{"report_id":"e4ad1ac3-2fa2-478f-b826-4ba70e95416e","version":0,"status":"done","tags":[],"date":"2026-08-19T13:17:27Z","url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"title":"ultrexcapitals.live | International Investment Corporate Company Limited","dom":{"size":217971,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8542)","md5":"ed3de75f0ad33f59cbeac77d111470cd","sha1":"8e8998d11c75c18921dacedf38ce7eddd8ae76fb","sha256":"3927789a69dc4075c096ee927ff1078288c30d8652584a8054fc249f3be5c43a","sha512":"229fddc57da5020ba60dd2295b973111e0179db62f120d482cbcf2d0e7241de970fafc11069298b12994e881338e77c093bf4a0db2bc3471c6302ff6030ac7b4","ssdeep":"3072:KkvOD9FU54QPF+kCfERtxff8PSsmQqGetqlgrLXzZJo1919Yz:KxD9FUzqg/XTqw","tlshash":"412480225e8400ab60974cbb74617f3466f6e319ea824545f2bc0e857ff6cae644fb31","dom_hash":"domhash7af662f3e9478dea745deb869d9f381d","first_seen":"2026-08-19T13:17:44.411503Z","last_seen":"2026-08-19T13:17:44.411503Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T13:17:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-08-14T17:57:37.291884Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-08-14T17:57:37.518007Z","alert_count":0,"request_count":1,"received_data":7743,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"ultrexcapitalfx.com","ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-02-12","domain_rank":0,"first_seen":"2026-08-19T13:17:33.482805Z","last_seen":"2026-08-19T13:17:33.482805Z","alert_count":86,"request_count":86,"received_data":12758927,"sent_data":43350,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"BootstrapCDN:3.3.1","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Bootstrap:3.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-08-14T17:57:37.397465Z","alert_count":0,"request_count":4,"received_data":330509,"sent_data":1890,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.185.39.247","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-08-14T19:03:50.213737Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":634,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"ka-f.fontawesome.com","ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":58377,"first_seen":"2019-12-17T06:36:13Z","last_seen":"2026-08-18T03:44:46.00983Z","alert_count":0,"request_count":9,"received_data":687115,"sent_data":4874,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"kit.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":16651,"first_seen":"2019-03-29T02:12:52Z","last_seen":"2026-08-17T13:10:14.935558Z","alert_count":0,"request_count":1,"received_data":16488,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"3rdparty-apis.coinmarketcap.com","ip":{"addr":"65.9.46.115","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":3258633,"first_seen":"2020-09-29T03:34:53Z","last_seen":"2026-08-18T06:37:25.620923Z","alert_count":0,"request_count":2,"received_data":17938,"sent_data":1138,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-08-17T20:23:35.446271Z","alert_count":0,"request_count":8,"received_data":11724,"sent_data":4544,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"ultrexcapital.live","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-19T13:17:33.483529Z","last_seen":"2026-08-19T13:17:33.483529Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":1916,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.183.96.69","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-08-14T17:57:37.364236Z","alert_count":0,"request_count":1,"received_data":1845,"sent_data":541,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.appear.