshash":"c9f04cafc549649785b663f48c246051136c527f50f402b4a860db9d25258eaab056a4","first_seen":"2023-05-16T12:30:07Z","last_seen":"2026-10-14T20:35:03.20464Z","times_seen":245,"resource_available":false,"data":null}},"time_used":8583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4319,"receive":4264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nearextrades.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearextrades.com/","date":"2026-10-14T20:21:36.900Z","timestamp":1792009296900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nearextrades.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:58:09 GMT\r\nexpires: Tue, 12 Oct 2027 15:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188607\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T13:22:16.87404Z","times_seen":50124,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":141,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}