{"report_id":"d82581a3-1a3b-4332-87e7-91d90f19051f","version":0,"status":"done","tags":[],"date":"2026-09-20T13:01:31Z","url":{"schema":"https","addr":"chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"title":"ChatGPT trade","dom":{"size":81273,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7937)","md5":"fc390fb33677f0a8f3a1f303659f554e","sha1":"8efd4852e3e9890635a07efd9df3796692bf5d1b","sha256":"78e761310481234264d63ab7a71f3833a507223f028e2abec7355c21a58e0a66","sha512":"595b058c30eef73ca8c7da224f7a2965d52bca0b09ad8cafe7f204e5f26bc4a64e7f47c663729eb3cac2c64b9e986c214d5246f9e080e5a7ce4b40efc68484f1","ssdeep":"1536:aZ/Lq53XP8LHOEEBjaGd2h46jHT7O6QYrNPCCr2jfVEEYLXdlL+N3HxcPtHA5mVF:mC3tBjX8RjHvO6QYrNPzXdlL+N3mPtH9","tlshash":"f7834162d2e53562d037c2d4b0d77b23d3969d0b9e974d607eecd3b81fca8d0512aa48","dom_hash":"domhash2dc65bd09d44b95775d06c93107e0d4d","first_seen":"2026-09-20T13:01:34.643119Z","last_seen":"2026-09-20T13:01:34.643119Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T13:01:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"chat-trade-ai.live","ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-20T12:53:15.14912Z","last_seen":"2026-09-20T12:53:15.14912Z","alert_count":14,"request_count":14,"received_data":345827,"sent_data":7316,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-13T23:16:40.429603Z","alert_count":0,"request_count":3,"received_data":952543,"sent_data":1276,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-09-18T06:15:25.708779Z","alert_count":0,"request_count":5,"received_data":518358,"sent_data":2689,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":1,"received_data":246651,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"get.geojs.io","ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-09-19T22:15:08.427716Z","alert_count":0,"request_count":1,"received_data":994,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/intlTelInput.min.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d54142fffed6c850edbfd5be723a3038","sha1":"e8cbeb8e0c88fa006c707850828ee910f85024e1","sha256":"91e5bbf15529de628e73cc318ebce847383d743ef521aabac85cf57f074c0ebe","sha512":"9919c98c3c50fcd08ac9d7f4d08b4c4e73fdff7a8282ecb6c6e39ea8de585b842c2a5f4e2c2b83bac39465adaa3d81b2999c0cb19fdc9b9bdda1d5f850bec787","ssdeep":"768:1sqD7GzOoS+D45YMJR3QWG6UdC8OxgtmKg3vTpzaDvCY4R:XfHQWodCjgtmKgNzazCh","tlshash":"aad20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","size":29483,"data":"","first_seen":"2023-04-06T17:18:59Z","last_seen":"2026-09-20T13:01:34.655841Z","times_seen":1319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/adict.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2c9cfc7263442bc5dd6a875f730babc","sha1":"97c6655ef49ff40bf5961470b8671ea0122a239d","sha256":"aa3747620ea6f22122458aacba9dd5ea71b856ec3aa505d90e652cb5b24feb83","sha512":"abe05fe8772cb00ce8dcba046a065ea7c2ccbb23f5eaf986608df5f59047454e8569433c0b29a143706afe132eb8ff64563bbbe19f9fcbdbe81d4f5a82852fb9","ssdeep":"768:D0V4lBOKh4nWlsAbOoUCADm0allP7ptH114uT8/yR:DzTxUCKmDDHvW6R","tlshash":"7203961995f304531577b8291fcb15017e208d278a4ace10be8d9fdc4f8d96ba2b27be","size":39047,"data":"","first_seen":"2026-09-20T12:53:19.983859Z","last_seen":"2026-09-20T13:01:34.658278Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/apexcharts","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2232c2cbf2ccc58a963c6ec41b992ebb","sha1":"1a3e24facf1e9fe6bed7dd956efcfe988c4231b6","sha256":"735c58f9f68619db53c50481c071629418763043a5047d65f077c5b57e4ba5e8","sha512":"acfa4d105152a74110cdd83241fe38350dd3e623f99745e26b17bc04fed2928a32c5dbea93c9cb31f8a89afc68e192590d2ca19a0050a61a30a050018ca6ac51","ssdeep":"24576:2mVnD0VZelFByML3M3po7CLPHQZSTmCtQGmwH0j1qW0B2AxPxq5L8nQqFLinn:2mnD0VZaFByML3M5o7CLPHQZSTmCtQGu","tlshash":"dc152b57e265383385920bdcd8b62613d7216e49784684acf99c8cfb3c5a94532bff38","size":950335,"data":"","first_seen":"2026-09-17T08:47:10.642995Z","last_seen":"2026-09-20T13:01:34.656483Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/chart.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e2de55c02fa63bca2cbccaecf9db3f2","sha1":"e26ded21fd6575d2baa2ff47f60e04f0adf21c6e","sha256":"357db12532ec0bddb3aa89b5b2412bf60c12b454177beef1395ec2ae87b3c0e6","sha512":"de4778c7b7482266bb71f2b6a98927f6a6f817329ed3c3ea40f7e9fb62da4f438685f029629ce7474f1222e4b5d8d35748642bb18f388e93712a2a74836e4c31","ssdeep":"48:hkY0x4XkrQNx0LNO3TL7cDopMjp+mNaIyVv4WITlKTlYT4q7v3pcxLpI:VvX4NO3TL7cPMxELTlKTlYT4qrZcLI","tlshash":"b3b12168e655155b083373b1da672706f72272bb36064b2b3abc63a41fb3134a085fdc","size":5149,"data":"","first_seen":"2026-09-20T12:53:19.978486Z","last_seen":"2026-09-20T13:01:34.644981Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/script.