{"report_id":"d336b3ed-bb58-4a9d-ac2d-c1135a650431","version":0,"status":"done","tags":[],"date":"2026-07-24T09:17:32Z","url":{"schema":"http","addr":"icmrktexchtrad.live","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":0,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"icmrktexchtrad.live/","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"title":"Icmrktexchtrad","dom":{"size":333166,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50108)","md5":"4beb970f4e5135c0d476754ff8ef4ea8","sha1":"e1ace4a103b3776a27bd7f31fbca0da6c36244c1","sha256":"a78769ee5ba72f3d687600c6076cb0a2edcd45d35c589bc36284fac77c59e57f","sha512":"df7fe99569a0110df8b71e20fe7901a45bf3c3d3a4ff21b3b7d3a83d7b5b86af44312283a2adaf3d3ad0d7c900ac22fe9749544d21d4285ce5d2b6e9b3565f00","ssdeep":"3072:ptWRzwCzocjJLQA0zDraOxsuiyEqgGKO9WMzbb+Ir9UWPMDgPUI1Z5E57xq:pyJLQA0zDrayN","tlshash":"4864f6053654e86aa15b0bbfd2b73e3870c9d9d7dac728d4b57ad52013f4eb23362206","dom_hash":"domhash51880254773cb381070a16930e4a82a0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"icmrktexchtrad.live","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":0,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-28T09:17:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.smartsuppchat.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-07-24T07:15:25.153212Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"icmrktexchtrad.live","ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-24T09:17:36.116814Z","last_seen":"2026-07-24T09:17:36.116814Z","alert_count":61,"request_count":61,"received_data":2046239,"sent_data":31357,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"Elementor:3.9.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Translate WordPress:6.0.16","description":"Translate WordPress is a website translator plugin which can translate any website to any language automatically. Translate WordPress plugin is now a part of GTranslate family.","website":"https://gtranslate.io","common_platform_enumeration":"","icon":"GTranslate.svg","categories":["WordPress plugins","Translation"]},{"name":"Underscore.js:1.13.4","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WPForms:1.7.9","description":"WPForms is a drag and drop WordPress form builder.","website":"https://wpforms.com","common_platform_enumeration":"","icon":"WPForms.svg","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:6.6.5","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":6,"received_data":267761,"sent_data":3440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-07-20T21:58:05.03314Z","alert_count":0,"request_count":1,"received_data":75997,"sent_data":509,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.coingecko.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-07-21T20:24:11.162909Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":488,"comment":"","tags":null,"fingerprints":null},{"fqdn":"files.coinmarketcap.com","ip":{"addr":"108.157.229.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":4262692,"first_seen":"2015-09-03T05:46:35Z","last_seen":"2026-07-21T08:08:34.472563Z","alert_count":0,"request_count":1,"received_data":58177,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":2,"received_data":126343,"sent_data":1371,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-07-20T14:48:05.930258Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":596,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-19T23:03:44.758639Z","alert_count":0,"request_count":1,"received_data":21136,"sent_data":605,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s3.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":165395,"first_seen":"2018-06-24T04:06:00Z","last_seen":"2026-07-18T04:14:12.667232Z","alert_count":0,"request_count":1,"received_data":14574,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"maps.googleapis.com","ip":{"addr":"172.217.114.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-07-20T08:05:15.246758Z","alert_count":0,"request_count":2,"received_data":1347552,"sent_data":1007,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.tradingview-widget.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-06-05","domain_rank":196495,"first_seen":"2021-04-08T06:14:48Z","last_seen":"2026-07-17T15:25:04.889223Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":602,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widgets.coingecko.com","ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":3132971,"first_seen":"2018-07-05T11:10:42Z","last_seen":"2026-07-23T05:31:16.754918Z","alert_count":0,"request_count":1,"received_data":235362,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T12:51:32.019296Z","times_seen":906671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.coinmarketcap.com/static/widget/coinPriceBlock.js","fqdn":"files.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"108.157.229.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d84ed083f24aaeaff421e916ef72024d","sha1":"e132019fa4fe7f47fd26b18ae27dc1b858d1ba03","sha256":"6c176caf0c3c59f4cee2645a26055238d5658512526e28eeb307892641170d80","sha512":"e569ead05918b41ef7b52b3b04e418da4bbd0c2f2750aecaf9aa39e978c6eba1206f7e6724badbc1c9fb8949f4da0ba3893a25625702c562c6adf083bfb1bb6c","ssdeep":"768:6Y4hcNGbZ7EX8bsyDHCjP9ey4i+qNBc+fXgfYcs1K3nf4sZELk+CuIZELk+Cu6yc:6ZUsZ7EX8bsyTuXArPH+CJ+Cyc","tlshash":"e2433bda72d1b1ae4263e3b4583b0215b37f2d3e758ac650f214ddc1ae7a85c8613f68","size":57709,"data":"","first_seen":"2023-03-07T16:52:43Z","last_seen":"2026-07-24T09:17:43.725909Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-converter-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d38eb75fef5ec15272c60df3071dd98f","sha1":"370dfc6eea025053f3594eeda4d38ba0d148cf70","sha256":"37a017af532213f5488be4408ef704f4b8a4ab2b3b585a95278ed6a4d6ad5fde","sha512":"6e42e19d72654ebb64b3b028e8627087d69836faac3478599815f0735aa5abe0c3aeb815a4afc7295c0b7c3b9ceba22cc403874ad10eb533b0e4f6a46b6803a9","ssdeep":"3072:k7+hYjvNJOdVKvMQ21OqArnPfunQlSrUzpZF6Gz:MvbNvM7K7AGz","tlshash":"4d341a8eb6c0f19947b693e5605f394ba77929fc68884380ea72f4e5587e04c6133f6c","size":234478,"data":"","first_seen":"2026-07-05T14:30:46.473779Z","last_seen":"2026-07-24T09:17:43.773377Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec2777f6b09c345d2ab0def96b5cab9d","sha1":"10713118d9f7aa90bdce30ea21508b2e99b8b33f","sha256":"d9b268266af74b5c0834e2a519303ca97c5427c5fb7abb3b89ad29e07664be14","sha512":"77b8845daa7449a72a6365e75ae56781c82b503619f7d90ce4ba0f5a8c025b59f3881f0bd3b51570b2c3a6567a6be1e783615954d84b9fff95812e230cc8ffcb","ssdeep":"192:Cr0AcBogU9EEk7Wxcf55I/6wG5klFhBsR0PWXYpt:Cr0AEPU9EccbUt","tlshash":"7f22844a320a2b015b9bd271653da8cbd77752c8690449ccb074dfce445cf59a2ebf78","size":10759,"data":"","first_seen":"2024-07-18T17:31:23Z","last_seen":"2026-07-24T13:21:14.244821Z","times_seen":33485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T12:51:15.112679Z","times_seen":988575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.9.4","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"423e4eab18767461cb68a11c5b2a0cb4","sha1":"d5c17c5fbecfe815e7c27347155158e90e9fb709","sha256":"d6a23f9c4dec2f455c8e2340a99ad4db01a1d538bb1f2537bab3991ec64e14c7","sha512":"15feb39953f808f7578508f00d9daea092f47bf52875cbc6f6f2e93f700856f9e6631f4d23310d88986aed72cea4deda0b0517ca2d72c76f19801b5d182d51d9","ssdeep":"384:uYwLboOAySjd5yUa3oDo3oYCJLjanUyCdyGvyo+UylJNj4pyCAwyNCCBzycEQysD:uYwLboOvSjKU4oDo3oYCJifRo+LlJNjP","tlshash":"3d7284a66200253604ff1beaf4daaac8767024affe0944115979cc2e19b4fd351f1afd","size":16935,"data":"","first_seen":"2023-03-07T13:22:33Z","last_seen":"2026-07-24T09:17:43.741201Z","times_seen":1001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.16","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ce2ef9c51d872136c9bd85bd5428ea8","sha1":"4b4f270db4ec228296f5127f22df9a0b502cec84","sha256":"37b945e5fe609563e83b37edcbfe3d18aac072a55fc8962978afdf597a3c4aa8","sha512":"4312eec2e116c5cbfbe6d66accb809c080c7763e98b99b18e594f07cf3d9dd149020e3f2637b0e14079b52e09aae491ff9a30a84bebe5ffa85b4bbc0095e4d98","ssdeep":"192:fnSHUWjvjwiEiO+R8Ua+R8ako5hUqDMzYySrtFisf3fKLDMFsD60Cld9H8mUxmY1:fmzjrwbcawCqgbSY3","tlshash":"3452b818bcf611604133f87f5baf6006f13a8a13600dea903dad6ad05f954a557eeef8","size":13797,"data":"","first_seen":"2023-03-07T01:18:43Z","last_seen":"2026-07-24T09:17:43.73472Z","times_seen":492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd6a0d8d7b3e0afbbc0bbb417dcc387b","sha1":"0b38c782da1c8ecc6bc7e854f8841fb9d2c86e35","sha256":"f36adc07db49e73c3fd3aeb4234d270725f07719706dd28dfc09657f2cffe9d6","sha512":"e0963a8c2de54ca9a29d2f3fb0adf54946172e11589f0da3dafbf603b9f38c7a4a8a977465b0a9c32da9d4127d916e60c390dea1e17d55b3edee0b760401135c","ssdeep":"","tlshash":"d161ba8e33145e8342931336d23bab4b7d3180d9640ad51dbb39acd83a2c93961b69fc","size":3428,"data":"","first_seen":"2024-07-16T20:36:22Z","last_seen":"2026-07-24T12:51:15.128473Z","times_seen":55645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/theplus-addons/theplus-post-6.min.js?ver=1722405933","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a968d3049f348ef124aca78f926f9d32","sha1":"cdb692e6cd05360560a4b6a19f509274e9aa88e5","sha256":"10c41e2777c9385c1b5e2c95c887deb836c0fdbc7f70673370a6660c741f6620","sha512":"1eda123f3f99510570309b483a7375d8b15e0ee6853c6885bc536e44c2c5c38334697b32c50479ae01ec3635533c1dac2f7aa36a0156affb022ab217bf544d51","ssdeep":"768:hybvhyf6H9rf89wQddeV2FsQ57FitjLqXvmNNaWX7zE/nUwqsh0lwbTCdKcSXM:kt3rf6XebXfqcSXM","tlshash":"c3f2d798b21530b541ff6acb80ef3688727178dde50450a925b5c8fd1b28ed921b2fde","size":34472,"data":"","first_seen":"2026-07-24T09:17:43.769077Z","last_seen":"2026-07-24T09:17:43.769077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a41b688a0c75b22f672f87233f843f9","sha1":"bf7d47a7420f3369f977fc850058f786de22d42c","sha256":"3507312c8d17b4ba1c93b83b0807b2aca82a89cf0f9d38fad1c6bcfba98437cc","sha512":"db23759f09048f4e2c4240c6df521e5a63e4013c04787bc1bbbeab9cb0a61a4c632515618ffddebf68fe7114d2cfd7917875d31f20e7049bf6f4e0289cee87ea","ssdeep":"384:+rZxJ4wL3L0gr+d99Ou6UudYVYmzNeyYWUNBou3O57HRsrhikgHhx6d8xOplP7Ls:QSgr+dSu61dqbUyM1QHWNikgHhx6d8xl","tlshash":"1382858cf624307780dfc368a4671f49623a92167741c1ac742cceea9e69f6511a7ff8","size":18420,"data":"","first_seen":"2024-07-16T20:36:22Z","last_seen":"2026-07-24T12:40:15.598616Z","times_seen":25967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/js/main/pre-loader/plus-pre-loader-extra-transition.min.js?ver=5.0.9","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5b0b15122ba915645443b8b9ea1992f","sha1":"d9b588a8df58e187a52cd19256ed9af41882b7ff","sha256":"71cbac19a8b9c793c36076eb0dd755713283c2c28f4bf05668f1f36ab3b141e9","sha512":"6acc85329da7692676c60053efc779b6fa78cce8aa410ff7f91da1ffed5418340f651b7a30816f0539517ee3aeb6acd9134e1fcfac603f5d5e45970fb66e6b63","ssdeep":"","tlshash":"a93126bbf502c85592203912d3960c716eedbd73ad1bac733b2006869da7edd059c94b","size":1674,"data":"","first_seen":"2023-03-08T08:33:16Z","