{"report_id":"d240600b-4069-4476-82ff-d3015f945656","version":0,"status":"done","tags":[],"date":"2026-06-17T17:49:39Z","url":{"schema":"http","addr":"tmgmforex.xyz","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"tmgmforex.xyz/","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"title":"TMGM Forex — Online Forex \u0026 CFD Trading","dom":{"size":58956,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58945), with no line terminators","md5":"26a72120879a25e00ec0bd6b9a60a1b6","sha1":"0b4c07952639b1526b67e49932e0be7463c7c3d8","sha256":"1d9beae4913d004d99077585f9ffcc0d7176be8aeba2c5cb85fdbec461af43af","sha512":"8cdb05ba80526aa45a9e5a17f1f082a4565329edde58d973251c3bb18b763999058d3141dff7c8e01c112bf94c8607da80bdab7463c22cad6d87b80695010476","ssdeep":"768:LID/x0rGV4xksc64Jysq7vfR8trVabzDAAP+D4vKEJZ/zq+3z:LIdebx/c64Jysq7vE0Nbq+D","tlshash":"e043d8106248063da92b87d8f7d5b33c906ae282d64b851db16d00b6a7c7ec67c73bd8","dom_hash":"domhashba21252b70eab5efc88b0f76dd867486","first_seen":"2026-06-17T17:49:43.182249Z","last_seen":"2026-06-17T17:49:43.182249Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tmgmforex.xyz","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T17:49:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"tmgmforex.xyz","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-06-15T12:29:09.214852Z","last_seen":"2026-06-15T12:29:09.214852Z","alert_count":24,"request_count":24,"received_data":977602,"sent_data":18174,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":6,"received_data":154790,"sent_data":3366,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":1,"received_data":22916,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/menu-DBLsq1q2.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a98a0e3c1a3e692ab55d74df229ec3","sha1":"8532166cb6a6915f80737aef44738f4523ec64d4","sha256":"326cb337431244c77a2e4a2e59a8a189df8171c209ff684882a52aa582cfe710","sha512":"c240d840c7706e9b790152ff17fee9aa74c2763f133877e2e6be420553d36cf97246cc8890e4fa390991e80ac9d2875bf1674f8da6d57ce5e4b3ac5285fa57d3","ssdeep":"","tlshash":"43d0121f1fd121b20604db8a07577054ccd501ec03ea4d557451f66bc32249369edf03","size":201,"data":"","first_seen":"2026-06-15T12:29:13.767354Z","last_seen":"2026-06-17T17:49:43.189879Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/SiteLayout-DNre8ySi.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c29b39f1c1a73c2f5fe9aa41f7d8c947","sha1":"833c1403eb59e31ddbc55b979e4d450ab13f7479","sha256":"090ef2ceac219c88569e98a9d0c12fd0a329b0b2638f94deb681f2d182ffadbc","sha512":"e9828924908e8294c6b8fb704518e624fa647c40f6b2ecaaa63a4cb96fab9229fb0c7398565643f206457dea68eeef831adaf5d936e4d804e42edcf4498e9375","ssdeep":"768:LK5Whqq4eYJ0NMUwX8dvuI26bCCVqx7eCbqKUhjYsOMu75MYCqDHS5Ko0jCQrmHv:pN6K5CbEiO5n0jCLDqbNtLM7HktYx/F","tlshash":"3653f84d7141bfbcae5609e8797fa01c712f1a98f01e88b0e07c5c642d69586fa23bdd","size":62733,"data":"","first_seen":"2026-06-15T12:29:13.783635Z","last_seen":"2026-06-17T17:49:43.224795Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/__l5e/events.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","size":44148,"data":"","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-08-02T04:12:59.952921Z","times_seen":2734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/clock-BXeDZ7hG.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd617b65040759c3141a88d4e6d549e9","sha1":"5563a27acad9d0a7f2f32bb440e645065a24a2f4","sha256":"739dc2a6283799a4698ad97dbf0a67f930154fb728e927c8e57a88faa7bd2922","sha512":"23c224a4f77af50cd4feafad9b4fd55a29a3ed660334199056887154989e03467be76910686e55289df4adcb7a50a91047035fb63724fd194d97516319491d71","ssdeep":"","tlshash":"dbc0802f99700d61050095551e16a069cdf5027617e1ce41e545cd174397d5374ddd52","size":176,"data":"","first_seen":"2026-06-15T12:29:13.776564Z","last_seen":"2026-06-17T17:49:43.202522Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/trending-up-Uy6hnAMm.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"041ce2067a97be342e5d3cedc8d19b87","sha1":"343b54b18f03ee39bae44e71d0be9297d3c026c0","sha256":"345ddd64ca72fc3f355b0f9ac899916fcf12ea7374f4cc4981667dd51a6f60aa","sha512":"3341e6228da35abe38abc38b301e2d860aefe4850172118f5eb0a2d4b9b3be6f00cb7ab98fc1988734ef9d29b0fdb1c37e217bdded3ba6ae300a0b9cfba4c3de","ssdeep":"","tlshash":"8fc0222f2b40a0b50910d45d420a7421c8f1186873e28c80f148062b8303093a4fef06","size":187,"data":"","first_seen":"2026-06-15T12:29:13.771137Z","last_seen":"2026-06-17T17:49:43.216139Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/chart-column-3thrUUgr.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"78499061b84b191de502443d30ed35d3","sha1":"12027d5a463ee20afe5dff889ee7307d414c08c9","sha256":"0ecfd63a5f0693d372f159c60d6a24077e479e1a342429e7f6dedcb1722069d2","sha512":"b761e84b8adaafb23b7bd2954a3d10b4dee8ee1f6d80e4224bc3e1fa260c1de154baab63decda05b491c7fc7eada8eb6bf80eeaa05cf3f6cf79b3f4fb9dba3ba","ssdeep":"","tlshash":"e2d05b5f5fc254f50924db4c5767b01149ec46fc27db0d41b40a8226c311453edabf01","size":263,"data":"","first_seen":"2026-06-15T12:29:13.808037Z","last_seen":"2026-06-17T17:49:43.195512Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/arrow-up-B4aowKJw.