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eac48eb0ff2525de6d35b7e31a355d1","sha1":"22edde14756ceec3adc7fe72e76b1a19fbc7a8b6","sha256":"dd60be68cf6329fae6e17cc465d4cb585dec40376f7594b6cac4139c31b87733","sha512":"b4401ebe2c12ef3dcb328f57b2ff9e9fed8a601d317a9a2ef04d97e4d23f1a94927a4681a54a6d66e9d092220111eba8604f3269667729db01ce063a9e912926","ssdeep":"96:DzLbud0ATpPQC7lupnRRG2hvPhd4Xmhejp+hnZhAhbh1h5hQxwabWT:XLb6v+C7lupn3GLfp0vxwaST","tlshash":"eda16440d37802b067de91abb0534e49bf7841fabe26442ea51c5dec3be35c253aee50","size":4802,"data":"","first_seen":"2026-09-20T12:53:19.969769Z","last_seen":"2026-09-20T13:01:34.658884Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.12/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91b687e42f7561155c0b7113a96b485f","sha1":"6ff7e72d6e4043d089351461106a3678174cc65d","sha256":"40be34b828e28a6e711efb10cb00aab537ef9de74abb3864acd2fa59665f6fbf","sha512":"26da462948d052a0899a0c374ceafc6e42fc42a07ca026e87d1537f718039d16137c80ef7e0d2042cd9e7de2b10427704803ff877092aa19fcefe822592b318f","ssdeep":"3072:W8Ep84AwjO03k4PV03C4PE60ApPdEZrmpmWDvzJJprBm6URTbnQL9n4CQrxxygGa:W8vZgcAZrmpmW/Tw","tlshash":"bc34dfebd63c9736a5d97b35968eb3cd1a8cbca3c848527826d3b54f53788e0706c205","size":245626,"data":"","first_seen":"2023-03-07T01:07:52Z","last_seen":"2026-09-20T13:46:44.66603Z","times_seen":6639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/jquery-3.6.4.min.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eea68b6461266333f5fd3ee87b594ed","sha1":"5a099d7359e930af0dc41b135649564902462aee","sha256":"748b19357a18c21e2a4e43f896c445a26c7c3865fe4989e8c0e129fcede0129b","sha512":"78d40847790d082eb8e6b2c273b5d7bfd9ffafe674a1a6c6a164c41551b7424a1a8c48d53dd6accb76bc96ff5be024def3131aba7bc86cf410ca3d0fd1719cc7","ssdeep":"3072:T3afTj4s0Kx6dGOxKm1yin2HddKySmHFGf/WmFcRmkV0b4a7WOOX/wMzAnlkJaly:T3afTcKx6dxxKmFn29dKySmHFGf/WmFA","tlshash":"8fe36299b6d531358237f33e9d6fc909f2b6156f12898906793c40a62f3181493bafec","size":154556,"data":"","first_seen":"2024-08-19T21:04:35.459212Z","last_seen":"2026-09-20T13:01:34.65248Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj32 class:NodeList extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj33 class:HTMLInputElement contentDomReference:map[browsingContextId:3 id:0.4231468753978209] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[id:phone name:phone placeholder:Ваш телефон required: type:text] attributesLength:5 isConnected:true kind:DOMNode nodeName:input nodeType:1] sealed:false type:object]] kind:ArrayLike length:1] sealed:false type:object]","filename":"https://chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/adict.js","line_number":103,"column_number":17},{"level":"log","text":"0","filename":"https://chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/adict.js","line_number":105,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/chart.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.147Z","timestamp":1789909260147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/chart.js HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\netag: W/\"6a60e18c-141d\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8J6Bb0AqVA5XMIsvznLjjGlffE9GtmD8feMg4rlqt18K8J%2Bj2klze49ig8XMSM5g78E%2ByXKw6Yc0olq6QsVLXt%2BkSNABiAyfzJC6X%2BfY%2Ba6CNyx6O2yXPKJLeYOkmFMN%2BeUIfuY%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e1042bfaf41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5149,"size_decoded":2355,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"0e2de55c02fa63bca2cbccaecf9db3f2","sha1":"e26ded21fd6575d2baa2ff47f60e04f0adf21c6e","sha256":"357db12532ec0bddb3aa89b5b2412bf60c12b454177beef1395ec2ae87b3c0e6","sha512":"de4778c7b7482266bb71f2b6a98927f6a6f817329ed3c3ea40f7e9fb62da4f438685f029629ce7474f1222e4b5d8d35748642bb18f388e93712a2a74836e4c31","ssdeep":"48:hkY0x4XkrQNx0LNO3TL7cDopMjp+mNaIyVv4WITlKTlYT4q7v3pcxLpI:VvX4NO3TL7cPMxELTlKTlYT4qrZcLI","tlshash":"b3b12168e655155b083373b1da672706f72272bb36064b2b3abc63a41fb3134a085fdc","first_seen":"2026-09-20T12:53:19.978486Z","last_seen":"2026-09-20T13:01:34.644981Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/index-mG1REHtF.css","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:00:59.937Z","timestamp":1789909259937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/index-mG1REHtF.css HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:00:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\netag: W/\"6a60e18c-30e6\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkpfxeVK8CGcR0mLPAV2FEEkRcBQGjECpEd2XPmAU%2FqNq1sjJ1pc118yG0jYJq1MUI1iSBHSxAz3Nh2ifrEzK2qGJkPwulOE7gmq52QepixH2aQOs97NSiZnad0fqujIWMv8qpE%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e1042aaab21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12518,"size_decoded":3955,"mime_type":"text/css","magic":"ASCII text, with very long lines (1320)","md5":"2a61be4e58efd825f324132ac517585c","sha1":"c530bf15838b2a0ab4b23dd5df49ede4ae6ad836","sha256":"13ef10f67ea77739cf60d1a0a796f02399bbb4ac08e128dd5208f4183e137fe8","sha512":"232812bc7e797dd6b5168480be7a52ec64e1543ccbf64cb2550076c8a5df6302c2d989f514ce0a115e4273ba76ad53d4856abe824c87f36f6f51515c4e25c2f9","ssdeep":"192:1yZeZRsZY/aUnW7XOngQ3CtNmh4S1ygc5o4uAFiFHFQF9UDK7d/qw:tPW7AziFiFHFQFF","tlshash":"cf42346da6371885701ac8a83fba7f9523255053960fcd38bfd5329ccf8a09195a2fcd","first_seen":"2026-09-20T12:53:19.980817Z","last_seen":"2026-09-20T13:01:34.645704Z","times_seen":4,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/app.css","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:00:59.939Z","timestamp":1789909259939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/app.css HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:00:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\netag: W/\"6a60e18c-5892\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0lD5v%2FjvXYz8t1onZGXKbzeqb76bXeHO4IO7zBxIy3IBkRSI%2BC1dsFV5vJUN2Dv0Kqb5UIvqOyinLCAoD885HhpRZwWaGuqc9P5Y14JQG4%2FdfL%2F%2Bl%2FJBwUYJpEM%2FvJAezUM2B8%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e1042aaab31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22674,"size_decoded":4374,"mime_type":"text/css","magic":"ASCII text","md5":"167aad771ae33336749618d26eb933b5","sha1":"bea64545f0b6dc3500a0f9972a5bccb54c6fa2eb","sha256":"496fc42a1c9be9f76c75b7368f9f8f9e368f1ffe0bf53e0457cd6d5b806feca1","sha512":"8388698b5e277d4b457d4e131bd48d9b1e4c776cd3f3c4380de14e47c2ff92e033d8f10e2f69229fda7530032be2d840d4c08f5b6d06efd9bb83bf7abbbc70e4","ssdeep":"192:DOgYUrxvMG1Gcwy0+iZAWN9NriWOGmKXGmKnT+6OT+6OYi/iGi/i/MDsMMDs7ZgW:9YUrjExgOToY76DLav8nRxf0","tlshash":"cda2c1753aa11140f677861467de4f38662de1630d0aecaa73c3642dcf89fac51c9b8b","first_seen":"2026-02-01T11:26:56.63773Z","last_seen":"2026-09-20T13:01:34.646478Z","times_seen":8,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/style.css","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:00:59.944Z","timestamp":1789909259944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/style.css HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:00:59 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\netag: W/\"6a60e18c-1ca\"\r\nage: 504\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I8PiD0%2BZXMar9jF70lLzDlBOSsSi89nq5ccqw%2FezW%2BUG38nfZmKWkzclCzR%2Bext4Cnl%2FBw24IkuvZENlp6PYi%2FO3o9ccbwsuyMonVLgHNX5%2B%2B4hbEb63IDn1EXom%2FA7Z7BQsUMI%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e1042aaab51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458,"size_decoded":1011,"mime_type":"text/css","magic":"ASCII text","md5":"5561d16910393c96b2efe19d211cebd1","sha1":"717e365b0b717fa9ae6e922a298d62d11f5b4d0a","sha256":"330f0776ab0dd70ac07334560f8888a445221cf89ccbb575ec0e774bfc705781","sha512":"95ed0c4a4b261187145b51f34196f211a8b1c8da76ff3cc76caa677e5689194a9ec2668d3b31c48d6949cbfe2f6154b9d7d63d2cddfd279560c0cbae24c3399c","ssdeep":"","tlshash":"35f02e7b67945504f617e76438b05b95273a4110551dcd7cb7e034387f877d601e2f8a","first_seen":"2026-02-01T11:26:56.640105Z","last_seen":"2026-09-20T13:01:34.647173Z","times_seen":8,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/apexstock","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.146Z","timestamp":1789909260146,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /npm/apexstock HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/node\r\nx-jsd-version: 0.5.1\r\nx-jsd-version-type: version\r\netag: W/\"5b3f8-s+pQWvdtpXhLJQBb5bG6ltJV4P4\"\r\naccept-ranges: bytes\r\nage: 17140\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\nx-served-by: cache-fra-eddf8230028-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 373752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/node","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T15:41:53.976884Z","times_seen":18570563,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/images/logo-CiNLk_nt.svg","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.155Z","timestamp":1789909260155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/images/logo-CiNLk_nt.svg HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\netag: W/\"6a60e18c-1083\"\r\nage: 504\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKh6CKrJSybwyI6Wckod%2Fbua0rb3MH4Q45yT2AFhgg4WPzKDL2X%2BHT%2FH5h8wn6giwMMcgPu1woqAGFZgPXk1sXqSVzg6q8MByRNwO8IU5bFQF2pD99bVZYTDtZDw8hImXUiSmsA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e1042bfaf71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4227,"size_decoded":2744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb09daf25dce72b2d03baedaf735b673","sha1":"c12a4613037f4a493760e0044c1bee454eba4ab3","sha256":"080a3503a84d42f20c44e0d50338b2b76d441268ae023be9a6a01c38142223e3","sha512":"4e27a65b90e141bc76c70e636ee76cdec1aac0a7002dc1818a47cd756d89fa5a0ee393be7e4e13c87b154a92c7d71eb86cae6beadd0af67dc6e5007f0403dda1","ssdeep":"96:RCIbJaz1cHqSN/moflmzV2Ob3VUJNmpu4tm9ila8kqjOfvl:zbJaCHqScodmzkihu4s9Ma8hafvl","tlshash":"0c9121da6398f6e1f201e3e48515a4b5ba7730f33b3ac75807fa7d95eb1202e948d484","first_seen":"2026-02-01T11:26:56.611827Z","last_seen":"2026-09-20T13:01:34.648756Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/59278/SFPRODISPLAYREGULAR.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.258Z","timestamp":1789909260258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /s/59278/SFPRODISPLAYREGULAR.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chat-trade-ai.