last_seen":"2026-07-24T09:17:43.712986Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/js/main/pre-loader/plus-pre-loader.min.js?ver=5.0.9","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cbf9604ea75a0835158da7a89cba3c4","sha1":"0217844f73f67860393688c17382297a51e991bb","sha256":"8421a3bdf342aa348d21644c345679a4346e2201bcb03270b935da35f2f3536a","sha512":"2fc7af3e0793d3ea2751897b68fb43f690323b512e1790adcb2a948464c2c3ea020a61b3a3656bc669e128c4f4daabaa48f9ec6f2afb086654407368e9525281","ssdeep":"192:jECO77d4JKwRgasi77d4JKw3q0X80waJMQCgS:jED2g42gCqJTUS","tlshash":"ee02c26ea172cc848631d445d1dd65207deadd73ae0af8f3782000df9fe5ec960a864e","size":8315,"data":"","first_seen":"2023-03-08T08:33:16Z","last_seen":"2026-07-24T09:17:43.759818Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/_/translate_http/_/js/k=translate_http.tr.no.scrnY6Q2_yw.O/am=BIAABw/d=1/rs=AN8SPfq1KlUFqeiFvBMudduzGtb39QWXuw/m=el_conf","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"550a2eda68037650660410e9cfa066b3","sha1":"d5630ba500c661ab4b14cb81226ce687fc31b21c","sha256":"f757f5bed21fef9077f7a928808359a0c2d90d029ec63f36f72fcd82e408d1e2","sha512":"4f4875fb001a4dce02e5c584ce77531dd9a6514290b3a574e841ca0dc31d84584242bd9865e9a70562bf446e5763a0da593d343a04b24917e3faafa22cde284f","ssdeep":"1536:XWjLpxIZnZzYOwRUSfl26KKZkXtmqR6Y06ECiGwNWF0:XDD4U6KKZgtBgtCic0","tlshash":"8173b88cb6a5b4658363f4b5412f000eb23b58adf8484cadb288d8e1adf5949453bf7d","size":75429,"data":"","first_seen":"2026-07-24T09:17:43.713572Z","last_seen":"2026-07-24T09:17:43.713572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/salert//assets/frontend/js/main.js?ver=1.2.0","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02e6a636c39b590b0a7e5eef530d35d","sha1":"17a5195edb5bec33450e392cf4c1d0f7389173a7","sha256":"cbd9a979cf2a4c88c2e7a06ab8fc31bf9d69e3a435e23c5ac8e4a731680777d4","sha512":"ae0a1bec02721ec8a41e8480a80bf58ffd4a216c2d26e3fb041f1924b3b94cba2ad1869f48bb1f3bc3545fa8dc20f87451ec7c226c13a6989fe189563070526c","ssdeep":"96:PmB1+vh22So7n7UepPvKDLwSKIKSE8UcQLH93M/fxg:M/YF6lHS","tlshash":"5cb1de0da8b0b7972a7777b68f7e0008de29223792039e797cbd69441f711695074eec","size":5121,"data":"","first_seen":"2023-03-08T05:28:37Z","last_seen":"2026-07-24T09:17:43.709613Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=\u0026libraries=places\u0026sensor=false","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.114.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ec2642bbae9ce116f992b420789ac6e","sha1":"41ab9a15197496287d48d90eb3d42259b4c36b09","sha256":"6769631ded4d83c27bca6adde9baef3dec5c143a39ff3e959be87a7c9375e6cd","sha512":"d37b57e085493b4cb967798dda3aa9b215325260d8f65e2471d0dcb5024c593abb8453e69431ff02b19be070e5e264ec2fde63720db3bbf16c3f31e3b5c1ded9","ssdeep":"24576:yaK8x49nhJeygp/sMKgJLX4anD//1SN8SKvpo9Kxex/xMzgnURuHvjGqFK5RqWc:yaK8x49nhJeygp/DKgJLX4anD//1SN80","tlshash":"b7556cac72623266da73d465811b2106b134b487f00889bdf9fcd9e29ff9d8541f6b38","size":1346442,"data":"","first_seen":"2026-07-24T09:17:43.780031Z","last_seen":"2026-07-24T09:17:43.780031Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5dea0a705cc2f4cd87dbaaa6666bc6","sha1":"678bc6f750f13adb29bbc158eb0d9cd813b736fa","sha256":"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264","sha512":"7c19d0edc28fe8733075534de6176483416bb3535f37b7607536aea2ddf9c5591d864225049c9a74735c1daf44c72688d91c1133bb018683ade11f16ea596807","ssdeep":"192:bP6Vw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3o:OX8fajqZFwtdykZwRXcoWI2P9o7S3o","tlshash":"0462337b7d000da93cac595852a27d446d4eb32fbb430c6bbdc59de623a23f5719e006","size":15055,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-24T12:50:48.799437Z","times_seen":13082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-07-24T12:23:03.90529Z","times_seen":41634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cc86d1003c45134d6838f13e3885db1","sha1":"7e24d802fa52db547e437a5d92f21932bb858993","sha256":"196bed4faf0fe38b89a496b1f41319b2a8077263f85819f8ad42933e0a2e2e52","sha512":"ee792251931feb5c09efcdbe79229b8e3c5cc88a920392a92b78f70d27fa8d8ddfd4a1b976baf52fffbb270f46a144cf74b3795b82ae7a513b439fcc6b970952","ssdeep":"","tlshash":"c621acaf5242b4bfd1d63370f3274a8f37361aca510a848db53b88d0693c53a061c9bd","size":1179,"data":"","first_seen":"2023-03-07T01:24:22Z","last_seen":"2026-07-24T12:26:25.333903Z","times_seen":17372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://icmrktexchtrad.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"warn","text":"Google Maps JavaScript API has been loaded directly without loading=async. This can result in suboptimal performance. For best-practice loading patterns please see https://goo.gle/js-api-loading","filename":"https://maps.googleapis.com/maps/api/js?key=\u0026libraries=places\u0026sensor=false","line_number":2587,"column_number":325},{"level":"warn","text":"[CoingeckoCoinConverterWidget] This widget is deprecated and is no longer maintained. Please visit https://www.coingecko.com/widgets to get the new version of this widget, which features a new design and better performance!","filename":"https://widgets.coingecko.com/coingecko-coin-converter-widget.js","line_number":7,"column_number":63396}]},"http":[{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.137Z","timestamp":1784884627137,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T12:51:02.383766Z","times_seen":17502318,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/themes/astra/assets/css/minified/main.min.css?ver=3.9.4","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.010Z","timestamp":1784884626010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=3.9.4 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e7-9eba\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40634,"size_decoded":10524,"mime_type":"text/css","magic":"ASCII text, with very long lines (38452)","md5":"f7770481efcba1b329dc05cb00463b2a","sha1":"38c1ef0145d2fc86d36642521ee5337b5f887752","sha256":"ae9482ef2b2db0d66409955fa17f233c8b8cce22ef126791b575248b1b78299f","sha512":"73e261f5d45f6c5fcf77466c0abdf037f36826e5852ea6eacafc4c079a268d710f1e6089cc18a113b6523d7cd0afb9334ac72eb739eb4388b8c32a4e8c0753f4","ssdeep":"768:mz1Oa1rhWYolOlFnkHk8FHk6jtzdvNPR2/WLmihCFS70HQtBkMTqen9h7fAR7jY1:MK3jROHQtBkMTzI2dEaP","tlshash":"1703d7a157c031296233873efac6b9482a654313e70f26e7f8abd764c9c57d71972a0c","first_seen":"2023-04-05T10:58:37Z","last_seen":"2026-07-24T09:17:43.702152Z","times_seen":230,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.16","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.018Z","timestamp":1784884626018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.16 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-1664\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5732,"size_decoded":2168,"mime_type":"text/css","magic":"ASCII text, with very long lines (681)","md5":"00e7963b92387d2483ebe810f453d32e","sha1":"bdcde0805e6a1dbc1513e1365486ad7ead26de38","sha256":"306a340d77c015bebd34348e2df7636595f40e1fc50273d1a4cba9321d5e82ce","sha512":"fcd30b9858a60abb420d3a3c82c3f60252b83feb1d768ee15b05b7bf6aba489d48bc38b09fb0f8da67bb6583f60321ec203db40e73f2b4f5c20761bc9ae23ece","ssdeep":"96:2F/LbsaIRhghfYV24xQ5DusFiRw9ZRVAAelg:k/LbsaIRhghsr8FiRgPYg","tlshash":"8fc1f9f5e123348ab233d09262369d94e21c8987e47f5e76fad6f64c8f186ee04e3514","first_seen":"2023-04-05T15:22:44Z","last_seen":"2026-07-24T09:17:43.703543Z","times_seen":2811,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.082Z","timestamp":1784884626082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.3 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-47f4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18420,"size_decoded":5931,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18236)","md5":"1a41b688a0c75b22f672f87233f843f9","sha1":"bf7d47a7420f3369f977fc850058f786de22d42c","sha256":"3507312c8d17b4ba1c93b83b0807b2aca82a89cf0f9d38fad1c6bcfba98437cc","sha512":"db23759f09048f4e2c4240c6df521e5a63e4013c04787bc1bbbeab9cb0a61a4c632515618ffddebf68fe7114d2cfd7917875d31f20e7049bf6f4e0289cee87ea","ssdeep":"384:+rZxJ4wL3L0gr+d99Ou6UudYVYmzNeyYWUNBou3O57HRsrhikgHhx6d8xOplP7Ls:QSgr+dSu61dqbUyM1QHWNikgHhx6d8xl","tlshash":"1382858cf624307780dfc368a4671f49623a92167741c1ac742cceea9e69f6511a7ff8","first_seen":"2024-07-16T20:36:22Z","last_seen":"2026-07-24T12:40:15.598616Z","times_seen":25967,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.083Z","timestamp":1784884626083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-49b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1179,"size_decoded":840,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (985)","md5":"4cc86d1003c45134d6838f13e3885db1","sha1":"7e24d802fa52db547e437a5d92f21932bb858993","sha256":"196bed4faf0fe38b89a496b1f41319b2a8077263f85819f8ad42933e0a2e2e52","sha512":"ee792251931feb5c09efcdbe79229b8e3c5cc88a920392a92b78f70d27fa8d8ddfd4a1b976baf52fffbb270f46a144cf74b3795b82ae7a513b439fcc6b970952","ssdeep":"","tlshash":"c621acaf5242b4bfd1d63370f3274a8f37361aca510a848db53b88d0693c53a061c9bd","first_seen":"2023-03-07T01:24:22Z","last_seen":"2026-07-24T12:26:25.333903Z","times_seen":17372,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.092Z","timestamp":1784884626092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-7b22\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31522,"size_decoded":11849,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31482)","md5":"f8345cf99b3245538698c358c15f7fca","sha1":"05405bd9fa67559e27759e45145b4d1857474a5c","sha256":"71c853d2f2a1dc0393f6ceba3441c8e5bf7fb84a13ffc1dc95bdf72d98dd453c","sha512":"cd197b3541dde64a927f6ead727d437647b8a53360e4aabc28fb1faf8bcb513cf9ac0180a800b2dcd411e530aae8ff430d4b29615559a487e917404b09d1c60f","ssdeep":"768:ReAjA6wk9C+Qk4cR8+8gNKRWWE1SeiwiTzyVZMts5z083FdfPquQ5RSSTKtorGzP:ReAjA6f9C+Qk4cR8+MWWEsenS83FdQ5K","tlshash":"7de2d7863b61f4a347fb8056a02f410bf3965894780de0d4b76bc9e27874d8a6367f39","first_seen":"2023-03-10T01:48:32Z","last_seen":"2026-07-24T09:17:43.707164Z","times_seen":388,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/css/main/pre-loader/plus-pre-loader.min.css?ver=5.0.9","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.027Z","timestamp":1784884626027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/theplus-pro/assets/css/main/pre-loader/plus-pre-loader.min.css?ver=5.0.9 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-ab36\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43830,"size_decoded":6839,"mime_type":"text/css","magic":"ASCII text, with very long lines (43830), with no line