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"19f758ce06a32967b83ffb649d490dd3","sha1":"63fcbd6afbb1c813659e6c3a2204eab49d86cb69","sha256":"b245a6e897c6cff4419a830968533a097c06b93b345ec51cd35d99652110a989","sha512":"1a8e40c718727b07a36e6fab1e1a7f4df72f26f87a807644902c51f4070dd509614a8044e75280316242b81152059731738ffa3f148e59e7c52d0da74e88eeed","ssdeep":"192:u4gsgKV9G0380Ojr2dSTa1HsUQaYedaXzk4sEvRGEH6+6liDjoC819i70e:3FxV9Gf0OjZeAI4zk4tJGEa+6sDjT818","tlshash":"5712b79e7141532335e1c5d49c3a41289724b908342ec01cbdad9ee79663dcaf9bfa36","size":9375,"data":"","first_seen":"2026-06-15T12:29:13.807149Z","last_seen":"2026-06-17T17:49:43.226796Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/~flock.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-17T04:35:43.992077Z","times_seen":15659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/createLucideIcon-k35Gzduq.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b0006740c2c85c0f7c68b8258ee4810","sha1":"5fed3882ac648b34ee591a5dbac0a2fad166d53a","sha256":"ee6113062dc7bcd81b7d230f906375e9431df343bae45ac9b91db788cfa3471c","sha512":"911ccebda8f087453220632259c05258f06dae5b150993d785a0b48536074eb58ee74fcc9f6b97a7a23a6b2e4f77b5053bcb5d12922586ff0fdeb5c2e6027bb1","ssdeep":"","tlshash":"a5214108b3d4283ca23594cd96983069ec779a28f9635a58d2fc5d2a3623042a337acc","size":1202,"data":"","first_seen":"2026-06-15T12:29:13.801408Z","last_seen":"2026-06-17T17:49:43.213611Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/x-Dy7iApsZ.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"00888f620d7cdc913725776d9300e658","sha1":"efb88b66462c3b32a4247307aa2eb4c9365e359f","sha256":"175ad031f49765883cb3008da784317e51effa25265af7d0c15a7388339e04f9","sha512":"b5be55dd3541f16bafc226cee68c06675184d9cbf192fb6221e05aef9fdca87fa18de811e91d8cd7ce19a664889310cf03ff56d8f3cf3e0e622c1cccdae5db82","ssdeep":"","tlshash":"4ec08caf3f7060f64a06da8c0a0b742089e401e893a30e42381a9a36d302ba34d8ef41","size":166,"data":"","first_seen":"2026-06-15T12:29:13.763696Z","last_seen":"2026-06-17T17:49:43.198045Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/cpu-BvYjbLRY.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"050fd0e95ba079ce3a5fe397daa06aca","sha1":"ed41d03b2d37085b7ccbee420e29cc065506ff66","sha256":"4f30220a67667e28ee93a35db7070a1d8ac85d6d9fef5452aaa5de50c52c6abf","sha512":"f252e8f285e8286c1ff74fa6face62c8ba3459f8633fb5055588d4b5b9b224edd485b18274d386099802444ee64ad357237fdb5d741efea0ec4ac6cc9821aa36","ssdeep":"","tlshash":"98f0696f0f86259b4a41e6ad2e07b4094df883fc63868c03f107152bc3a14570da6f12","size":654,"data":"","first_seen":"2026-06-15T12:29:13.794217Z","last_seen":"2026-06-17T17:49:43.219022Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/index-BdTfoVmR.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f20a6f428a9699e564ff5894ebfe1a19","sha1":"a84d7490c3c86b25eb8a93dd9628a46dc748e1c2","sha256":"069045c4c87b88c8e8dda979f8a05e05a321155cec52cc97726d1b532f449db7","sha512":"9fa8dd55de89b7832f38af73d23c2a611b195bfb2d7f4b0f79fec4bf9ebcff230919f29d1cd84ef92c9f565192612aef8b23bbcc28739b153ec8c41196372800","ssdeep":"96:RVltxK5536wDhhjc7tv33UKOmkVTArldbXPE/1OYI+L3YTBrjmhaxr7XI:RVlGV6wDIf3UxqVM/1K+L+3mwxrs","tlshash":"f6028619f252fbfcae670e94fa4ea118b00e8f98c76f89b5e0bd641119304967d177c8","size":8631,"data":"","first_seen":"2026-06-15T12:29:13.780747Z","last_seen":"2026-06-17T17:49:43.217648Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/utils-C8nBGPD0.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"04f1d160aac66bdfaed655164dffd902","sha1":"b04ab1ad241ee65a063263183c55ef8803c4d9ef","sha256":"0a5b8d434b084288668f759af14b6037286237c37ff19a656aafac61b0894613","sha512":"bbd9cf7f43591f99f790f474f84936ba1b79dd52f6386b15378a8786fa0a7b7b7cd1ec2f404f9fc7ad76604f613da36dd6765f58ad4833c5873671bd3ac7b244","ssdeep":"768:sAi0UggGkYndvK8kYg2PU1Kinf88ikyYK5LKp:GBYgYU1KE88ikyYK5LKp","tlshash":"34c2c835740706bf2aef93d7f46caa96d8352642e0058b4ce3974f32cb49be9514ab0d","size":26677,"data":"","first_seen":"2026-02-27T01:05:29.77843Z","last_seen":"2026-08-17T03:17:50.848949Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/arrow-right-DL7CoNU1.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc2bc4219f044d792981e5096ad4eaaa","sha1":"11c44e33d570f4cf6a60c756c38c06ddf0654b52","sha256":"282825a91a56d65a1e874d90d3d32049b177879a1dd2d43387b51e09535dc0b4","sha512":"ccd2d322acfbc5a0490f83358a7271ad4c362eeed5a2b1de63ad51dfdf003431172ed6f286408b3b857e74472db04398f98813234e14638d83296800c7bc615e","ssdeep":"","tlshash":"78c0805f7ed0b2f24b00d5df465775114994059c53e34d80740d5277c3034d348ade11","size":177,"data":"","first_seen":"2026-06-15T12:29:13.766326Z","last_seen":"2026-06-17T17:49:43.210258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/zap-Dd6bIqkJ.