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/sf-pro-display\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 05 Feb 2022 02:00:54 GMT\r\netag: \"1dd94-5d73bbcd1367f\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 503\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpIik3nZ%2B8LLIncynBDRaplXKFQosa1Mkk%2BIwL66fXuPQ%2BNnIwjswQbBQYjJZAulym6v%2FadJt2IeKz3X4krRgVekAY7ubKs25MZPy2WJEuxuXE%2BHMyMrC3zD1jZRyXGuJCyhJs4%3D\"}]}\r\ncf-ray: a3e1042cad47b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122260,"size_decoded":123011,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 122260, version 0.0","md5":"9101ead9acb34fc6e41f5ab4d1e4a353","sha1":"2664a53e9bdc80d739c7fd20b46616c9b4c0416d","sha256":"a7f8604bc9572a5c012cbfcb1e8f4f155eed3ef80e058dfa01f7b1731e45cf33","sha512":"92fec3f64c4b6d464336fb42ea53f2f4544929421367c05bfda718eb66832616a08500b8e762f55401ad4637bc0a15a23c73d7e3c7da3ea9be2523a95336858f","ssdeep":"3072:PhYjlGC4lE3fT9AJxasgpmR+tYpZJIxMCCnWMyieJ:PaZGCPAamR+EJIxMR01","tlshash":"f8c31260ccc11addaabbe7443d1c42423b6374ef9953e2ab5f524973582f1277bd1a08","first_seen":"2023-06-17T15:43:01Z","last_seen":"2026-09-20T13:01:34.649491Z","times_seen":271,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/images/flags.png","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.754Z","timestamp":1789909260754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/images/flags.png HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/intlTelInput.min.css\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\netag: \"6a60e18c-5ca0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nage: 504\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEbY0cZmA%2FBaCrnXS2IQXoGX%2B%2B9PpGyPeYm8WVroYDVmDyBeaFnzUs8hPs%2BsaBZcr65fWMVmpLNjoV6NlHwv8x%2FUYYvikSmADM3w%2B4wFzF1CoNpZy2BXGIeWspE6VQBpD%2BQoR28%3D\"}]}\r\ncf-ray: a3e1042fbbbd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23712,"size_decoded":24455,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit colormap, non-interlaced","md5":"c4e7d8b834276b072895703781d6f231","sha1":"ee94b8f40bf71145bb527114f7d82a83710c661b","sha256":"9b5d8da9c7f741f248dabc4510b6265cc5a555ebd5c13fafe9f2977c16981b3c","sha512":"13d475232e8bd6b4b60b63f625e0573fc1db10b989d807e888481ee08273c424ac1672d7819bffc2b2d471a82c99b6a52b755d96a081140cc86c25f93dab06a5","ssdeep":"384:dsW1bWildnA9L9tluwyr+s6Ej9+lStBrIHl54USseZaKkGOCywm4GBbHW:6rqZ6EB2Sk8U65Rm4EbHW","tlshash":"d2b2e1f869366a190b2a49d7ebdc06f2dea600d529901f7ed30944037c35a83ed56fb3","first_seen":"2023-05-27T07:46:06Z","last_seen":"2026-09-20T13:01:34.650186Z","times_seen":24,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T13:00:59.456Z","timestamp":1789909259456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /5WyR8MZ3/?utm_source=0_8_rueu_tgads_2 HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 13:00:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sun, 20 Sep 2026 13:00:59 GMT\r\nset-cookie: e3b0c4_758=3mjvt1c33muts3; expires=Mon, 21 Sep 2026 12:52:34 GMT; path=/; domain=chat-trade-ai.live; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=50,cfOrigin;dur=164\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVfSkzoJhJlasRuLeH%2FV%2BnzKZraW4rs6ZjIPxtnzfSL0gBbTHWNxyl9M3OdfV1AGqPeyEeDlW5mTFBAbhCdxa5Lnis6nY1R3uDZfuihhFkJd15lROJheqvw%2BophMZb0orPEp61c%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e104281d1ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"e3b0c4_758","value":"3mjvt1c33muts3","quoted":false,"path":"/","domain":"chat-trade-ai.live","expires":"2026-09-21T12:52:34Z","raw_expires":"Mon, 21 Sep 2026 12:52:34 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"e3b0c4_758=3mjvt1c33muts3; expires=Mon, 21 Sep 2026 12:52:34 GMT; path=/; domain=chat-trade-ai.live; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}],"data":{"size":12713,"size_decoded":5440,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1173)","md5":"1ca760a201499a4f18ff674581e5cb76","sha1":"81bb1f45cf88563188306175b2f3aa0600484e41","sha256":"28cb305eef2681040c37fd231e7fbbb8895725a838add4ce28b40d88e6ae4158","sha512":"54231616e41f578ffd0ee805d9753b1f2ed1c58e82eca69816c141172fa0b9399b05a45608150d53d60156c1661a245a3109fdbea3bf8e9acef694be844c79b2","ssdeep":"192:JvSRL0lm2MaypX/7JLCCHGbUx0sUoFrBQuW6u37awRsApoSiGArPfPScV22jXc:dc5pCYxAoFrBQbbnSGArPfPScV2+M","tlshash":"1742953941f1046a2052d0d0aff17a067db5c127eb0a8d51baec66ee8fcbd82c95b34c","first_seen":"2026-09-20T13:01:34.65096Z","last_seen":"2026-09-20T13:01:34.65096Z","times_seen":1,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":242,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/jquery-3.6.4.min.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:00:59.948Z","timestamp":1789909259948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/jquery-3.6.4.min.js HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:00:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\netag: W/\"6a60e18c-25bbc\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xy2U4a6SzFT%2BOB3YZ%2FudZseUJ70BmUeoRhwdcuMKBaDBTPxq0FvikIQJtzyQv6Xk68Iw9sX4qFwklK2JLpiYiJb8aLIdZQzzwQq1Y7DlsKDTtzsbX7OosL8N7s1vvGgeGR%2Ff2Yk%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e1042ababc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154556,"size_decoded":38216,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (755), with CRLF line