terminators","md5":"d7f0ac0bcdad9cd89ad3f125a2a821b7","sha1":"9efaa6880cc0715da9523b53f0a07fec0a93a5bb","sha256":"74f36e554ba5ff80090d35b0e9ba4c1200513be2bcd2dcca6d2f2498cd949591","sha512":"7cf14f13db375c4e74d137961db7e65b49c0420d84c4bbb2930224332721a3144ff0689dddfc4454f5467d79aef242b0ed69932c37080b26390f12752ca22473","ssdeep":"768:2YJe3YUG5g4wd636fHJM/dprY2YVYUY4OUAKXAiGtPNWrtBXMxgLpa/4gdDA1r2D:VJe3YUG5g4wd636fHJM/dprY2YVYUY4W","tlshash":"af13e06658a1918962178f21c7cc4a541b38cd63a9234d7ff325345fcb82bcc63ab97b","first_seen":"2023-04-19T23:04:28Z","last_seen":"2026-07-24T09:17:43.708269Z","times_seen":181,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.056Z","timestamp":1784884626056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-15601\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":35682,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T12:51:15.112679Z","times_seen":988575,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/salert//assets/frontend/js/main.js?ver=1.2.0","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.058Z","timestamp":1784884626058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/salert//assets/frontend/js/main.js?ver=1.2.0 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-1401\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5121,"size_decoded":1717,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a02e6a636c39b590b0a7e5eef530d35d","sha1":"17a5195edb5bec33450e392cf4c1d0f7389173a7","sha256":"cbd9a979cf2a4c88c2e7a06ab8fc31bf9d69e3a435e23c5ac8e4a731680777d4","sha512":"ae0a1bec02721ec8a41e8480a80bf58ffd4a216c2d26e3fb041f1924b3b94cba2ad1869f48bb1f3bc3545fa8dc20f87451ec7c226c13a6989fe189563070526c","ssdeep":"96:PmB1+vh22So7n7UepPvKDLwSKIKSE8UcQLH93M/fxg:M/YF6lHS","tlshash":"5cb1de0da8b0b7972a7777b68f7e0008de29223792039e797cbd69441f711695074eec","first_seen":"2023-03-08T05:28:37Z","last_seen":"2026-07-24T09:17:43.709613Z","times_seen":128,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor-pro/assets/lib/lottie/lottie.min.js?ver=5.6.6","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.086Z","timestamp":1784884626086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/lottie/lottie.min.js?ver=5.6.6 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-3daac\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":252588,"size_decoded":77728,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65125)","md5":"0bd6754fe3239b3175ec910ea3e0f008","sha1":"da9238705930c2ac1a90ad934d090cef3cbd8e6f","sha256":"0eceb9be92f0ec6a1b69ebafa0bdb6bd72506565259ca6c4574185e7336d0f04","sha512":"b778be9c5b60cc48cef7eddf71a62777933394f4193c860fb4dd81312806ff04582e1b854ed1dd3997e70601785d9522bccbdf27831ed2818b003f1148062afd","ssdeep":"3072:dIlbxUpj1WvP6IoPap1lNIgByc84nmDXUnbWYKScWoCz0:dIlbxUpj1WvP6IoPardzmOjXiCz0","tlshash":"9b3408597264243805c9405d806f1a4bbb37292e245ac45cb36cf4ffa8bde8d31beb79","first_seen":"2023-03-07T12:07:31Z","last_seen":"2026-07-24T09:17:43.710134Z","times_seen":3084,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.098Z","timestamp":1784884626098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-543b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21563,"size_decoded":6910,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21520)","md5":"74134f0efd7fa9178d7a7a91f0e08557","sha1":"d62b84dc999ea96f74fecab3e983dd001921f433","sha256":"84852d5cd62646315668056959d23b4df5dcdad0408d0f6817ca3cec8ece7ea3","sha512":"cb531593b63071a7bad150d76202cb5f8c3a92470d941291927ef5e82b487acafd0b10f61ab009de6c6bc022d19bc96a3db95e3f2085ecc245ef84fdd38672da","ssdeep":"384:XiIdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOzQYqEbzG1:XiIdndptaQ9HuGJswyV/pkTAQYtDT6HB","tlshash":"3ba2c9063153987a60cfc157e0a7420e7b374895740570ed7abc6cdba9b8d9a33ea339","first_seen":"2023-03-10T02:38:54Z","last_seen":"2026-07-24T09:17:43.710731Z","times_seen":321,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.102Z","timestamp":1784884626102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-9ef8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40696,"size_decoded":14292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40657)","md5":"47b4ae21c29544a41724c6d095d07a61","sha1":"db18cdb7385735d4ea545ebc99e7b65194bd37ae","sha256":"a9c399a3695f864f52665163ff94626e3b77b44747e1519b03e5f82597b004d7","sha512":"af32abb2d26d7af69a46cd617bf27f29de40db71a353106e0e99e38b5f92727a780a7bf090630d408b1130dd91f92416105a4e0c2736aef07796e05a80c2ee24","ssdeep":"768:FRxiBDvxJMEa/mhTIwfVehz8favEAz/c5G/TSebsvZiVH8URPSz5oedXLfPv3x+p:FRxU7xJMEaefVnIEAz/c5+TSebsRiVHp","tlshash":"e00308563192d4aa51df48e7b0330219f3620dddb402b56eb6bdace2a4b1e833376770","first_seen":"2023-03-10T01:48:32Z","last_seen":"2026-07-24T09:17:43.711287Z","times_seen":390,"resource_available":true,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/underscore.min.js?ver=1.13.4","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.109Z","timestamp":1784884626109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-4991\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18833,"size_decoded":8310,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18798)","md5":"f88d5720bb454ed5d204cbdb56901f6b","sha1":"f1952292fde4b15936e9aac16b2b9896684db95b","sha256":"726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a","sha512":"f7e3ec0c5b832116d75cac2a5a40ab6fe673cc6c0996bd898f25850ed5555484d821e1fc4ca039c69da3ab51faa25613d622db1177d7cde16da477145c3a6e22","ssdeep":"384:ivzwv2QYnTte0KKscI1WxUy/gdLzrXmJUDWjFkgoKjJj5Sh6W0+:WwOQ2te0KaYrXm1hR5Uz","tlshash":"538284c83ad2f059536324ba407f249bf23a7ea2649caa00d265e4fcbc7495dd137d6c","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-07-24T12:50:48.850022Z","times_seen":35557,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.032Z","timestamp":1784884627032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://icmrktexchtrad.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 23 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82769\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T12:52:35.233701Z","times_seen":242374,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":31,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/js/main/pre-loader/plus-pre-loader-extra-transition.min.js?ver=5.0.9","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.059Z","timestamp":1784884626059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/theplus-pro/assets/js/main/pre-loader/plus-pre-loader-extra-transition.min.js?ver=5.0.9 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-68a\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1674,"size_decoded":775,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1674), with no line terminators","md5":"f5b0b15122ba915645443b8b9ea1992f","sha1":"d9b588a8df58e187a52cd19256ed9af41882b7ff","sha256":"71cbac19a8b9c793c36076eb0dd755713283c2c28f4bf05668f1f36ab3b141e9","sha512":"6acc85329da7692676c60053efc779b6fa78cce8aa410ff7f91da1ffed5418340f651b7a30816f0539517ee3aeb6acd9134e1fcfac603f5d5e45970fb66e6b63","ssdeep":"","tlshash":"a93126bbf502c85592203912d3960c716eedbd73ad1bac733b2006869da7edd059c94b","first_seen":"2023-03-08T08:33:16Z","last_seen":"2026-07-24T09:17:43.712986Z","times_seen":270,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=GoogleLanguageTranslatorInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.075Z","timestamp":1784884626075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:35 GMT","end":"Mon, 21 Sep 2026 08:37:34 GMT"},"fingerprint":{"sha1":"2F:20:3B:91:88:65:20:CD:06:9D:0C:58:4D:17:6F:FC:9D:EC:41:83","sha256":"0C:7B:D3:23:E9:5B:D6:6B:F2:5C:71:91:4D:41:CE:E6:D7:1F:A2:F2:63:BA:25:70:1D:00:F3:C0:72:21:51:6D"}}},"request":{"raw":"GET /translate_a/element.js?cb=GoogleLanguageTranslatorInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 24 Jul 2026 09:17:06 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":75429,"size_decoded":27156,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2543)","md5":"550a2eda68037650660410e9cfa066b3","sha1":"d5630ba500c661ab4b14cb81226ce687fc31b21c","sha256":"f757f5bed21fef9077f7a928808359a0c2d90d029ec63f36f72fcd82e408d1e2","sha512":"4f4875fb001a4dce02e5c584ce77531dd9a6514290b3a574e841ca0dc31d84584242bd9865e9a70562bf446e5763a0da593d343a04b24917e3faafa22cde284f","ssdeep":"1536:XWjLpxIZnZzYOwRUSfl26KKZkXtmqR6Y06ECiGwNWF0:XDD4U6KKZgtBgtCic0","tlshash":"8173b88cb6a5b4658363f4b5412f000eb23b58adf8484cadb288d8e1adf5949453bf7d","first_seen":"2026-07-24T09:17:43.713572Z","last_seen":"2026-07-24T09:17:43.713572Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":43,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/js/main/bodymovin/plus-bodymovin.js?ver=5.0.9","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.088Z","timestamp":1784884626088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/theplus-pro/assets/js/main/bodymovin/plus-bodymovin.js?ver=5.0.9 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-17c8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6088,"size_decoded":1985,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5606), with CRLF line terminators","md5":"acaf5a579d667b5b45c00aab24651056","sha1":"d16aa9eabea8d41c810e9a2e543fafd026345c1a","sha256":"9f3c184072098f9358c503fcb508d56874939c66f06e233b3a5409ff2408de66","sha512":"9e342799471bb40e96bb46e6c80e5d0db565a74ea2f5e40505fc59d32008d7e70be7f535dbb3db2a66a8ee346f8285fd765a5343a43ca5406be5a443ac9b5e37","ssdeep":"96:2Yo3tq9ooQRe1NfGRtQsADN5qOsRjAive6sTqVT9eXYtQrYtJqVTQqgqVTQD8qV2:gtuooQyNfGRtfADN5qOYjAivetqVT9ez","tlshash":"bfc152ca7bb5a0742dff1917a05fb383223ba0f9e14543e714399a114e26e9711d326f","first_seen":"2026-07-20T13:42:57.54209Z","last_seen":"2026-07-24T09:17:43.715143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.104Z","timestamp":1784884627104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://icmrktexchtrad.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 23 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82769\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T12:52:35.233701Z","times_seen":242374,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/bitcoin","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.135Z","timestamp":1784884627135,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/v3/coins/bitcoin HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://icmrktexchtrad.live/\r\nOrigin: https://icmrktexchtrad.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T12:51:02.383766Z","times_seen":17502318,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.072Z","timestamp":1784884626072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-2673\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9843,"size_decoded":1413,"mime_type":"text/css","magic":"ASCII text, with very long lines (9804)","md5":"7342849b20f674bc6b2cddc07c5df504","sha1":"485bfb151b7ca1f5cab60b353113e2544c38dc52","sha256":"ed83017a905156aab441dfb38df329582a3f5d178248f2b085ce082af97e15a7","sha512":"2b50892b6892b399c47c36f32a52c486a1800cfa830a57c0accd1152196ab12409048e21c63b8bf14b719d62b3019f372fa796098acd7f194e445cf15d9d539b","ssdeep":"96:BrW9jCZ1KI/G+tl+A0zbjivihI7vA6kjW6AHReKuLjYvcv5VV:1W9SG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"1f12d3917d63814e16ff641b501b184ca1d9d4cde9bbecd5e8a66203c6fbec83b31928","first_seen":"2023-04-29T12:56:34Z","last_seen":"2026-07-24T09:17:43.716689Z","times_seen":79,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.096Z","timestamp":1784884626096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-23b5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9141,"size_decoded":4156,"mime_type":"application/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-07-24T12:53:26.402969Z","times_seen":260210,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.112Z","timestamp":1784884627112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://icmrktexchtrad.