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c489f2273fdf81d218dba839877a2f32","sha1":"2424406e3c7754b3b04ed297de1062db5e54069a","sha256":"1aaff86c3a0726108b84dbd0f001afe91e433dbd121c73b03623481f2022791d","sha512":"9901f28b2b867ccf0ea15e1d8c5f33307b893fcf73582533b23ecd2669871f0b21da8773271934b0590db1ab458b6cfe5e27da58d9d338638f7392bb35004d65","ssdeep":"","tlshash":"b5f0f42f9f8c13ed1502da9c0f3fe1540b8c627972f94c95684e85b692a6042d8b7a00","size":619,"data":"","first_seen":"2026-06-15T12:29:13.791962Z","last_seen":"2026-06-17T17:49:43.228746Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/index-Cp-G3RvM.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"192fc0c94691062079b61db3a8b7db05","sha1":"470879a0dcf6b88a849be1d8d1b2b8fff4d5caed","sha256":"80dbe6b6a198844be13ec8d25b6eab3bf67aaa64ecaf13bfe3d607449b42fbc0","sha512":"9a74661bc46abe1a49ab28fc486720abf68078e57821b28a93b7970295ca7d81f4b08b36bdcdaaaa85b2d1c97dbf94edfe6145d0783b4030139d353a38ae4f3c","ssdeep":"6144:GRECzhgw8aA+uVrf/5O1EpxcsoDOBeyKGStB+MbwciHiZX4fbsfCWVWLidgnkVzd:g0w8O09kxmSVB+MZhfCWoLidgnwDnOd0","tlshash":"89d47ed472aa61220fe345e0907b1103f2383916740c8464b76cddef7ab9949a67bfbd","size":624507,"data":"","first_seen":"2026-06-15T12:29:13.769878Z","last_seen":"2026-06-17T17:49:43.186536Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/index-Cp-G3RvM.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.630Z","timestamp":1781718556630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/index-Cp-G3RvM.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d2fa950b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":624507,"size_decoded":184897,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40181)","md5":"192fc0c94691062079b61db3a8b7db05","sha1":"470879a0dcf6b88a849be1d8d1b2b8fff4d5caed","sha256":"80dbe6b6a198844be13ec8d25b6eab3bf67aaa64ecaf13bfe3d607449b42fbc0","sha512":"9a74661bc46abe1a49ab28fc486720abf68078e57821b28a93b7970295ca7d81f4b08b36bdcdaaaa85b2d1c97dbf94edfe6145d0783b4030139d353a38ae4f3c","ssdeep":"6144:GRECzhgw8aA+uVrf/5O1EpxcsoDOBeyKGStB+MbwciHiZX4fbsfCWVWLidgnkVzd:g0w8O09kxmSVB+MZhfCWoLidgnwDnOd0","tlshash":"89d47ed472aa61220fe345e0907b1103f2383916740c8464b76cddef7ab9949a67bfbd","first_seen":"2026-06-15T12:29:13.769878Z","last_seen":"2026-06-17T17:49:43.186536Z","times_seen":2,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/menu-DBLsq1q2.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.649Z","timestamp":1781718556649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/menu-DBLsq1q2.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d31ab10b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":638,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"e4a98a0e3c1a3e692ab55d74df229ec3","sha1":"8532166cb6a6915f80737aef44738f4523ec64d4","sha256":"326cb337431244c77a2e4a2e59a8a189df8171c209ff684882a52aa582cfe710","sha512":"c240d840c7706e9b790152ff17fee9aa74c2763f133877e2e6be420553d36cf97246cc8890e4fa390991e80ac9d2875bf1674f8da6d57ce5e4b3ac5285fa57d3","ssdeep":"","tlshash":"43d0121f1fd121b20604db8a07577054ccd501ec03ea4d557451f66bc32249369edf03","first_seen":"2026-06-15T12:29:13.767354Z","last_seen":"2026-06-17T17:49:43.189879Z","times_seen":2,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.938Z","timestamp":1781718556938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25284\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 09:40:14 GMT\r\nexpires: Fri, 11 Jun 2027 09:40:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 547742\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25284,"size_decoded":26097,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25284, version 1.0","md5":"fc575ebf6f7c3646d13d9386cf8a86e0","sha1":"779e9507b31992161d36df9f8a78ee73a6e64225","sha256":"811e11966d29f3a01fcb19b087b61ac067d380665a55aebb7fcdf2cda95e4a93","sha512":"bf1f6890960e5fe79619d0a7757b95b9e422e3aa5634b1fcfe7b59f018234ec9aff01ae70d9b3593e1e5ddde78e716139c443e5ab0741a61c5d6b1637397412c","ssdeep":"384:dZgkQy8vw6D97NySvnt+kywHJ0WQ5k77oyquIw8CTTu36ioguDDYdiW3I7Oa4Leq:dmJ0G95ySAIHJvd2uIw86zioFA2OC5cL","tlshash":"63b2f14db61d308cfa05cabf0ecb8aba2031dc44bd5b39c4f217928739f6a6599c4564","first_seen":"2025-09-10T18:00:33.205576Z","last_seen":"2026-08-17T05:59:11.741847Z","times_seen":3029,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":20,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.940Z","timestamp":1781718556940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:11:33 GMT\r\nexpires: Mon, 14 Jun 2027 10:11:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286663\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-17T04:45:51.382515Z","times_seen":38494,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":29,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/chart-column-3thrUUgr.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.641Z","timestamp":1781718556641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/chart-column-3thrUUgr.