terminators","md5":"6eea68b6461266333f5fd3ee87b594ed","sha1":"5a099d7359e930af0dc41b135649564902462aee","sha256":"748b19357a18c21e2a4e43f896c445a26c7c3865fe4989e8c0e129fcede0129b","sha512":"78d40847790d082eb8e6b2c273b5d7bfd9ffafe674a1a6c6a164c41551b7424a1a8c48d53dd6accb76bc96ff5be024def3131aba7bc86cf410ca3d0fd1719cc7","ssdeep":"3072:T3afTj4s0Kx6dGOxKm1yin2HddKySmHFGf/WmFcRmkV0b4a7WOOX/wMzAnlkJaly:T3afTcKx6dxxKmFn29dKySmHFGf/WmFA","tlshash":"8fe36299b6d531358237f33e9d6fc909f2b6156f12898906793c40a62f3181493bafec","first_seen":"2024-08-19T21:04:35.459212Z","last_seen":"2026-09-20T13:01:34.65248Z","times_seen":17,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/apexstock","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.535Z","timestamp":1789909260535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/apexstock HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 373752\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/node\r\nx-jsd-version: 0.5.1\r\nx-jsd-version-type: version\r\netag: W/\"5b3f8-s+pQWvdtpXhLJQBb5bG6ltJV4P4\"\r\naccept-ranges: bytes\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\nage: 17141\r\nx-served-by: cache-fra-eddf8230028-FRA, cache-bma-essb1270022-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/node","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T15:41:53.976884Z","times_seen":18570563,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.12/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.751Z","timestamp":1789909260751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.12/js/utils.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4549765\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 13 Feb 2021 20:31:42 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5qG2AvUzZ%2BFHmZhtS2VFGEKsdke2suUiTsDUkEj82gcanZNx1HbPIEIxw5I2U38%2BCgqtk8eNZohrAhNafBcGxsi%2BgGqPI8ihtUE%2FlBZqh3hUS67dgSyztTwyEXf%2BflD5V6dL3kc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3e1042fc80a7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245626,"size_decoded":45981,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"91b687e42f7561155c0b7113a96b485f","sha1":"6ff7e72d6e4043d089351461106a3678174cc65d","sha256":"40be34b828e28a6e711efb10cb00aab537ef9de74abb3864acd2fa59665f6fbf","sha512":"26da462948d052a0899a0c374ceafc6e42fc42a07ca026e87d1537f718039d16137c80ef7e0d2042cd9e7de2b10427704803ff877092aa19fcefe822592b318f","ssdeep":"3072:W8Ep84AwjO03k4PV03C4PE60ApPdEZrmpmWDvzJJprBm6URTbnQL9n4CQrxxygGa:W8vZgcAZrmpmW/Tw","tlshash":"bc34dfebd63c9736a5d97b35968eb3cd1a8cbca3c848527826d3b54f53788e0706c205","first_seen":"2023-03-07T01:07:52Z","last_seen":"2026-09-20T13:46:44.66603Z","times_seen":6639,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":2,"connect":10,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/59278/SFPRODISPLAYREGULAR.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:12.731Z","timestamp":1789909272731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /s/59278/SFPRODISPLAYREGULAR.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chat-trade-ai.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/sf-pro-display\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:12 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 05 Feb 2022 02:00:54 GMT\r\netag: \"1dd94-5d73bbcd1367f\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 515\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FsvABrfTtz9xzc81%2BRPdaSKBWKHNcEyBvcAzPmo3hYUtXqXooq000n83fzsC00eKMtUP5WgcEiQr1xTVAugYdH4LbZdTqg2OkcHq060UtoUzqM5Lt8mZ88KupOaiBv6Afkk8Y6U%3D\"}]}\r\ncf-ray: a3e1047a9c1bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122260,"size_decoded":123005,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 122260, version 0.0","md5":"9101ead9acb34fc6e41f5ab4d1e4a353","sha1":"2664a53e9bdc80d739c7fd20b46616c9b4c0416d","sha256":"a7f8604bc9572a5c012cbfcb1e8f4f155eed3ef80e058dfa01f7b1731e45cf33","sha512":"92fec3f64c4b6d464336fb42ea53f2f4544929421367c05bfda718eb66832616a08500b8e762f55401ad4637bc0a15a23c73d7e3c7da3ea9be2523a95336858f","ssdeep":"3072:PhYjlGC4lE3fT9AJxasgpmR+tYpZJIxMCCnWMyieJ:PaZGCPAamR+EJIxMR01","tlshash":"f8c31260ccc11addaabbe7443d1c42423b6374ef9953e2ab5f524973582f1277bd1a08","first_seen":"2023-06-17T15:43:01Z","last_seen":"2026-09-20T13:01:34.649491Z","times_seen":271,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/59278/SFPRODISPLAYBOLD.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:12.733Z","timestamp":1789909272733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /s/59278/SFPRODISPLAYBOLD.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chat-trade-ai.