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 47208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:13 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:52:51 GMT\r\ncontent-type: font/woff2\r\nage: 158814\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":47208,"size_decoded":48021,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47208, version 1.0","md5":"2465bec3a1d5ad40ceb1828a07763d2f","sha1":"656fca193330ac8ec592a0942f4e7d718fa69cbf","sha256":"14f23757c6b41b4b6c0b967ca3fa74ff47a868728158373461c4e6e4b6368f19","sha512":"171195e97870d0794a5762cb3324c2994542a534f4e8ec490400f5667527c48c0c2814071fe9449f4d78169b2d35228466cfadea81229f6ebddf791dd3fb2099","ssdeep":"768:/FAcvRO+HWzD3hVYA6By+jNbKulKiuJ+YAnmWjKiXN0EoGlknbxWuFYCrJRSx89Z:33sD38k+jYulvuUHnmTq0bGlyFWuFYiV","tlshash":"6123f16ca80df34596fae4f76b11fcebf248bc9177c5ee10278c864d8575aa5cc28241","first_seen":"2026-02-19T22:36:20.820122Z","last_seen":"2026-07-24T12:56:05.883268Z","times_seen":18332,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.031Z","timestamp":1784884626031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-15492\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87186,"size_decoded":15659,"mime_type":"text/css","magic":"ASCII text, with very long lines (65497)","md5":"ba725f6aca17df0d859a951d55913237","sha1":"31cd5ace5dacbe3c9840cb8d666193062c144bbf","sha256":"9aa66b0a6ee3f512a4df7c0163b606ca9a215c2eee0e898f936e5f149abec092","sha512":"c5687ae819108632d2e2a1846ac52fed3669b5abda67020ff070e8ddd25ad8be6f48a6eefae2843bd5a7b211cdb7387ef711531ba73751211cdac0326fb27d5a","ssdeep":"768:kVOx6VYNE2x0r8xPl0E1673RrMs378nQtJybf9g3lrTfsGRh9sLf6DuGEY4PtQv2:kVOCSLf6yBYktQpU","tlshash":"428373627f13b22d616f093b92c3b65c536484c1da4376daf940c817caface5373a866","first_seen":"2023-04-06T20:39:45Z","last_seen":"2026-07-24T09:17:43.720958Z","times_seen":238,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.053Z","timestamp":1784884626053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 309\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\netag: \"29d-61375773f4340-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":669,"size_decoded":622,"mime_type":"text/css","magic":"ASCII text, with very long lines (483)","md5":"9eb2d3c87feb6bb2ffa63b70532b1477","sha1":"38f226335a05ab0e30497bc7419eb5e243a9e26c","sha256":"37bab6cd583982e8eff58501a99d7c5c4d63664c1ca34f9e3b7cf526c5b73ae2","sha512":"8d0ab38f6bc757103fc82a234fca5566328639ef549a862f9ceb8cff6b10d75d2fc626a3054fb85a4c91b3538332677801f9edc14115e09f957cce8391f8cb46","ssdeep":"","tlshash":"ce01f96e4646194141c10f1138d9fa5ded46f0a97c582f33a12adc2d8cf9e5f21b9f19","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-24T12:26:25.267552Z","times_seen":104715,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.057Z","timestamp":1784884626057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-3509\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5585,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T12:51:32.019296Z","times_seen":906671,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.089Z","timestamp":1784884626089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-14b3\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5299,"size_decoded":2738,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5256)","md5":"9967efdb27094786df14a518d27a4a33","sha1":"a1709ca517f09a0010595eba5d499445da27491e","sha256":"597bccbd72c39e7c565f557d9263093b45f49b33535f2248bcdf933f016b5eef","sha512":"65f050737407e54f2b667096368811b2923f5275d1088d167c0d3cd3c2ddf6b04ba264e820d5d655efc32f9719006a83fd3616e43c905fe590098d5747e4a45c","ssdeep":"96:BQQradUxdLKpSySVU604BmT+tDre1zl2JGVXLUV4ONelmQ5cen+8k2:mQuU7LKpvSVUaBmTSDrRGVQpSTrk2","tlshash":"2eb140d90a549d1b36e039d9b05bab741a3ed0723c19a981fa11ddec18e8fd083ea532","first_seen":"2023-03-10T02:38:54Z","last_seen":"2026-07-24T09:17:43.723199Z","times_seen":315,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/wp-util.min.js?ver=6.6.5","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.111Z","timestamp":1784884626111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min.js?ver=6.6.5 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Jul 2026 12:28:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5e1467-597\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1431,"size_decoded":1013,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1396)","md5":"01e9588ab46b7a3947aab8945549c7ea","sha1":"52441f583a054cd393699ba128cf803d5aa7c4ac","sha256":"900f2dd9f6b66295a51f90c15a9271145b7964d8032725b4647ac44b409ceffa","sha512":"31fcd4edabed77c0acefb5ba71f4ffa2eba499032583bfc0ff955f22f7dd7e6c078999100beedd937689da2661dfb9a456fc693598b516cfbae87c8a5eb8d0fc","ssdeep":"","tlshash":"d12179c5f156a9f3013334b9c33f4207b231d4149aa6d951a4c9c4f2ae70c96f5b7a29","first_seen":"2026-03-10T18:43:25.056772Z","last_seen":"2026-07-24T12:58:30.353521Z","times_seen":32491,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/salert//assets/backend/css/animate.css?ver=1.2.0","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.019Z","timestamp":1784884626019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/salert//assets/backend/css/animate.css?ver=1.2.0 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-6353\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25427,"size_decoded":4054,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1c7ad0a97d2dc2da70b8d855ae946cae","sha1":"7f3596852663437b7f89231cc750628a0d86e403","sha256":"cb09ab0572c6a6549a782e2843218c00285cb737ae50fe29a5061ca96aff0234","sha512":"c8a8a7fd2fb0793981faa0cd80ed876b58e0959784662360cc65b523f88d0a3c25067c00f3db353d2d432013c4d2b9a81cfd42e41aaba0fefc9581598883c958","ssdeep":"192:uNavX0fZtAXf4j3GQ20de0te8H9nlNApz81cV+DVa/ndCJZZPd3WKmj4CYPyNpu6:ujf4qGc0QsFtdk0j3qOkS","tlshash":"e5b249492d42144487b24779d7ebcf1cef2a54771c231abeb2c1058b5fa46b8638ed8b","first_seen":"2023-04-07T04:18:17Z","last_seen":"2026-07-24T09:17:43.724431Z","times_seen":2369,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.029Z","timestamp":1784884626029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-4b4f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19279,"size_decoded":4542,"mime_type":"text/css","magic":"ASCII text, with very long lines (19233)","md5":"d183c598fd582fe997f6782afed84f9b","sha1":"7799820e0e849e8484543c3360a8d8cc62baa32f","sha256":"83059e4c1a5c210e5585d96779fe655170817193d43e247c78dffaae7b7ba3a9","sha512":"866e470a37caaa1438f9cedada272039d383c19b6ecd5f57280ce916d3a83373cebccda4d697ecdee636beb121885af486dd466da93b4be8743c75a3ad0d1c7b","ssdeep":"192:Qx8XHGK+JRxSe6OSfNVsXZLUCpZETvebAmR+srfSbqkbQC4u/DUBMQ+b:zmK+JRQcx5ZETGNREmk4uBb","tlshash":"b782eba4e02922c92bb1c003e3d0774e7459f821eed9dd59fa5ba50c1fe16d3068ab7d","first_seen":"2023-04-05T05:36:55Z","last_seen":"2026-07-24T09:17:43.725037Z","times_seen":3526,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.coinmarketcap.com/static/widget/coinPriceBlock.js","fqdn":"files.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"108.157.229.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.069Z","timestamp":1784884626069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/widget/coinPriceBlock.js HTTP/1.1\r\nHost: files.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 57709\r\ndate: Fri, 24 Jul 2026 07:53:34 GMT\r\nlast-modified: Fri, 19 Feb 2021 08:58:42 GMT\r\netag: \"d84ed083f24aaeaff421e916ef72024d\"\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9a7e0d68b8274eedf8d6b7b815b568c6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: LEQ7KSGwOTP_vlbl6tjE_GzNUXDnyHJbXI6Y59GNl1ftz6L1IjNCyg==\r\nage: 5013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57709,"size_decoded":58177,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57618), with no line terminators","md5":"d84ed083f24aaeaff421e916ef72024d","sha1":"e132019fa4fe7f47fd26b18ae27dc1b858d1ba03","sha256":"6c176caf0c3c59f4cee2645a26055238d5658512526e28eeb307892641170d80","sha512":"e569ead05918b41ef7b52b3b04e418da4bbd0c2f2750aecaf9aa39e978c6eba1206f7e6724badbc1c9fb8949f4da0ba3893a25625702c562c6adf083bfb1bb6c","ssdeep":"768:6Y4hcNGbZ7EX8bsyDHCjP9ey4i+qNBc+fXgfYcs1K3nf4sZELk+CuIZELk+Cu6yc:6ZUsZ7EX8bsyTuXArPH+CJ+Cyc","tlshash":"e2433bda72d1b1ae4263e3b4583b0215b37f2d3e758ac650f214ddc1ae7a85c8613f68","first_seen":"2023-03-07T16:52:43Z","last_seen":"2026-07-24T09:17:43.725909Z","times_seen":184,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":32,"connect":8,"send":0,"wait":32,"receive":10,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/js/main/section-column-link/plus-section-column-link.min.js?ver=6.6.5","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.108Z","timestamp":1784884626108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/theplus-pro/assets/js/main/section-column-link/plus-section-column-link.min.js?ver=6.6.5 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 254\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\netag: \"1d9-61375774e8580-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":473,"size_decoded":581,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (473), with no line terminators","md5":"0fd6b8f82e2e09df0c72594344ff21e9","sha1":"d329cdf6fbea0f0b8b02459efc587d7d4e841c14","sha256":"62c68bc8fc746c27e47cb9edc77eebdc70e6df9a0724e7baab0bb516740ba7c1","sha512":"3effc4e00d7c0d357e27a3edd9dcb537d60d8784ee262ad8993ec5923c8b47878169cacb4ef1f69e90f83774f269719b47c707813a9317efebc00a0aa5e9307d","ssdeep":"","tlshash":"4ff05c11b0d837510a63adb1c12bf728c002f53a163078458fb899fb4daf54e31a6334","first_seen":"2023-03-07T14:31:45Z","last_seen":"2026-07-24T09:17:43.727561Z","times_seen":665,"resource_available":true,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIAABw/d=0/rs=AN8SPfpC04vrrzQXgs_TCM5EtruwfPzNtQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.142Z","timestamp":1784884627142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIAABw/d=0/rs=AN8SPfpC04vrrzQXgs_TCM5EtruwfPzNtQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:44 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 158783\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-07-24T12:22:45.627111Z","times_seen":15948,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":5,"connect":14,"send":0,"wait":15,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/theplus-addons/theplus-post-6.min.css?ver=1722405933","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.023Z","timestamp":1784884626023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/theplus-addons/theplus-post-6.min.css?ver=1722405933 