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d30aa60b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263,"size_decoded":677,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"78499061b84b191de502443d30ed35d3","sha1":"12027d5a463ee20afe5dff889ee7307d414c08c9","sha256":"0ecfd63a5f0693d372f159c60d6a24077e479e1a342429e7f6dedcb1722069d2","sha512":"b761e84b8adaafb23b7bd2954a3d10b4dee8ee1f6d80e4224bc3e1fa260c1de154baab63decda05b491c7fc7eada8eb6bf80eeaa05cf3f6cf79b3f4fb9dba3ba","ssdeep":"","tlshash":"e2d05b5f5fc254f50924db4c5767b01149ec46fc27db0d41b40a8226c311453edabf01","first_seen":"2026-06-15T12:29:13.808037Z","last_seen":"2026-06-17T17:49:43.195512Z","times_seen":2,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/x-Dy7iApsZ.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.648Z","timestamp":1781718556648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/x-Dy7iApsZ.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d30ab00b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166,"size_decoded":632,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"00888f620d7cdc913725776d9300e658","sha1":"efb88b66462c3b32a4247307aa2eb4c9365e359f","sha256":"175ad031f49765883cb3008da784317e51effa25265af7d0c15a7388339e04f9","sha512":"b5be55dd3541f16bafc226cee68c06675184d9cbf192fb6221e05aef9fdca87fa18de811e91d8cd7ce19a664889310cf03ff56d8f3cf3e0e622c1cccdae5db82","ssdeep":"","tlshash":"4ec08caf3f7060f64a06da8c0a0b742089e401e893a30e42381a9a36d302ba34d8ef41","first_seen":"2026-06-15T12:29:13.763696Z","last_seen":"2026-06-17T17:49:43.198045Z","times_seen":2,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/icon-512.png","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:17.085Z","timestamp":1781718557085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /icon-512.png HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 9246\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\nserver: cloudflare\r\ncf-ray: a0d3e3d5cd4e0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9246,"size_decoded":9645,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"a788f3ade72cbdcb6cb4dcbf6bfc10f4","sha1":"b1a677309ff2e2c094b555679e05cc4e210ae6bc","sha256":"eedb46173cdd0ae7404d3998fd907f3fda5080877061ee8ae552c88496d9e977","sha512":"176a748b20be36390e3afc1c46baf788ece1e41bf4c07e3a23792ef142309b13a3fba0df14e058fdd9a656b1decbf545db7bb774bb744017c3be593e05d384b6","ssdeep":"192:LSXEqxKcY6jkD3sLpu2I9CIB1eVtXBcM33:GX7KcHkDYIZerl","tlshash":"8d12410b5d088a83566897e87f474d9d6f06271de99239ff41224edf3e648360c8e16e","first_seen":"2026-06-15T12:29:13.795638Z","last_seen":"2026-06-17T17:49:43.200106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/clock-BXeDZ7hG.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.645Z","timestamp":1781718556645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/clock-BXeDZ7hG.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d30aab0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":645,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"dd617b65040759c3141a88d4e6d549e9","sha1":"5563a27acad9d0a7f2f32bb440e645065a24a2f4","sha256":"739dc2a6283799a4698ad97dbf0a67f930154fb728e927c8e57a88faa7bd2922","sha512":"23c224a4f77af50cd4feafad9b4fd55a29a3ed660334199056887154989e03467be76910686e55289df4adcb7a50a91047035fb63724fd194d97516319491d71","ssdeep":"","tlshash":"dbc0802f99700d61050095551e16a069cdf5027617e1ce41e545cd174397d5374ddd52","first_seen":"2026-06-15T12:29:13.776564Z","last_seen":"2026-06-17T17:49:43.202522Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.943Z","timestamp":1781718556943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:11:33 GMT\r\nexpires: Mon, 14 Jun 2027 10:11:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286663\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-17T04:45:51.382515Z","times_seen":38494,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":41,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/__l5e/trackevents","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:17.166Z","timestamp":1781718557166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 2913\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 \r\ndate: Wed, 17 Jun 2026 17:49:17 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a0d3e3d64de10b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-08-16T19:24:30.800569Z","times_seen":3830,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/_serverFn/8aef743338e77934bd66c249bf6291519c4e1dbd48fabd89d1ac67a6f50a7f50","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:17.241Z","timestamp":1781718557241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"POST /_serverFn/8aef743338e77934bd66c249bf6291519c4e1dbd48fabd89d1ac67a6f50a7f50 HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/x-tss-framed, application/x-ndjson, application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\ncontent-type: application/json\r\nx-tsr-serverfn: true\r\nContent-Length: 316\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa; session-id=5e2cfe9f-742a-4e76-b074-de65668721cc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:18 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\nx-tss-serialized: true\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d6ce410b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2271,"size_decoded":940,"mime_type":"application/json","magic":"JSON text data","md5":"d7c2868d30cfc486393441d9ab0c72f8","sha1":"3162e7730e8a732fbcc489a768d02395072996e3","sha256":"8a05ed4a4f9ec7862a38e2ccc4d80cab46f5cc8fe5d41d2ab4ac1109bf3c8c68","sha512":"59a65a952b2f9bc818a82659ceb6a8ed22e67ad26e352937fd96ab162658019b519254e526ea988b46d61d5e724fdbf2caf090a901a896e92d6630310a0b17c2","ssdeep":"","tlshash":"9941bb7a1c0fb82db799ae028fb3645b44c436e92fd483e8c5e9dd8e12c06da0701f91","first_seen":"2026-06-17T17:49:43.205448Z","last_seen":"2026-06-17T17:49:43.205448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":915,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/_serverFn/8aef743338e77934bd66c249bf6291519c4e1dbd48fabd89d1ac67a6f50a7f50","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:17.244Z","timestamp":1781718557244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"POST /_serverFn/8aef743338e77934bd66c249bf6291519c4e1dbd48fabd89d1ac67a6f50a7f50 HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/x-tss-framed, application/x-ndjson, application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\ncontent-type: application/json\r\nx-tsr-serverfn: true\r\nContent-Length: 272\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa; session-id=5e2cfe9f-742a-4e76-b074-de65668721cc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:18 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\nx-tss-serialized: true\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d6ce470b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1759,"size_decoded":869,"mime_type":"application/json","magic":"JSON text data","md5":"3b50c932f7c422a47bc3f6ad11833b65","sha1":"a3e5321ff50d3c99c3a9dc3f63fe5129d5974886","sha256":"fe66904e9bc9cdf875b30fdab5b3ee5ea2ef5cb71f9ae41730e221beb52b4e72","sha512":"fa3cc869fa326569b5ffcfd054295d24f657b4b0037eddd41ed9aacd6d998aa8ebbca75ab3f5c23e0a8ac59d21dab87002314b820c569150d7735351cfb79985","ssdeep":"","tlshash":"78318b7a1c0fa82db799ad128eb3655b48c436e96fd483e8c5eddc4d12c1ada0701f91","first_seen":"2026-06-17T17:49:43.207157Z","last_seen":"2026-06-17T17:49:43.207157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":911,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/icon-192.png","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:17.087Z","timestamp":1781718557087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /icon-192.png HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 10375\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\nserver: cloudflare\r\ncf-ray: a0d3e3d5cd510b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10375,"size_decoded":10775,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"07d55b1eabb37161990cac9f7ff872d6","sha1":"4c7a9dc75feafc5ba8d92a46774bf86b37e7b7c9","sha256":"9527429b48a39710d03f5ef27340950d4d27724c60fabd1c8ccbd97c6fda970a","sha512":"7b161c7c98fe815f0e4274be2133f381b0d052138839a1ceb6fc450aac81493d81d24a3a7d3be7968a63e050c0c199ec342d566c1f3a6971da62074588d4a2b5","ssdeep":"192:sb8F1/ElbU/swPna2Op5SUaRN6oiXfnCh8UWymL+4zy3yyNrqt8jFfvtLtF:aGGwPRKmRN6vnCh8UWd3zkn4t8JFn","tlshash":"d822bfc2b79de40ccaca4de6ff009dc194aa4f4bcc1ad2c112218e1e184e467bd0de6b","first_seen":"2026-06-15T12:29:13.785906Z","last_seen":"2026-06-17T17:49:43.208602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/arrow-right-DL7CoNU1.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.638Z","timestamp":1781718556638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/arrow-right-DL7CoNU1.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d2faa10b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177,"size_decoded":643,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"dc2bc4219f044d792981e5096ad4eaaa","sha1":"11c44e33d570f4cf6a60c756c38c06ddf0654b52","sha256":"282825a91a56d65a1e874d90d3d32049b177879a1dd2d43387b51e09535dc0b4","sha512":"ccd2d322acfbc5a0490f83358a7271ad4c362eeed5a2b1de63ad51dfdf003431172ed6f286408b3b857e74472db04398f98813234e14638d83296800c7bc615e","ssdeep":"","tlshash":"78c0805f7ed0b2f24b00d5df465775114994059c53e34d80740d5277c3034d348ade11","first_seen":"2026-06-15T12:29:13.766326Z","last_seen":"2026-06-17T17:49:43.210258Z","times_seen":2,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.942Z","timestamp":1781718556942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:11:33 GMT\r\nexpires: Mon, 14 Jun 2027 