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/sf-pro-display\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:12 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 05 Feb 2022 02:00:54 GMT\r\netag: \"20bbc-5d73bbcd13297\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 517\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Awy%2B7pJUsAi3ZkEMb%2FcA3Ul4erMgtjbDL7rk%2FH9FRnyqf2h4OpZ4%2FKHuNjlKGt5qEXMFPrYcdMiZvCd0pFZvAZYZ8DA6ekt0Qq3D%2Fy6uOLJqk0vGggWl%2F75PJwcJtNGuqUYEORQ%3D\"}]}\r\ncf-ray: a3e1047a9c1cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134076\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134076,"size_decoded":134829,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 134076, version 0.0","md5":"5a6d43d393aff666df0d0b67cbb32c68","sha1":"2bdae4ec52f592b8a9b0786dd53d7efb4f2f5fcb","sha256":"119ccd3741e1185ef0ae63c54b4bcdc65ee0ce4336f1558928707d85b91fbe11","sha512":"2d517324f864d417f62fc74a7aafd0f54c322a23aa7b87d21bb24881a216c5d66c2b76f279800768e051e96c2a6a5b0cb2cc5960f5bb953077b6454c1bc9c763","ssdeep":"3072:PJJ0ljobe01p2YK8TXKSOdXSyEaW1vp3mPxIQuYJ5ORrb6KJ57PCLhqq:Ukee2YKhS3XB2xIQuDxb6C7Pxq","tlshash":"18d3139db96edbdb2da3ed8c10a5efb205dca6c741d178039a81dc67080f796537640c","first_seen":"2023-06-17T15:43:01Z","last_seen":"2026-09-20T13:01:34.653734Z","times_seen":290,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/intlTelInput.min.css","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:00:59.945Z","timestamp":1789909259945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/intlTelInput.min.css HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:00:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\netag: W/\"6a60e18c-4add\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FajMrUCcWYgg5%2FD9OMlTt1d6Lunl6yVS%2BY6U9XjjF1PoljA1Cc2byhNT%2FB%2BNUOHlMJYr7onXs78Id5qXmP7SJWyf8l%2F7zXSk2eQpCUCzRdHj%2FPmf8fmwaSG5%2B%2FHsxbroooa%2FgkE%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e1042aaab61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19165,"size_decoded":3669,"mime_type":"text/css","magic":"ASCII text, with very long lines (19165), with no line terminators","md5":"bbfbb81ae2a109048373c055522af3e7","sha1":"2633992d7ffb86c09f24d14917ff3c09ac9d3fb3","sha256":"37babaca48709638e0b19f7d7803d653fc52781bbed084acca197f00eaa64e92","sha512":"964f4aae69145fc1b797e76abeca24c2b50a356241dda1930ee13affc2d4943746c7a573ccc6ec16904dada2b11802ef254b3f16319805330d9f558e327bf8a0","ssdeep":"192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSj:6wRWXhK6jU+4vTixaACaglSj","tlshash":"e8821f1709a32429f627d5a261708eb637278c0bf4264fba49153e7ca3825d51df3fe2","first_seen":"2023-04-19T12:30:21Z","last_seen":"2026-09-20T13:01:34.654332Z","times_seen":66,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/adict.css","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:00:59.947Z","timestamp":1789909259947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/css/adict.css HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:00:59 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\netag: W/\"6a60e18c-889\"\r\nage: 504\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iErw3vpRjgvYQlY7TwaulRYcdw0iI7erQHETwN8FgGUiasXdIX74eu2%2B%2FGpneSmxJlhhmv0x0%2FmmRg6hPzHwXWvBOQ9slaE%2B%2F50PY7W%2FN1W3Y0hu8Ui4vYEBJMzMS35C5BIuKkU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e1042aaaba1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2185,"size_decoded":1588,"mime_type":"text/css","magic":"ASCII text, with very long lines (2185), with no line terminators","md5":"b6f20dc717fb8b64b10578f6fbc16d31","sha1":"2a9ad4a7ded0faec0029b9d3faa45b81508a5f87","sha256":"be3c0f06b48ed5e36def9adf3fd2e7df0f04d6508d1fbde94ede54cd1f292acb","sha512":"5146a78881f3b7bd2461b724a3590e1a42776cca942f7fbac8f0176fd230a1f3ddd5064a6035e967f483e1bc4db7978534c731c54e0a43f2f94d53a7542ffccd","ssdeep":"","tlshash":"cc417521cda6262da16fc4a07ce09b4f417ec093f652278ea918b1740bce8c3017bb89","first_seen":"2024-12-12T23:04:12.890515Z","last_seen":"2026-09-20T13:01:34.655209Z","times_seen":15,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/intlTelInput.min.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.141Z","timestamp":1789909260141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/intlTelInput.min.js HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\netag: W/\"6a60e18c-7351\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4Cdz0eCCM3K6LYcNjjDwYv2OhvXqO3V7CGoJG9%2BDfYnK9ktYPUFaKeXO9y%2FyOD8Sdm8WXuikJBcTBPE33wRRXMzQ8XGnc9eJkERtMat6m2swlxJcnKk1X4Tpm13uE%2B643Vdqog%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e1042beaf01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29521,"size_decoded":11636,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26958)","md5":"d54142fffed6c850edbfd5be723a3038","sha1":"e8cbeb8e0c88fa006c707850828ee910f85024e1","sha256":"91e5bbf15529de628e73cc318ebce847383d743ef521aabac85cf57f074c0ebe","sha512":"9919c98c3c50fcd08ac9d7f4d08b4c4e73fdff7a8282ecb6c6e39ea8de585b842c2a5f4e2c2b83bac39465adaa3d81b2999c0cb19fdc9b9bdda1d5f850bec787","ssdeep":"768:1sqD7GzOoS+D45YMJR3QWG6UdC8OxgtmKg3vTpzaDvCY4R:XfHQWodCjgtmKgNzazCh","tlshash":"aad20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","first_seen":"2023-04-06T17:18:59Z","last_seen":"2026-09-20T13:01:34.655841Z","times_seen":1319,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/apexcharts","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.144Z","timestamp":1789909260144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/apexcharts HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 265859\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 7.4.0\r\nx-jsd-version-type: version\r\netag: W/\"e803f-Gj4k+s8en+a+192Vbvz+mIxCMbY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\nage: 15256\r\nx-served-by: cache-fra-eddf8230133-FRA, cache-bma-essb1270022-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":950335,"size_decoded":266617,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65479)","md5":"2232c2cbf2ccc58a963c6ec41b992ebb","sha1":"1a3e24facf1e9fe6bed7dd956efcfe988c4231b6","sha256":"735c58f9f68619db53c50481c071629418763043a5047d65f077c5b57e4ba5e8","sha512":"acfa4d105152a74110cdd83241fe38350dd3e623f99745e26b17bc04fed2928a32c5dbea93c9cb31f8a89afc68e192590d2ca19a0050a61a30a050018ca6ac51","ssdeep":"24576:2mVnD0VZelFByML3M3po7CLPHQZSTmCtQGmwH0j1qW0B2AxPxq5L8nQqFLinn:2mnD0VZaFByML3M5o7CLPHQZSTmCtQGu","tlshash":"dc152b57e265383385920bdcd8b62613d7216e49784684acf99c8cfb3c5a94532bff38","first_seen":"2026-09-17T08:47:10.642995Z","last_seen":"2026-09-20T13:01:34.656483Z","times_seen":6,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":10,"receive":18,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/sf-pro-display","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.183Z","timestamp":1789909260183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /css/sf-pro-display HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-trade-ai.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 2180686\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 26 Aug 2026 07:16:13 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqWYviJWGP8jkmG%2BTp0FFhX8QrlLnVuy5GQHp9V8O3FlW852jhGHwQOr8Ia3jE4Lynf7%2BpGo4caAMFL%2FZ0YQqHXh%2F%2FUAvFd7SdlLNRQnfm5YmCxKgRpEAmSL8iflzRvm8xB9Mvc%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3e1042c4d0e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1946,"size_decoded":984,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"751bddbee1b2ea1581dab2baeb2c29f0","sha1":"4d84900f4e08c54f32002a71c21ec94a97a7363b","sha256":"5ac7863e22f33bbf9c3186e919b9c227021236915dd0317d9f4851a63644c09c","sha512":"59fc2944e75419d45a57d1713dd8499dc21f14dc4d0bf22d10b3b53f558b1f589e1aa541635640c751bce43f1e1cf33d6441603fef11e56278287b0bce84ff1c","ssdeep":"","tlshash":"2041a971089ba54866312dcf779f3f1a5e0b500b3189da143ef93d089ee3d2a9281f2c","first_seen":"2024-12-02T22:38:00.917644Z","last_seen":"2026-09-20T13:01:34.657098Z","times_seen":1182,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/images/logo-CiNLk_nt.svg","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.564Z","timestamp":1789909260564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/images/logo-CiNLk_nt.svg HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\npriority: u=6,i=?0\r\nx-content-type-options: nosniff\r\netag: W/\"6a60e18c-1083\"\r\nage: 504\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlVkeMTtbE5uIOe4HYrxQcyv9%2FdTacTbBmv6eH5c7AZqp7wjoiPGi3wRkwe1LWy7fWdLEuuTDV%2FOZzu8KxfmTTr08l5t%2B%2FENP9LTm40wq2ZCiSWlCUMkP9GoCDpOlVkNLeMZz28%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e1042e8b6e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4227,"size_decoded":2749,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb09daf25dce72b2d03baedaf735b673","sha1":"c12a4613037f4a493760e0044c1bee454eba4ab3","sha256":"080a3503a84d42f20c44e0d50338b2b76d441268ae023be9a6a01c38142223e3","sha512":"4e27a65b90e141bc76c70e636ee76cdec1aac0a7002dc1818a47cd756d89fa5a0ee393be7e4e13c87b154a92c7d71eb86cae6beadd0af67dc6e5007f0403dda1","ssdeep":"96:RCIbJaz1cHqSN/moflmzV2Ob3VUJNmpu4tm9ila8kqjOfvl:zbJaCHqScodmzkihu4s9Ma8hafvl","tlshash":"0c9121da6398f6e1f201e3e48515a4b5ba7730f33b3ac75807fa7d95eb1202e948d484","first_seen":"2026-02-01T11:26:56.611827Z","last_seen":"2026-09-20T13:01:34.648756Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.587Z","timestamp":1789909260587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 16:49:05 GMT","end":"Wed, 11 Nov 2026 17:48:54 GMT"},"fingerprint":{"sha1":"97:C3:25:F9:83:2A:76:05:E8:D4:76:4A:DA:52:15:59:ED:A6:05:42","sha256":"FC:04:B1:34:4B:26:76:42:CC:F8:96:7A:3F:5C:0F:DD:75:17:97:D6:AE:93:C5:45:AF:58:15:9D:3C:57:C9:25"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://chat-trade-ai.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: application/json\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Sun, 20 Sep 2026 12:52:35 GMT\r\nx-request-id: e014a7de31fea3d308dc908b4fbff634-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 504\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XICnarHsh4UdG7Oox2a0A1CIAyouvyF4%2FNXJQbGOSC922igP6S3vJla43%2FcrWHN3Vvx%2FFeAy76TyUEeZUss5Qwv4dY3RG3zaVuCmNCCF2FoCgEMXWZ4hn8Qr3NhwAg%3D%3D\"}]}\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a3e1042ec9b023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":988,"mime_type":"application/json","magic":"JSON text data","md5":"46a6a0cb45e9fe8a937c1d379f58d2c5","sha1":"055617a08af5aa9a2aba05aa432407288c559367","sha256":"b09f253b6d83ab759c733d9bc894d8ab857dc68b5f1d96f91dbdb764ef816f37","sha512":"9331a0d3aec182cd05fa258fd0bdacca9d1a6d8a1d329d54b2f921435932c0f8d91b1bad9e7e82b118d21f754cecdc340b159d2b1d62a530349d6991b1a5dca5","ssdeep":"","tlshash":"32a0019e24a28b589860d2a5248a61a59586e64292aa6d0692c83b69da402dc6401271","first_seen":"2026-06-07T21:04:41.962532Z","last_seen":"2026-09-20T13:01:34.657691Z","times_seen":346,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":93,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/adict.