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Jul 2026 12:58:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5e1b8f-1035f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66399,"size_decoded":12660,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b0febddce3b6772cb71d86147c13401","sha1":"f6e5bb06771b1bc027d0d35f8256c828126b32a0","sha256":"4da7a1e0f5071602faad03b5115f9ce0e746ed8a54c24ef3f26d609bad130683","sha512":"7036d407c344c7a4f647d86124c51796dc391415a7e8fe035e9e5f9966f977098f528bcebbf12de2b11bd251fae2ba816aff9e8535ec451594711e19b0df9718","ssdeep":"768:k6yZymZfRBw7dew58DBIzM4mX3kdPzZg1Xnf6leNx:k6yZym9RBw7zkBYM4mX33tx","tlshash":"1d532362189a214dc137cf1e9bc8675c5a3cc653f92348de7382351bc34b69933a769b","first_seen":"2026-07-24T09:17:43.7305Z","last_seen":"2026-07-24T09:17:43.7305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.036Z","timestamp":1784884626036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-e7d0\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59344,"size_decoded":14997,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-24T12:50:48.839878Z","times_seen":109441,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.054Z","timestamp":1784884626054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 308\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\netag: \"2a3-61375773f4340-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":675,"size_decoded":621,"mime_type":"text/css","magic":"ASCII text, with very long lines (489)","md5":"144e43c3b3d8ea5b278c062c202c92f2","sha1":"3c037057a419245849747b4762d09d88cab66fc1","sha256":"9cd63b8cea25045c14623c538d26752518a58c0c682795ce6ad3078976c65a37","sha512":"6a95fcac537f2b1256f2b9e241b92fcebb214372afc841fee2ccd3dd29e8e6cbddafa13f08fd1013ceb6c8478b04c5270aa2e4a3c41aba01a4cef592eee35f15","ssdeep":"","tlshash":"360149a506110045c2820b063adfbe1dad0ae2587c296f63e12fdd2d0cf9e5f21faf49","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-24T12:50:48.902487Z","times_seen":80320,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.062Z","timestamp":1784884626062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-3acf\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15055,"size_decoded":5052,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14869)","md5":"7a5dea0a705cc2f4cd87dbaaa6666bc6","sha1":"678bc6f750f13adb29bbc158eb0d9cd813b736fa","sha256":"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264","sha512":"7c19d0edc28fe8733075534de6176483416bb3535f37b7607536aea2ddf9c5591d864225049c9a74735c1daf44c72688d91c1133bb018683ade11f16ea596807","ssdeep":"192:bP6Vw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3o:OX8fajqZFwtdykZwRXcoWI2P9o7S3o","tlshash":"0462337b7d000da93cac595852a27d446d4eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-24T12:50:48.799437Z","times_seen":13082,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.16","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.074Z","timestamp":1784884626074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.16 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-35e5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13797,"size_decoded":4019,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9ce2ef9c51d872136c9bd85bd5428ea8","sha1":"4b4f270db4ec228296f5127f22df9a0b502cec84","sha256":"37b945e5fe609563e83b37edcbfe3d18aac072a55fc8962978afdf597a3c4aa8","sha512":"4312eec2e116c5cbfbe6d66accb809c080c7763e98b99b18e594f07cf3d9dd149020e3f2637b0e14079b52e09aae491ff9a30a84bebe5ffa85b4bbc0095e4d98","ssdeep":"192:fnSHUWjvjwiEiO+R8Ua+R8ako5hUqDMzYySrtFisf3fKLDMFsD60Cld9H8mUxmY1:fmzjrwbcawCqgbSY3","tlshash":"3452b818bcf611604133f87f5baf6006f13a8a13600dea903dad6ad05f954a557eeef8","first_seen":"2023-03-07T01:18:43Z","last_seen":"2026-07-24T09:17:43.73472Z","times_seen":492,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.104Z","timestamp":1784884626104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-6a54\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27220,"size_decoded":7532,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27177)","md5":"1d4f82a35c4126e9a8914985fe5a5377","sha1":"92ee0419bbdae2e997ed65f669f1a29bc86314eb","sha256":"69915962b222c2223e572ff15ab6413b0acc2b60aa0a72cb7d5d4871c4394d6f","sha512":"9561d51a3da1f65f4abe3829f4ccf4fb1966cb8edd2b6c913ecc9b4dc65b65c2912003ea3245e75b346f7cd11e67c03c3e862ebc0cf8aa9f49cca4174bbb50fd","ssdeep":"768:kCr9p7ldwdddrdDdVdydOdad1dpd2dqdJwCntORUyqzucs8SykipnJdk5N/byx0a:D35C/dRrIM4D7YATwCntOR/qSxLipnJ1","tlshash":"f4c2952071aaca34408fc4abf423268fa7229cacb513f5d776fd8d91a564e876390771","first_seen":"2023-03-10T03:38:14Z","last_seen":"2026-07-24T09:17:43.735714Z","times_seen":163,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:500","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.732Z","timestamp":1784884626732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Montserrat:500 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 24 Jul 2026 09:17:06 GMT\r\ndate: Fri, 24 Jul 2026 09:17:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1866,"size_decoded":1218,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2925f411d727d2a1d34ba3a8c1374789","sha1":"f28e73d3c04f4c43c6bc43bfc33e7433143f7734","sha256":"2a3aafb8536dcd3fc2d2cfa80c3dc4ad0bfe27f07970a345e670357aa540cab1","sha512":"6f0a8b381531d72c1ff45e430327f5c3c151de11b23bad83cc9c68d1f1dfafab67653e10ecf8f038944486aaaf498f49574f1b9090a4312adfa20b5ed0478266","ssdeep":"","tlshash":"2231bb511116e900b7431cca23ce7d26ce8e616674a0c076bffd1ca8aee9c260335b6d","first_seen":"2025-09-20T18:39:25.661149Z","last_seen":"2026-07-24T09:17:43.736616Z","times_seen":274,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.106Z","timestamp":1784884627106,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T12:51:02.383766Z","times_seen":17502318,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/elementor/css/global.css?ver=1722405932","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.041Z","timestamp":1784884626041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/global.css?ver=1722405932 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 06:05:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d42c-1d6b5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120501,"size_decoded":10868,"mime_type":"text/css","magic":"ASCII text, with very long lines (23130), with CRLF, LF line terminators","md5":"096e7fc7b958cd25c5c74434673618c7","sha1":"9ec4e2dbacb0fee3b4bbc78d5cc134effe5dc258","sha256":"4ef82515c94bc65c3eac6720f02f45507b02d9df3471e04761d0a0eab905d630","sha512":"2464b6a422ebe57dbaf7f1f5bb535b2ccb98a53802f6d729dbda56e6c53ae6ab9c2cc8504a63ec3f150c845e3ea4fd97980b8e69ff88d4e7e9663406868c8488","ssdeep":"768:QqRDkZTOXLYmSm0mamzwmdm2m9mOm6mEmdO0urnhOT:QqRDkZ0urnw","tlshash":"f8c3e69c3826e125f477084f784ff478282ca4ee5c5bc9f7f449465689ebf2a6328718","first_seen":"2026-07-24T09:17:43.737154Z","last_seen":"2026-07-24T09:17:43.737154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/elementor/css/post-458.css?ver=1722405933","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.043Z","timestamp":1784884626043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-458.css?ver=1722405933 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 06:05:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d42d-4bab\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19371,"size_decoded":2434,"mime_type":"text/css","magic":"ASCII text, with very long lines (19371), with no line terminators","md5":"40e6defcaaa139260dff639a1b874577","sha1":"82c7a1585c54c251ce3939ed6a874061935cbc8c","sha256":"8f4da3d1b4325632c1afb7b631ead43ad6c57f2868f0ac4a3eb5726416d7f769","sha512":"05991e1cfbd6956bf373b4d06b558c9dd17633571174044961fbea2ce9a0fead4f54400bb8a2ebe7d61d10c4ade8c1c6167ed18302dc677ce6e313cfd3b6a7bb","ssdeep":"384:JPPmaQXjQTyDCW/MmkrLHKjVFg2KIPgQg3:xPQCW/MmkrLKBFjKIPJ0","tlshash":"f19200857c53453c72bf318ba107aacc69246cced679b6f2e8214227f439da13be09d1","first_seen":"2026-07-24T09:17:43.738294Z","last_seen":"2026-07-24T09:17:43.738294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/elementor/css/post-6.css?ver=1722405933","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.042Z","timestamp":1784884626042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1722405933 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 06:05:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d42d-7093\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28819,"size_decoded":2972,"mime_type":"text/css","magic":"ASCII text, with very long lines (28819), with no line terminators","md5":"bd4fd68cfc5400be51995fbe863ba873","sha1":"45c2c068123929eb93bf5ef27d4feccbae54efa4","sha256":"128f5ec0a667fd2eb92e9e96faf4dfb56894e332c0b2e0aafd41a9b1112e2e4b","sha512":"aeb72014bc9ed683c8b601529f48c80c8f54fdbd56880eab8179f9b7fcac49f0a6db021471caf660d58d931fff1116d5e772051513ebb2e806c459565e6a478c","ssdeep":"768:mScweBstzh9EvzGfzcS0T5MtuU44wcBvbgOSOPEPAPohCmbdS7ezLsyif:Dh9EvzGfz+U44wcBvbgOSc2yYCmbWf","tlshash":"e9d2ba957c4b572c752f614b1113a68c61344cd8ebbcb6eaf9726823f075c50b3e2ea2","first_seen":"2026-07-24T09:17:43.739392Z","last_seen":"2026-07-24T09:17:43.739392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.067Z","timestamp":1784884626067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-277c\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10108,"size_decoded":1297,"mime_type":"text/css","magic":"ASCII text, with very long lines (10069)","md5":"22beafbaa75e589b1a9d2a63749be421","sha1":"4fb12b93fef2b00ec52aea70ff311d96693ce826","sha256":"bdaafd99ed465abaf3bb79539445536f596e70f2b6360730511518c0e69eccda","sha512":"1648a632727b0321c145ed0106e7ee6d27badd063c9f82a977d282e4b84df800726a36562b236c425bc518f6389055d122a069c79db65ee0e8eea3e24150ffa6","ssdeep":"192:ANybUO168knWfVcABTJXPEac1ZFuEKguKU:EU","tlshash":"da226f463d6751066a2fa51b5b83250db06048d8ecd7ed96f892e903cafedcd3b12c78","first_seen":"2023-05-10T08:57:45Z","last_seen":"2026-07-24T09:17:43.740639Z","times_seen":52,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.9.4","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.073Z","timestamp":1784884626073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.9.4 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e7-4227\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16935,"size_decoded":5077,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16935), with no line terminators","md5":"423e4eab18767461cb68a11c5b2a0cb4","sha1":"d5c17c5fbecfe815e7c27347155158e90e9fb709","sha256":"d6a23f9c4dec2f455c8e2340a99ad4db01a1d538bb1f2537bab3991ec64e14c7","sha512":"15feb39953f808f7578508f00d9daea092f47bf52875cbc6f6f2e93f700856f9e6631f4d23310d88986aed72cea4deda0b0517ca2d72c76f19801b5d182d51d9","ssdeep":"384:uYwLboOAySjd5yUa3oDo3oYCJLjanUyCdyGvyo+UylJNj4pyCAwyNCCBzycEQysD:uYwLboOvSjKU4oDo3oYCJifRo+LlJNjP","tlshash":"3d7284a66200253604ff1beaf4daaac8767024affe0944115979cc2e19b4fd351f1afd","first_seen":"2023-03-07T13:22:33Z","last_seen":"2026-07-24T09:17:43.741201Z","times_seen":1001,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.9","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.113Z","timestamp":1784884626113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.9 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 386\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 12 Mar 2024 12:04:55 GMT\r\netag: \"303-61375775dc7c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":771,"size_decoded":713,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771), with no line terminators","md5":"2399ef783701f73c399589ae95298b0f","sha1":"3e1f2a7ac9dcb2b50b1f1cf768441e46fd9f62ee","sha256":"2dea57483641f8762937dfd9b09126a9b21c88bd3d7486186003e0bbb9043145","sha512":"50f1c2b16c8c2fc62c504a33529dcef3fdbdd1533206c8779772cbba1a336c7c5bbb533a35f99e559aded3d1bf0c858c10a04ec083969f47a29deac92e366fa1","ssdeep":"","tlshash":"3901bd34b437beda1c6f122414af138fb266d4b3b2069c91972095b41e71dca634bf88","first_seen":"2023-03-12T15:10:15Z","last_seen":"2026-07-24T09:17:43.741765Z","times_seen":10468,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.109Z","timestamp":1784884627109,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T12:51:02.383766Z","times_seen":17502318,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.110Z","timestamp":1784884627110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://icmrktexchtrad.