10:11:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286663\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-17T04:45:51.382515Z","times_seen":38494,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":35,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Sora:wght@500;600;700;800\u0026family=Manrope:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.628Z","timestamp":1781718556628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Sora:wght@500;600;700;800\u0026family=Manrope:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 17 Jun 2026 17:49:16 GMT\r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22232,"size_decoded":1760,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"95aded713c82bb32fdd4cd43e0d29808","sha1":"dbcad2b29ab5442d46c490e9393ad2035edfaf27","sha256":"ee80eb0d1c96c20f396b7ae20d93832acaea91a6dc8e9d540b05e160843735a5","sha512":"cf71bfba5f13143bd65662fd149f62d6fe5188a575d7da1e32bf8ba7db488874e6d5ab1be7de9f67692f1eb68812098e5b666f48ca935cd84f5b3250a2e67235","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxG1JDEV3WW89RJ8rV3118h:vXuM0p2+gwU+ME027Z2urjYAG","tlshash":"00a29991002be400eb871cc273ce7e3aad8e61956485d5ba5bfd1cc8acdfd22536475e","first_seen":"2026-06-15T12:29:13.77845Z","last_seen":"2026-06-17T17:49:43.211723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/createLucideIcon-k35Gzduq.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.640Z","timestamp":1781718556640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/createLucideIcon-k35Gzduq.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d30aa20b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":1166,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1201)","md5":"0b0006740c2c85c0f7c68b8258ee4810","sha1":"5fed3882ac648b34ee591a5dbac0a2fad166d53a","sha256":"ee6113062dc7bcd81b7d230f906375e9431df343bae45ac9b91db788cfa3471c","sha512":"911ccebda8f087453220632259c05258f06dae5b150993d785a0b48536074eb58ee74fcc9f6b97a7a23a6b2e4f77b5053bcb5d12922586ff0fdeb5c2e6027bb1","ssdeep":"","tlshash":"a5214108b3d4283ca23594cd96983069ec779a28f9635a58d2fc5d2a3623042a337acc","first_seen":"2026-06-15T12:29:13.801408Z","last_seen":"2026-06-17T17:49:43.213611Z","times_seen":2,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/~flock.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.652Z","timestamp":1781718556652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d31ab60b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-17T04:35:43.992077Z","times_seen":15659,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/trending-up-Uy6hnAMm.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.647Z","timestamp":1781718556647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/trending-up-Uy6hnAMm.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d30aad0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187,"size_decoded":652,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"041ce2067a97be342e5d3cedc8d19b87","sha1":"343b54b18f03ee39bae44e71d0be9297d3c026c0","sha256":"345ddd64ca72fc3f355b0f9ac899916fcf12ea7374f4cc4981667dd51a6f60aa","sha512":"3341e6228da35abe38abc38b301e2d860aefe4850172118f5eb0a2d4b9b3be6f00cb7ab98fc1988734ef9d29b0fdb1c37e217bdded3ba6ae300a0b9cfba4c3de","ssdeep":"","tlshash":"8fc0222f2b40a0b50910d45d420a7421c8f1186873e28c80f148062b8303093a4fef06","first_seen":"2026-06-15T12:29:13.771137Z","last_seen":"2026-06-17T17:49:43.216139Z","times_seen":2,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/index-BdTfoVmR.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.632Z","timestamp":1781718556632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/index-BdTfoVmR.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d2fa970b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8631,"size_decoded":3553,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8622)","md5":"f20a6f428a9699e564ff5894ebfe1a19","sha1":"a84d7490c3c86b25eb8a93dd9628a46dc748e1c2","sha256":"069045c4c87b88c8e8dda979f8a05e05a321155cec52cc97726d1b532f449db7","sha512":"9fa8dd55de89b7832f38af73d23c2a611b195bfb2d7f4b0f79fec4bf9ebcff230919f29d1cd84ef92c9f565192612aef8b23bbcc28739b153ec8c41196372800","ssdeep":"96:RVltxK5536wDhhjc7tv33UKOmkVTArldbXPE/1OYI+L3YTBrjmhaxr7XI:RVlGV6wDIf3UxqVM/1K+L+3mwxrs","tlshash":"f6028619f252fbfcae670e94fa4ea118b00e8f98c76f89b5e0bd641119304967d177c8","first_seen":"2026-06-15T12:29:13.780747Z","last_seen":"2026-06-17T17:49:43.217648Z","times_seen":2,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/cpu-BvYjbLRY.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.644Z","timestamp":1781718556644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/cpu-BvYjbLRY.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d30aa90b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":771,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (653)","md5":"050fd0e95ba079ce3a5fe397daa06aca","sha1":"ed41d03b2d37085b7ccbee420e29cc065506ff66","sha256":"4f30220a67667e28ee93a35db7070a1d8ac85d6d9fef5452aaa5de50c52c6abf","sha512":"f252e8f285e8286c1ff74fa6face62c8ba3459f8633fb5055588d4b5b9b224edd485b18274d386099802444ee64ad357237fdb5d741efea0ec4ac6cc9821aa36","ssdeep":"","tlshash":"98f0696f0f86259b4a41e6ad2e07b4094df883fc63868c03f107152bc3a14570da6f12","first_seen":"2026-06-15T12:29:13.794217Z","last_seen":"2026-06-17T17:49:43.219022Z","times_seen":2,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/utils-C8nBGPD0.