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.142Z","timestamp":1789909260142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/adict.js HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Aug 2026 08:24:07 GMT\r\netag: W/\"6a8ea2a7-98f0\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igg9Ml2TQVVwXzbjSpox9Z8ewfOpcg%2FApltKHcoYSQdpSOpyiNlg6of0eLPK%2BePJhzIk%2BzP9GmU0vCcY02DP4GWJpYGBoRIvDtL6%2BiCd6xDS%2FbkeHAlO22xAlE82IJHhbE2ZWlw%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e1042beaf21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39152,"size_decoded":11709,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9160)","md5":"d2c9cfc7263442bc5dd6a875f730babc","sha1":"97c6655ef49ff40bf5961470b8671ea0122a239d","sha256":"aa3747620ea6f22122458aacba9dd5ea71b856ec3aa505d90e652cb5b24feb83","sha512":"abe05fe8772cb00ce8dcba046a065ea7c2ccbb23f5eaf986608df5f59047454e8569433c0b29a143706afe132eb8ff64563bbbe19f9fcbdbe81d4f5a82852fb9","ssdeep":"768:D0V4lBOKh4nWlsAbOoUCADm0allP7ptH114uT8/yR:DzTxUCKmDDHvW6R","tlshash":"7203961995f304531577b8291fcb15017e208d278a4ace10be8d9fdc4f8d96ba2b27be","first_seen":"2026-09-20T12:53:19.983859Z","last_seen":"2026-09-20T13:01:34.658278Z","times_seen":4,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-trade-ai.live/lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/script.js","fqdn":"chat-trade-ai.live","domain":"chat-trade-ai.live","tld":"live"},"ip":{"addr":"172.67.129.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.149Z","timestamp":1789909260149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-trade-ai.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 12:25:32 GMT","end":"Thu, 12 Nov 2026 13:25:27 GMT"},"fingerprint":{"sha1":"39:D6:87:9C:4E:D7:CF:77:70:9A:1E:CF:24:D8:FE:E6:59:75:0D:19","sha256":"CC:6B:E6:9A:30:A9:9E:BD:7A:21:DC:B4:6F:72:F8:D6:2B:C0:C5:54:7D:97:F0:15:17:39:37:69:D7:A0:93:75"}}},"request":{"raw":"GET /lander/chatgpt_trade_rueu_forbot_avto_googledoc1/js/script.js HTTP/1.1\r\nHost: chat-trade-ai.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_758=3mjvt1c33muts3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 15:28:12 GMT\r\netag: W/\"6a60e18c-12c2\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AcDRt3oLb%2BTXJxV8SLIjRKG%2BNBSJN1DVX9iPXNpL8HrUPFLKho8BLU%2FvJQq3boKQzmtLFLj%2BJsRnFqsAdPJ0Fo7TcNbKZHS%2FQDtyAJuVogSYqEDuErnQQ9UXjvjCh7Yv1hVgW6E%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e1042bfaf51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4802,"size_decoded":2456,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4531), with no line terminators","md5":"3eac48eb0ff2525de6d35b7e31a355d1","sha1":"22edde14756ceec3adc7fe72e76b1a19fbc7a8b6","sha256":"dd60be68cf6329fae6e17cc465d4cb585dec40376f7594b6cac4139c31b87733","sha512":"b4401ebe2c12ef3dcb328f57b2ff9e9fed8a601d317a9a2ef04d97e4d23f1a94927a4681a54a6d66e9d092220111eba8604f3269667729db01ce063a9e912926","ssdeep":"96:DzLbud0ATpPQC7lupnRRG2hvPhd4Xmhejp+hnZhAhbh1h5hQxwabWT:XLb6v+C7lupn3GLfp0vxwaST","tlshash":"eda16440d37802b067de91abb0534e49bf7841fabe26442ea51c5dec3be35c253aee50","first_seen":"2026-09-20T12:53:19.969769Z","last_seen":"2026-09-20T13:01:34.658884Z","times_seen":4,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chat-trade-ai.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/59278/SFPRODISPLAYBOLD.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chat-trade-ai.live/5WyR8MZ3/?utm_source=0_8_rueu_tgads_2","date":"2026-09-20T13:01:00.259Z","timestamp":1789909260259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /s/59278/SFPRODISPLAYBOLD.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chat-trade-ai.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/sf-pro-display\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 13:01:00 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 05 Feb 2022 02:00:54 GMT\r\netag: \"20bbc-5d73bbcd13297\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 504\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxE4aqFoA0yaEJKknPZMDhN%2BrsxajHXL2S7wQqt%2Fxdq5%2BXp2DWYML9%2FLH1ZlY1PxUG6z6KqNjAkzKCgGbmgv6TBNRV%2BZ60OPKTOGIftbO0uj9Ekvo%2BDcZjUAivKcZxeItmYOYWE%3D\"}]}\r\ncf-ray: a3e1042cad46b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134076\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134076,"size_decoded":134829,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 134076, version 0.0","md5":"5a6d43d393aff666df0d0b67cbb32c68","sha1":"2bdae4ec52f592b8a9b0786dd53d7efb4f2f5fcb","sha256":"119ccd3741e1185ef0ae63c54b4bcdc65ee0ce4336f1558928707d85b91fbe11","sha512":"2d517324f864d417f62fc74a7aafd0f54c322a23aa7b87d21bb24881a216c5d66c2b76f279800768e051e96c2a6a5b0cb2cc5960f5bb953077b6454c1bc9c763","ssdeep":"3072:PJJ0ljobe01p2YK8TXKSOdXSyEaW1vp3mPxIQuYJ5ORrb6KJ57PCLhqq:Ukee2YKhS3XB2xIQuDxb6C7Pxq","tlshash":"18d3139db96edbdb2da3ed8c10a5efb205dca6c741d178039a81dc67080f796537640c","first_seen":"2023-06-17T15:43:01Z","last_seen":"2026-09-20T13:01:34.653734Z","times_seen":290,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}