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 23 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82769\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T12:52:35.233701Z","times_seen":242374,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.111Z","timestamp":1784884627111,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T12:51:02.383766Z","times_seen":17502318,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.scrnY6Q2_yw.O/am=BIAABw/d=1/exm=el_conf/ed=1/rs=AN8SPfq1KlUFqeiFvBMudduzGtb39QWXuw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.143Z","timestamp":1784884627143,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.scrnY6Q2_yw.O/am=BIAABw/d=1/exm=el_conf/ed=1/rs=AN8SPfq1KlUFqeiFvBMudduzGtb39QWXuw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T12:51:02.383766Z","times_seen":17502318,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/css/dist/block-library/style.min.css?ver=6.6.5","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.011Z","timestamp":1784884626011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.5 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Jul 2026 12:28:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5e1467-1b72b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112427,"size_decoded":19337,"mime_type":"text/css","magic":"ASCII text, with very long lines (57765)","md5":"319580d7d8944a1a65f635e0d11e5da5","sha1":"e23bc18ef1b0f78f7010e3c16e4c5e1f333248bd","sha256":"fb3a89cc6347e098063bd15f285bc90411846ddce6f17812364feedab67a67f5","sha512":"743825eaea11208277528e506c115ec786ab060095ae4250c65a9b02fe9e5cb2ac5ac386532486a2678b9615490ce75ba096a9fd2041200989ad07a726b5d9d0","ssdeep":"1536:pZeJWfZglWQg5MG7+qehN2pUkxWLZQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LaU3Pq","tlshash":"51b3614417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-09-10T22:43:30Z","last_seen":"2026-07-24T11:22:00.735319Z","times_seen":15478,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/salert//assets/frontend/css/style.css?ver=6.6.5","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.021Z","timestamp":1784884626021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/salert//assets/frontend/css/style.css?ver=6.6.5 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-afc\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2812,"size_decoded":1171,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ad485160514e1f2d1389120b436d47ce","sha1":"4541ab077c825399f1eefe841b01e88b844d1486","sha256":"9ae36444a83471502d2e5aa6c639a040003071409425ae27d6c3e777c929d067","sha512":"a6c0f34a44f3245735bac24c8b45506f548f358e31b3256aefc98acc833ed94e105f42584f8f36d52fbffaf85118512d14605130c9608278b765b5cc8de7896e","ssdeep":"","tlshash":"575137688912b84a233aab7d7f1d152ddd2804235743187c3ddce25e1ff6a662922f8c","first_seen":"2023-05-18T11:59:24Z","last_seen":"2026-07-24T09:17:43.743938Z","times_seen":93,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/elementor/css/post-9.css?ver=1722405931","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.033Z","timestamp":1784884626033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-9.css?ver=1722405931 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 06:05:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d42b-488\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1160,"size_decoded":627,"mime_type":"text/css","magic":"ASCII text, with very long lines (1160), with no line terminators","md5":"b2b45778676d1151e444e630868632cf","sha1":"6b9fb23e99647fba5ed3e56d6c8b892aebefe579","sha256":"6f1f8707aa0e044bfd23b42c096a11b8bc6bb2e3ce9a55200595fd939a6ab7fb","sha512":"0886f1430cef1d30b30d48c46a5559f9d3b97df39cef7948ea2f3383aafc5834ad55a67aa87222ef4eec6068f471a6487a1b513be2235033def42045cf55fe2e","ssdeep":"","tlshash":"c32167457a23d036e0bb092fd1c3b02c012cd45b625fcadff41d8649f9bfa0a6229643","first_seen":"2023-04-06T18:31:04Z","last_seen":"2026-07-24T09:17:43.745093Z","times_seen":19,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.064Z","timestamp":1784884626064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /external-embedding/embed-widget-ticker-tape.js HTTP/1.1\r\nHost: s3.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 09:17:06 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1837468\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=300\r\ncontent-encoding: zstd\r\netag: \"2671d4a92091986b7abd2e1e685669ca\"\r\nlast-modified: Wed, 22 Jul 2026 10:59:32 GMT\r\nx-amz-id-2: HzKer0f/FAWIe0cA7Q9xiCN7llgbx7NV4JiQtL+qvOoMj/g+KuyDZ/MEzCXUzXrpfhtg//uTUgt/EbVRH8K0/QsM5LE1TkMs\r\nx-amz-request-id: 93424AST0NN965QY\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Ww9.dAQWDLm_LUvG62Tq.ufccJTAF9qC\r\ncdn-proxyver: 1.58\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncontent-security-policy: default-src 'none'\r\ncdn-cachedat: 07/22/2026 11:24:26\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e5196183e088c331ff50f16893673982\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":13608,"size_decoded":6256,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3458)","md5":"2671d4a92091986b7abd2e1e685669ca","sha1":"b59db96af3dd1593356058703fc7af3cd7269919","sha256":"986cfef49d6a6ccd5cb1f1cbf562e8341ed581936885830831a2f4c3dc2b5901","sha512":"c07159fc500c72469ba6dfb7ccf5afdbaf476906fb039e5bfc7ab2c95e79b0067a47e6e02ad44915b9ba426273dc39996ffb1899c029253b56e4b02f7d419883","ssdeep":"384:gf6uCWoofYkFdjhUjrb26n0q6Or26ZMViZMEmkfknYH:uD5Unb26nD6Or26ZkFE9fknE","tlshash":"8e52d8a9b660ecbd51d945dbe07a2321b6193944b203aca4b9ecd4c510fdccca131f7e","first_seen":"2026-07-20T13:42:57.5385Z","last_seen":"2026-07-24T10:20:21.71881Z","times_seen":548,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":2,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.078Z","timestamp":1784884626078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-d64\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3428,"size_decoded":1458,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3248)","md5":"dd6a0d8d7b3e0afbbc0bbb417dcc387b","sha1":"0b38c782da1c8ecc6bc7e854f8841fb9d2c86e35","sha256":"f36adc07db49e73c3fd3aeb4234d270725f07719706dd28dfc09657f2cffe9d6","sha512":"e0963a8c2de54ca9a29d2f3fb0adf54946172e11589f0da3dafbf603b9f38c7a4a8a977465b0a9c32da9d4127d916e60c390dea1e17d55b3edee0b760401135c","ssdeep":"","tlshash":"d161ba8e33145e8342931336d23bab4b7d3180d9640ad51dbb39acd83a2c93961b69fc","first_seen":"2024-07-16T20:36:22Z","last_seen":"2026-07-24T12:51:15.128473Z","times_seen":55645,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/2026/07/logo-white-181x115.png","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.133Z","timestamp":1784884626133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/logo-white-181x115.png HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 10851\r\nlast-modified: Mon, 20 Jul 2026 12:45:55 GMT\r\netag: \"6a5e1883-2a63\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10851,"size_decoded":11077,"mime_type":"image/png","magic":"PNG image data, 181 x 115, 8-bit/color RGBA, non-interlaced","md5":"eb3d7c7633463b3f0beb3adfe43a7a92","sha1":"3b45f3d87b4b636d4f5f4e51da8ee7c39112ec84","sha256":"87fe8fe5970daf5ac1d9ac1fe2bea9fc391ef91301ca5387e8fee931adfa8711","sha512":"ed86c546af48faa92773e986a349b4c699c8ca14b68bc7e016fef1a2ae51eab1418f6f18dee8605e8a1ed3143490a767f2d59e8aa7c27d1765f3970571ac0f01","ssdeep":"192:7Z3KPtPVuZZxZKJc/C1+8nQ2W13OmtPfEKuS+Wzdpn3489BGHNHxZgE8Yy2L1:79GdexZGXQ2W13OkEKYWBpn3p9BGHRmo","tlshash":"3722cfd877809f92b262ce0e5312b8e92e4dc334b00b5b6a5fb6c114110b2bd9971e6f","first_seen":"2026-07-24T09:17:43.748423Z","last_seen":"2026-07-24T09:17:43.748423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.108Z","timestamp":1784884627108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://icmrktexchtrad.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 23 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82769\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T12:52:35.233701Z","times_seen":242374,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.100Z","timestamp":1784884626100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-2fa6\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12198,"size_decoded":3752,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-24T12:51:52.236073Z","times_seen":73431,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.114.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.937Z","timestamp":1784884626937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://icmrktexchtrad.