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.650Z","timestamp":1781718556650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/utils-C8nBGPD0.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d31ab20b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26677,"size_decoded":8840,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26676)","md5":"04f1d160aac66bdfaed655164dffd902","sha1":"b04ab1ad241ee65a063263183c55ef8803c4d9ef","sha256":"0a5b8d434b084288668f759af14b6037286237c37ff19a656aafac61b0894613","sha512":"bbd9cf7f43591f99f790f474f84936ba1b79dd52f6386b15378a8786fa0a7b7b7cd1ec2f404f9fc7ad76604f613da36dd6765f58ad4833c5873671bd3ac7b244","ssdeep":"768:sAi0UggGkYndvK8kYg2PU1Kinf88ikyYK5LKp:GBYgYU1KE88ikyYK5LKp","tlshash":"34c2c835740706bf2aef93d7f46caa96d8352642e0058b4ce3974f32cb49be9514ab0d","first_seen":"2026-02-27T01:05:29.77843Z","last_seen":"2026-08-17T03:17:50.848949Z","times_seen":26,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.946Z","timestamp":1781718556946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25284\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 09:40:14 GMT\r\nexpires: Fri, 11 Jun 2027 09:40:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 547742\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25284,"size_decoded":26097,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25284, version 1.0","md5":"fc575ebf6f7c3646d13d9386cf8a86e0","sha1":"779e9507b31992161d36df9f8a78ee73a6e64225","sha256":"811e11966d29f3a01fcb19b087b61ac067d380665a55aebb7fcdf2cda95e4a93","sha512":"bf1f6890960e5fe79619d0a7757b95b9e422e3aa5634b1fcfe7b59f018234ec9aff01ae70d9b3593e1e5ddde78e716139c443e5ab0741a61c5d6b1637397412c","ssdeep":"384:dZgkQy8vw6D97NySvnt+kywHJ0WQ5k77oyquIw8CTTu36ioguDDYdiW3I7Oa4Leq:dmJ0G95ySAIHJvd2uIw86zioFA2OC5cL","tlshash":"63b2f14db61d308cfa05cabf0ecb8aba2031dc44bd5b39c4f217928739f6a6599c4564","first_seen":"2025-09-10T18:00:33.205576Z","last_seen":"2026-08-17T05:59:11.741847Z","times_seen":3029,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":22,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.944Z","timestamp":1781718556944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:11:33 GMT\r\nexpires: Mon, 14 Jun 2027 10:11:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286663\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-17T04:45:51.382515Z","times_seen":38494,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":47,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T17:49:15.066Z","timestamp":1781718555066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmgmforex.xyz; Expires=Wed, 17 Jun 2026 18:19:16 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3c9b9ae0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37451,"size_decoded":9123,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"206001df705ae8a59f8ace6bd87dd9b3","sha1":"23736a35be85e260b5746a63f85847b963644ec7","sha256":"b5c0a83d656f636e95df15e838450c3a00ec085d037636347554b33857552749","sha512":"3627481a6fdc58e8b1c64b1f301fe7ed57702f7bae701ae49f4584591fdf465428b5cf36047985fa10ff6d639a887e1735f9fc90a1b7f39d4a3f73d60a9cb133","ssdeep":"768:TL92R8trVabzDMAP+D4vKE3ZZzq+O1j4x:TLL0bVq+kK","tlshash":"11f2e9311355063e966787ecf6a5b33890ead256d20bc91cb2bd11b51bc7c82ad33bd4","first_seen":"2026-06-17T17:49:43.221025Z","last_seen":"2026-06-17T17:49:43.221025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":67,"connect":1,"send":0,"wait":928,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/styles-KHngZirV.css","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.625Z","timestamp":1781718556625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/styles-KHngZirV.css HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d2ea900b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104405,"size_decoded":17573,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"68e7305f189966b6ca17c2927143975a","sha1":"c56d2d515e27bc3552dc3be031f9035c1e2fe90c","sha256":"82ac764673801d02258af7342302c9947dc746ac7d1afa4cbc25f2592e2a4491","sha512":"bbdce93ff39ff4db8ad9d5e954da802fb14170b696e22750a0887baa58de67a64e96441ba179064772479be2aed3513010f89580cb24e1db2067f6fa3d219759","ssdeep":"3072:8dvYQh+b8rwHyouESXW6ge2wt0KMq+WDh+L8:8dvYQh+b8rwHyouESXW6ge2g0KMq+WD3","tlshash":"1da392a4b229e53fbc23b4f9a38cf44c9109b0c0dd2547ecfa56612216c7bf6ad67614","first_seen":"2026-06-15T12:29:13.765309Z","last_seen":"2026-06-17T17:49:43.222883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/SiteLayout-DNre8ySi.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.634Z","timestamp":1781718556634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/SiteLayout-DNre8ySi.