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 24 Jul 2026 09:17:06 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://icmrktexchtrad.live\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=8\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3,"size_decoded":555,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-07-24T12:49:27.17325Z","times_seen":426035,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":23,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22proName%22%3A%22FOREXCOM%3ASPXUSD%22%2C%22title%22%3A%22S%26P%20500%22%7D%2C%7B%22proName%22%3A%22FOREXCOM%3ANSXUSD%22%2C%22title%22%3A%22US%20100%22%7D%2C%7B%22proName%22%3A%22FX_IDC%3AEURUSD%22%2C%22title%22%3A%22EUR%2FUSD%22%7D%2C%7B%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%2C%22title%22%3A%22Bitcoin%22%7D%2C%7B%22proName%22%3A%22BITSTAMP%3AETHUSD%22%2C%22title%22%3A%22Ethereum%22%7D%2C%7B%22description%22%3A%22Dogecoin%22%2C%22proName%22%3A%22BINANCE%3ADOGEUSDT%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22displayMode%22%3A%22adaptive%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A76%2C%22utm_source%22%3A%22icmrktexchtrad.live%22%2C%22utm_medium%22%3A%22widget_new%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22icmrktexchtrad.live%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.223Z","timestamp":1784884627223,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /embed-widget/ticker-tape/?locale=en HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T12:51:02.383766Z","times_seen":17502318,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-24T09:16:58.007Z","timestamp":1784884618007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 36091\r\nlink: \u003chttps://icmrktexchtrad.live/index.php/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://icmrktexchtrad.live/index.php/wp-json/wp/v2/pages/6\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://icmrktexchtrad.live/\u003e; rel=shortlink\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"Elementor:3.9.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Translate WordPress:6.0.16","description":"Translate WordPress is a website translator plugin which can translate any website to any language automatically. Translate WordPress plugin is now a part of GTranslate family.","website":"https://gtranslate.io","common_platform_enumeration":"","icon":"GTranslate.svg","categories":["WordPress plugins","Translation"]},{"name":"Underscore.js:1.13.4","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WPForms:1.7.9","description":"WPForms is a drag and drop WordPress form builder.","website":"https://wpforms.com","common_platform_enumeration":"","icon":"WPForms.svg","categories":["WordPress plugins","Form builders"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.6.5","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":272058,"size_decoded":36547,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (50108), with CRLF, LF line terminators","md5":"a1944efc521498d1b5601fc62c784a35","sha1":"ddb7bbbd491a76e4a05d3bca37eaa62e14c95fca","sha256":"44b2672ff9b743efb97e422761911949eabba4a0f3b08eb4f01cfb421be2bdf0","sha512":"cd0c350ac48c1abf15759899695109aa5405cc1f2eccb547af6b2cfe1d73d24174c73f6903acd2f6b115e8179e2121aa8dbcd0a5673dc6166aaa9f4e46002297","ssdeep":"3072:1uPRzwCzocHCv3fJ2IoLx5RtuiyEqgGKO9WMzbb+Ir9UWPMDgPLrKI1Z5EV:1zfJ2IoLx5Rj","tlshash":"b844d5053a54e86a615f0b7f92b73e38b0c9c9d7d9cb28a4b57ee52013f0e723352616","first_seen":"2026-07-24T09:17:43.7536Z","last_seen":"2026-07-24T09:17:43.7536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7812,"timings":{"blocked":0,"dns":97,"connect":190,"send":0,"wait":7127,"receive":0,"ssl":399},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/pum/pum-site-styles.css?generated=1678551085\u0026ver=1.18.1","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.046Z","timestamp":1784884626046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/pum/pum-site-styles.css?generated=1678551085\u0026ver=1.18.1 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e7-4473\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17523,"size_decoded":4378,"mime_type":"text/css","magic":"ASCII text, with very long lines (7454), with CRLF, LF line terminators","md5":"b4e62f3b386f783d2d1e55915ef027de","sha1":"18c6b5bad8631c33679758f9c81046c46c33d310","sha256":"b5fe23198039b066fa034e75d8907a153a210aa4da7259c2eef3ef6cd6bad0c2","sha512":"6dcbdd691737d5923e064c40f3e65080b3782167bd09cac73a2f656a9490966a223ee2203cf68135705587559b782aa8186cf22fd3d623853f12fdc80a1b84f7","ssdeep":"384:fGawDBqnGGt3BMiv/g/zmF+MIjlI/7/yNk59IcejgMZw/k3OVAIjeiCZW/k6O9Tg:BdRglWWoTwomkBnXUHSnZRz","tlshash":"e872443006710350b1a7f7387af1ab9d1b27b121c642a2ada6da1ca9c3cf17bd1c275c","first_seen":"2026-07-24T09:17:43.756827Z","last_seen":"2026-07-24T09:17:43.756827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.051Z","timestamp":1784884626051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-e238\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57912,"size_decoded":14686,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-24T12:50:48.858536Z","times_seen":27483,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/js/main/pre-loader/plus-pre-loader.min.js?ver=5.0.9","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.060Z","timestamp":1784884626060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/theplus-pro/assets/js/main/pre-loader/plus-pre-loader.min.js?ver=5.0.9 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-207b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8315,"size_decoded":2296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8315), with no line terminators","md5":"0cbf9604ea75a0835158da7a89cba3c4","sha1":"0217844f73f67860393688c17382297a51e991bb","sha256":"8421a3bdf342aa348d21644c345679a4346e2201bcb03270b935da35f2f3536a","sha512":"2fc7af3e0793d3ea2751897b68fb43f690323b512e1790adcb2a948464c2c3ea020a61b3a3656bc669e128c4f4daabaa48f9ec6f2afb086654407368e9525281","ssdeep":"192:jECO77d4JKwRgasi77d4JKw3q0X80waJMQCgS:jED2g42gCqJTUS","tlshash":"ee02c26ea172cc848631d445d1dd65207deadd73ae0af8f3782000df9fe5ec960a864e","first_seen":"2023-03-08T08:33:16Z","last_seen":"2026-07-24T09:17:43.759818Z","times_seen":84,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=\u0026libraries=places\u0026sensor=false","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.114.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.061Z","timestamp":1784884626061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"GET /maps/api/js?key=\u0026libraries=places\u0026sensor=false HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nvary: Accept-Language, Origin, X-Origin, Referer\r\netag: 7ffc4086\r\ntiming-allow-origin: *\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\ncontent-encoding: gzip\r\ndate: Fri, 24 Jul 2026 09:17:06 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 381032\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=84\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1346442,"size_decoded":381607,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12238)","md5":"b0ee2f4ad94fe8d0836acef9ad8f1a00","sha1":"672ecb9a8f1b620bf0b1f45d9801b6e831328549","sha256":"a3f248bad32da5db1c2907ceb023fead907953736aabeebe23a794267d9e9b5b","sha512":"9aadd64afb7b45a19ec7c5e88b79b9fb8dc3d77844decda45d5a8a8b33fab91b7146ce3291c245419476f728b1a0536cfe4b4507e7d2951d2cef779a53c1fc65","ssdeep":"24576:yaK8x49nhJeygp/sMKgJLX4anD//1SN8SKvpo9Kxex/xMzgnUw:yaK8x49nhJeygp/DKgJLX4anD//1SN84","tlshash":"23255c6c7262336aea73c465c21b2106a134b487f10489bdfdbcd9d29fe9d8581f6738","first_seen":"2026-07-24T09:17:43.760873Z","last_seen":"2026-07-24T09:17:43.760873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":95,"receive":41,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.076Z","timestamp":1784884626076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-53d8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21464,"size_decoded":8185,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-07-24T12:23:03.90529Z","times_seen":41634,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/pum/pum-site-scripts.js?defer\u0026generated=1678551085\u0026ver=1.18.1","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.085Z","timestamp":1784884626085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/pum/pum-site-scripts.js?defer\u0026generated=1678551085\u0026ver=1.18.1 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e7-110ab\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69803,"size_decoded":21055,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65398)","md5":"d6cf4658819bc78cb3cefdafe63b627e","sha1":"05faa2c0518d1123cc0ffbb69576407be8ce628d","sha256":"dab5f417cc9ef69c9633620a9953979900afcedf4a64b6ca24a059bf1c566ec2","sha512":"9a3752c8fc6afa628278c0bf7243e63ccd1e9665a78ed6599681dfb20403ae38d6de9ff0b906b2ec634d07bfc0aa2d68f167c9b1bfd6a7fa6b8148ca7b00ce6c","ssdeep":"768:phzDCGf7aI8FKN9Z8Ios4ffc5/xV+jBXkCjnLIpgGV5COhoCRPaT:ptCGf7aI8FKd8IQffc5/snLIpgGV3hTQ","tlshash":"cf63098d7c90b69242ffb178516f160ef3338869211a5c90b56888b53fb9d8f4263f6d","first_seen":"2026-07-24T09:17:43.763476Z","last_seen":"2026-07-24T09:17:43.763476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.091Z","timestamp":1784884626091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-135d\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4957,"size_decoded":2519,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4918)","md5":"830cac1ec36685cc6054d87bc1c5a021","sha1":"8a016c59bd31fab553ecd47bb9bbf00edc6101af","sha256":"8e6eff98ff6c13a3724e93e342adc61569fad0849034249632e3dd3433395986","sha512":"0cd80ef974ed9b13530ef71e90da674d08ff442021dea1293195e0226e9b62042d5ca642a1e22001c7f460d53af8f079e242785f2d32f3948706c6f9f13edea3","ssdeep":"96:BtN2qApjqn93zhUf8FDFlaZxVkbVLXkmfjQeziNF8o2:HNQj493t7FD2xkdXkOGmo2","tlshash":"30a121d41ba0fc6b35e135c8d11a6771652fc0333c1bb881fa22dced98f8a9187a9971","first_seen":"2023-03-10T01:48:32Z","last_seen":"2026-07-24T09:17:43.764808Z","times_seen":390,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.052Z","timestamp":1784884626052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 308\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\netag: \"2a5-61375773f4340-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":621,"mime_type":"text/css","magic":"ASCII text, with very long lines (491)","md5":"3eef8c9e589a6fd58292e79bbac4ba5d","sha1":"d3ebdb629b8d9c92380b14b1676b123398f0841b","sha256":"eea3d6ccda7f6503078cce9dc41176c1357af1c93a5b3625131ef7cf21c9d7c4","sha512":"36a72de0983c898c0546cfc2df8863005e688391ce344da6aeb515d49654b3007e614eef6123f222318cabe1004180e63ac32e3bd54884aa5151aec68d129596","ssdeep":"","tlshash":"770170b94795004541910a0038e97b19bd4ad46cbcea7e63e61ade2d0cfa91b11d4f08","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-24T13:14:08.433067Z","times_seen":45645,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.095Z","timestamp":1784884626095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-10d3\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4307,"size_decoded":1875,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4272)","md5":"072d3f6e5c446f57d5c544f9931860e2","sha1":"ee6aa3d65b474309376468b24bb6f829a4514809","sha256":"2cb546fbdda7995d374fffa4b2f6530bbcf57d014639ddf76de45df43d593045","sha512":"19ceb31ec694ac5c42a0a7b02cfc1c31ddfc033dd62916a1c55bbbdd2435e21f73127c539687633e96f2706b2d75c37609b44a9c9462b63f9f96795cb4495968","ssdeep":"96:vHyiUGUQs6c7DE/3sc/YrEBAr44BPwKxbqtNMHlWh/C2fWRi+RRmps:fyiUGUQ/cHg3NZBT4JbqtNMHiC/RiLps","tlshash":"6d9133c438927870a2637453f4bf14d57279aab2713ac4c1a24dd4e12db39cee0a7a7d","first_seen":"2024-04-03T08:25:08Z","last_seen":"2026-07-24T12:21:10.854612Z","times_seen":32892,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/js/main/event-tracker/plus-event-tracker.min.js?ver=6.6.5","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.106Z","timestamp":1784884626106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/theplus-pro/assets/js/main/event-tracker/plus-event-tracker.min.js?ver=6.6.5 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-a92\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2706,"size_decoded":1020,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2706), with no line terminators","md5":"a597e26ce44328256038590a7d34ac79","sha1":"651fdfc880e171ae7ed2219b0c7581ae884126c3","sha256":"25345ad27f4f72848c9988a605e5a70fa98a7cfe5b34031708dd610f41fdcaeb","sha512":"24737fc295faae333748325cf92b668321b9c3351caf8aa6c1fcd2cb7f45dc442d62a680e904953032fec1734f82a2f972f476982ede2f72c15f0f1792cc03f0","ssdeep":"","tlshash":"aa516d99765b1179a1bf286e6adf1626073e78f7cb08cd11d6450ca01f7cd193057ae0","first_seen":"2023-03-07T14:31:45Z","last_seen":"2026-07-24T09:17:43.766898Z","times_seen":113,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:07.182Z","timestamp":1784884627182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://icmrktexchtrad.