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d2fa9a0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62733,"size_decoded":20358,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30997)","md5":"c29b39f1c1a73c2f5fe9aa41f7d8c947","sha1":"833c1403eb59e31ddbc55b979e4d450ab13f7479","sha256":"090ef2ceac219c88569e98a9d0c12fd0a329b0b2638f94deb681f2d182ffadbc","sha512":"e9828924908e8294c6b8fb704518e624fa647c40f6b2ecaaa63a4cb96fab9229fb0c7398565643f206457dea68eeef831adaf5d936e4d804e42edcf4498e9375","ssdeep":"768:LK5Whqq4eYJ0NMUwX8dvuI26bCCVqx7eCbqKUhjYsOMu75MYCqDHS5Ko0jCQrmHv:pN6K5CbEiO5n0jCLDqbNtLM7HktYx/F","tlshash":"3653f84d7141bfbcae5609e8797fa01c712f1a98f01e88b0e07c5c642d69586fa23bdd","first_seen":"2026-06-15T12:29:13.783635Z","last_seen":"2026-06-17T17:49:43.224795Z","times_seen":2,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/arrow-up-B4aowKJw.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.635Z","timestamp":1781718556635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/arrow-up-B4aowKJw.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d2fa9b0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9375,"size_decoded":3971,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9374)","md5":"19f758ce06a32967b83ffb649d490dd3","sha1":"63fcbd6afbb1c813659e6c3a2204eab49d86cb69","sha256":"b245a6e897c6cff4419a830968533a097c06b93b345ec51cd35d99652110a989","sha512":"1a8e40c718727b07a36e6fab1e1a7f4df72f26f87a807644902c51f4070dd509614a8044e75280316242b81152059731738ffa3f148e59e7c52d0da74e88eeed","ssdeep":"192:u4gsgKV9G0380Ojr2dSTa1HsUQaYedaXzk4sEvRGEH6+6liDjoC819i70e:3FxV9Gf0OjZeAI4zk4tJGEa+6sDjT818","tlshash":"5712b79e7141532335e1c5d49c3a41289724b908342ec01cbdad9ee79663dcaf9bfa36","first_seen":"2026-06-15T12:29:13.807149Z","last_seen":"2026-06-17T17:49:43.226796Z","times_seen":2,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/assets/zap-Dd6bIqkJ.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.637Z","timestamp":1781718556637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /assets/zap-Dd6bIqkJ.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d2fa9e0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":619,"size_decoded":840,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (618)","md5":"c489f2273fdf81d218dba839877a2f32","sha1":"2424406e3c7754b3b04ed297de1062db5e54069a","sha256":"1aaff86c3a0726108b84dbd0f001afe91e433dbd121c73b03623481f2022791d","sha512":"9901f28b2b867ccf0ea15e1d8c5f33307b893fcf73582533b23ecd2669871f0b21da8773271934b0590db1ab458b6cfe5e27da58d9d338638f7392bb35004d65","ssdeep":"","tlshash":"b5f0f42f9f8c13ed1502da9c0f3fe1540b8c627972f94c95684e85b692a6042d8b7a00","first_seen":"2026-06-15T12:29:13.791962Z","last_seen":"2026-06-17T17:49:43.228746Z","times_seen":2,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/__l5e/events.js","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:16.653Z","timestamp":1781718556653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"GET /__l5e/events.js HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0d3e3d31aba0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44148,"size_decoded":9969,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (356)","md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-08-02T04:12:59.952921Z","times_seen":2734,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmgmforex.xyz/~api/analytics","fqdn":"tmgmforex.xyz","domain":"tmgmforex.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tmgmforex.xyz/","date":"2026-06-17T17:49:17.229Z","timestamp":1781718557229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmgmforex.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 04:50:38 GMT","end":"Wed, 19 Aug 2026 05:50:37 GMT"},"fingerprint":{"sha1":"90:BD:DC:5E:E6:7C:DA:A5:74:99:84:02:50:5D:30:13:2A:E2:E4:60","sha256":"7B:4A:D3:13:DF:96:76:52:83:3B:AD:80:02:55:4C:5B:A6:AC:20:63:47:04:7A:31:28:D4:A9:78:DD:7B:99:9A"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: tmgmforex.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tmgmforex.xyz/\r\nContent-Type: application/json\r\nContent-Length: 334\r\nOrigin: https://tmgmforex.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=480829bff35a7ff5add43689d93566e65f8e8a6f737f93299fa1c2092652ba22; __cf_bm=jfSoiGbNDbXLPfvp0IvLbG3Q7k1ssEGA.2TdtltbbTM-1781718555.153917-1.0.1.1-Ekz9fkVuQ_bCj1gcVwQjnPvdYUXeqoHotx.rFm5FTU4uBUheDhBBIWlcIANb8BCPBVZpe1xN_LNaEeQoB7dhnErx2K5TIFI_WGQNhi1t5Yx5s2h_QdkEoLKtWzvUG5Wa; session-id=5e2cfe9f-742a-4e76-b074-de65668721cc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 17:49:17 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a0d3e3d6ae360b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":333,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-08-13T03:36:38.061723Z","times_seen":12922,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"tmgmforex.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}