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 23 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82769\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T12:52:35.233701Z","times_seen":242374,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.034Z","timestamp":1784884626034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-2248\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8776,"size_decoded":1899,"mime_type":"text/css","magic":"ASCII text, with very long lines (8733)","md5":"03cb4bdfbc87917cb45c4e3b3b9510cc","sha1":"38a824ad6285328dfc10baef944dd64239ed9397","sha256":"3c1c15f954540a4edc32b15adfc2cb4f2a0388bda6892bf6f1cce13ea0d05c2e","sha512":"555a82d5a0166d67bdf73ee63c92d6f6e70bd44f578de350c7048155d57ee87f46042a53a76e7e80e8841ceee7bb080fa561e4626a2f071fa5c5bb2389a1e0e6","ssdeep":"192:6lCUn8IuIZIrIYIP3IHI8IL3IuIL+IXIFIDIeIJIDIHIxIIIWIkIHIPITCImIbIO:l4kHds","tlshash":"a1027e267d0b481c43bf51b785cb26ac0a09d9cae1611cfdfb60650f41b4e88b3b9623","first_seen":"2023-04-07T17:19:09Z","last_seen":"2026-07-24T09:17:43.767814Z","times_seen":126,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.6.5","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.048Z","timestamp":1784884626048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.6.5 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 24 Jul 2026 09:17:06 GMT\r\ndate: Fri, 24 Jul 2026 09:17:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123129,"size_decoded":3877,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"725d4e1ac8ab3a2acc7596fdb86c0903","sha1":"29361c3f4df871d14f7aec27e4ca9906dddfaf06","sha256":"183acc0f61d3a0c381a60ad8386229e4433a5d0f189b54920c759dcba5457965","sha512":"11485196733a8fac7d79606762ab6b869a0cb985139b751b93a58ef77396847d63c34c11556d250df6385a148afb4616dccd38c46cdd75b68ee69467d93a773e","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULh:GZQDSVUvWtALyl83uRt","tlshash":"d9c31d91041b5440ab834ce223cebf75fe5f92507141d0b9abfc9babaddbc62126835c","first_seen":"2026-02-19T23:35:04.827171Z","last_seen":"2026-07-24T12:50:48.798099Z","times_seen":3319,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":38,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/uploads/theplus-addons/theplus-post-6.min.js?ver=1722405933","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.080Z","timestamp":1784884626080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/uploads/theplus-addons/theplus-post-6.min.js?ver=1722405933 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Jul 2026 12:58:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5e1b8f-86a8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34472,"size_decoded":11451,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34451)","md5":"a968d3049f348ef124aca78f926f9d32","sha1":"cdb692e6cd05360560a4b6a19f509274e9aa88e5","sha256":"10c41e2777c9385c1b5e2c95c887deb836c0fdbc7f70673370a6660c741f6620","sha512":"1eda123f3f99510570309b483a7375d8b15e0ee6853c6885bc536e44c2c5c38334697b32c50479ae01ec3635533c1dac2f7aa36a0156affb022ab217bf544d51","ssdeep":"768:hybvhyf6H9rf89wQddeV2FsQ57FitjLqXvmNNaWX7zE/nUwqsh0lwbTCdKcSXM:kt3rf6XebXfqcSXM","tlshash":"c3f2d798b21530b541ff6acb80ef3688727178dde50450a925b5c8fd1b28ed921b2fde","first_seen":"2026-07-24T09:17:43.769077Z","last_seen":"2026-07-24T09:17:43.769077Z","times_seen":1,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.16","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.013Z","timestamp":1784884626013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/google-language-translator/css/style.css?ver=6.0.16 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-1f7d7\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128983,"size_decoded":13857,"mime_type":"text/css","magic":"ASCII text","md5":"f3bd90ed9190418715605b8aaa05debd","sha1":"5ef128434040cdc17b99048da8c56287894ed542","sha256":"e2fb63ea3b3d832a17e88ce1bdc0ec080117e17f1c9331697c822015e501cb13","sha512":"1b3fd80ef7f59ad36961493e9bd415d06fda61f2073252bfd61048e369f5913193a4a72d8db23a711e73370e09aec05e78b0a364da225efbab387b07daadc22f","ssdeep":"768:JFlgVc+2+eI+E+eG+y+eFUOQ0eeY+br+eX:JQc+r+X+CUP+x","tlshash":"bdc35b27eb923cb7ba75833c24ba2458978c4414a5685f5c372e80f7e6fddb2e0b1611","first_seen":"2023-04-05T15:22:44Z","last_seen":"2026-07-24T09:17:43.770815Z","times_seen":4777,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/theplus-pro/assets/css/extra/iconsmind.min.css?ver=5.0.9","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.025Z","timestamp":1784884626025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/theplus-pro/assets/css/extra/iconsmind.min.css?ver=5.0.9 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e6-16aa2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92834,"size_decoded":18085,"mime_type":"text/css","magic":"ASCII text, with very long lines (64998), with CRLF line terminators","md5":"49714068038622de19a48e05a3fee269","sha1":"3b038cd7695257bd3a697408dc670e215400b743","sha256":"05816cadb2041e0eea2914fdc3825daac5e4e68ae064311cd04c39cf83023481","sha512":"4180f5f16772d9cebab50dc4b2bda7cb88383138cf01ec611ec47eef9e9742410ed052203543ba13a20f26461012cc0bc13041e7ae9906e3365e3614ff30a208","ssdeep":"768:EaEvglYGCn8/Tq/RJzUULWG8mfDZi9vGAufKr:Eav+1sTKRJfWRmfli9vZ1","tlshash":"d693c9a4dd59a2de7f2ac4238345f64e9c93f523c9e48c13f03f991d9ae125683c4a78","first_seen":"2023-04-07T07:16:22Z","last_seen":"2026-07-24T09:17:43.772036Z","times_seen":202,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.9.2","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.040Z","timestamp":1784884626040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.9.2 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Mar 2024 12:04:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f044e5-684e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26702,"size_decoded":5002,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-24T12:50:48.912535Z","times_seen":85811,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-converter-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.070Z","timestamp":1784884626070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 14:12:31 GMT","end":"Wed, 23 Sep 2026 14:12:30 GMT"},"fingerprint":{"sha1":"79:92:C9:C4:9C:3B:8E:38:3D:B4:5C:FA:23:B7:32:6D:E5:6E:21:4C","sha256":"9F:04:05:47:D7:AB:A2:ED:CE:9E:40:05:15:CB:1D:E0:9F:A7:BB:C0:DC:EC:A2:90:53:EC:F5:8E:57:D6:62:B0"}}},"request":{"raw":"GET /coingecko-coin-converter-widget.js HTTP/1.1\r\nHost: widgets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 24 Jul 2026 09:17:06 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: TlSFJlyiCIJl2b1ggf3ppzAMOJXvgRIt151HbhagOO1hAiErPuSRdx8fM9ABDU2jozY5klPN2oS99tzQ8C914FkxM4/yqlD1\r\nx-amz-request-id: 3H26RXQN7QDDCDV3\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 03 Jul 2026 04:41:10 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: d7ckbvH.PJ_YguPRmaqJh9wQ5XqvR9j3\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 16103\r\nexpires: Sat, 25 Jul 2026 09:17:06 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"d38eb75fef5ec15272c60df3071dd98f\"\r\ncontent-encoding: br\r\ncf-ray: a201d4712bc056c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":234478,"size_decoded":70610,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36981)","md5":"d38eb75fef5ec15272c60df3071dd98f","sha1":"370dfc6eea025053f3594eeda4d38ba0d148cf70","sha256":"37a017af532213f5488be4408ef704f4b8a4ab2b3b585a95278ed6a4d6ad5fde","sha512":"6e42e19d72654ebb64b3b028e8627087d69836faac3478599815f0735aa5abe0c3aeb815a4afc7295c0b7c3b9ceba22cc403874ad10eb533b0e4f6a46b6803a9","ssdeep":"3072:k7+hYjvNJOdVKvMQ21OqArnPfunQlSrUzpZF6Gz:MvbNvM7K7AGz","tlshash":"4d341a8eb6c0f19947b693e5605f394ba77929fc68884380ea72f4e5587e04c6133f6c","first_seen":"2026-07-05T14:30:46.473779Z","last_seen":"2026-07-24T09:17:43.773377Z","times_seen":5,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":6,"connect":28,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icmrktexchtrad.live/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.3","fqdn":"icmrktexchtrad.live","domain":"icmrktexchtrad.live","tld":"live"},"ip":{"addr":"102.209.117.119","port":443,"asn":0,"as":"","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icmrktexchtrad.live/","date":"2026-07-24T09:17:06.079Z","timestamp":1784884626079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icmrktexchtrad.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:02:57 GMT","end":"Sun, 18 Oct 2026 13:02:56 GMT"},"fingerprint":{"sha1":"B2:8D:54:26:AA:E9:CC:EF:19:93:D5:28:A9:0F:0B:E7:34:1B:FA:9F","sha256":"AE:26:C2:AA:47:69:20:A4:8A:58:32:D8:BE:83:EA:28:B2:E7:6C:A1:64:52:23:97:2E:C7:5D:A2:DD:FD:8D:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.3 HTTP/1.1\r\nHost: icmrktexchtrad.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icmrktexchtrad.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 24 Jul 2026 09:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 06:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a9d41e-2a07\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10759,"size_decoded":3827,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10578)","md5":"ec2777f6b09c345d2ab0def96b5cab9d","sha1":"10713118d9f7aa90bdce30ea21508b2e99b8b33f","sha256":"d9b268266af74b5c0834e2a519303ca97c5427c5fb7abb3b89ad29e07664be14","sha512":"77b8845daa7449a72a6365e75ae56781c82b503619f7d90ce4ba0f5a8c025b59f3881f0bd3b51570b2c3a6567a6be1e783615954d84b9fff95812e230cc8ffcb","ssdeep":"192:Cr0AcBogU9EEk7Wxcf55I/6wG5klFhBsR0PWXYpt:Cr0AEPU9EccbUt","tlshash":"7f22844a320a2b015b9bd271653da8cbd77752c8690449ccb074dfce445cf59a2ebf78","first_seen":"2024-07-18T17:31:23Z","last_seen":"2026-07-24T13:21:14.244821Z","times_seen":33485,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"icmrktexchtrad.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}