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a13255532aabf4becfcfb4ea389e9246","sha1":"1c37162e40776ba4c6e45f5a47aba8ebc0c14e94","sha256":"e967b1abaf71f368fba75f75f75d84b9b15f69fa888214f9dce7effd0a0ae848","sha512":"4368fb3fbe064bbea47571bb45242d82f1e1e748f88050b861742c53d7bb2632b06b4c88f1e91cb0a72a8954883b9bde428bb9df0afb500e84de0c51c94bfad0","ssdeep":"","tlshash":"4b311faa31da3e9447fb313f662f73129222c53b4251e46299fadd7c38b2d857803a44","size":1542,"data":"","first_seen":"2024-08-19T20:38:17.258841Z","last_seen":"2026-08-19T13:17:51.381583Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.navigation.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef33f8ed48b7c54233783e793cad6d69","sha1":"d4fd35bbeca4d01d65d744d84b4b14aa14a7f30c","sha256":"89f584f82065d3f4b89698ad748bd4767ca3e162c71cc95a970bf8709caa18db","sha512":"34987962fa082ffa73c1ecff9ff4d46f3b66e2fcafee509a386ca24c15fafe02f069bcf900d99973873bae29f54a26ae40c27db4db9c1cdce3925ff301b8942c","ssdeep":"384:ecWILzzHepNo2jJivwBoOevB+i0NwkLFVj7w4EY2:cgzzHepNo2jJimoY2","tlshash":"58c29594769038ab547372bbc16a40b47272ca34730bea5075efe1f184b8cd523a7e9d","size":25833,"data":"","first_seen":"2023-03-09T10:17:27Z","last_seen":"2026-08-19T13:17:51.344711Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/functionsaed0.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e257e089808315ed604ee013df2cf02","sha1":"5fc8a3429bf3cc43e76df0520e93cab59abf3283","sha256":"4efc030afad11d79762835021273cd7b19399b0f286aa58e6fd3c45f331d5644","sha512":"643c7eafab60e5e33e75f12421d9713d16bd8371c3612673e82a2b09f0b6ae0670e6eac3165bfd6d2b76b9b6900912070641e331438dbc361a1cbcaab2333655","ssdeep":"192:/HzDtnibZrss3qxUkKtW7RZWoR2Oh/h2NKOyYL4A5fm:vtibZrss3qxUDW/WduXOTLNfm","tlshash":"c5e1b70df500a5fec23b2519e219772497e62c60eb12f85af1e9527806eaf554a32f0f","size":7205,"data":"","first_seen":"2026-08-19T13:17:44.511071Z","last_seen":"2026-08-19T13:17:51.349791Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"69db3147b7b6f239342f3c63ad7dbd60","sha1":"466e9e0c1a55cf2f2531169d1ab29cd7998a878d","sha256":"f45b619e5ae74341a3ec408cac89e32b8cebdd8e975873b089473e5fd8bde5b2","sha512":"6dd0d1e2701697d16dc5f888e45718a8fbb75b848656814f1fc5bbf9354f0e0855e3a52c7661eef717eb0c34ed2afd438d1e9fdb81cbe4a445b7f9300afdacb0","ssdeep":"","tlshash":"0cd0120bf474111f049ab115e39159cc35788609013e4d24264290cf3db3f9c130d5b4","size":198,"data":"","first_seen":"2026-06-11T20:26:19.23486Z","last_seen":"2026-08-19T13:17:51.38481Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d75d2b3a2f16f5273d0faa02f04827f5","sha1":"b6d4dca446aa9242c6d163f25f796bc362e3f756","sha256":"334a9250a0a07b9ac3d712204f0e1d0c73c827d369d3d7548dd6c2c575048745","sha512":"2e1d23a50fcb622ec276849538586c2fbdee7f28884c3e911d912f8d14536b9e4b15d5d4c9bb5507127efdc47d208cd8f1904a5c08174ed39613abbea449f326","ssdeep":"","tlshash":"56900248725911e101800222499496601d7c51239a93164121571810845a99c100c810","size":47,"data":"","first_seen":"2025-10-27T04:07:27.435597Z","last_seen":"2026-08-19T13:17:51.385486Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"583f50d573491f23696d929319ad1870","sha1":"012e1ef9d42deace1f096a70ce4da4737588d14c","sha256":"1dfc992c7f282a211e1f61bfc2abd6c92449808b5ed38fec4d6edee5ab04f593","sha512":"f99b0e258a45a57ee273c80104ea860540adc3a1f00f576b7be2a57ced8e69e0f68241739ac4039be7e0ec2cadd11d191f470ad32c6dbdaef79489757e984d99","ssdeep":"","tlshash":"08900284714911e101840232499496901d7861229b93150121061800855a99c1048810","size":45,"data":"","first_seen":"2023-03-26T00:29:37Z","last_seen":"2026-08-19T13:17:51.386184Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"17f2572c45cf540854eccfc55a4256c2","sha1":"b5f11d0e03ef809a18e34e4c925dfd36b187a7d6","sha256":"f5b7d93ff75835cc5bebbda4df792a6f640d45ef497950772f64ad4ae5049bb0","sha512":"6281984f0f99d53d5c500105386bc40827ad206173463edae9b448b7224db744d614c4a7bb0af1182e5faa8602af6f8c5b64c48cd49f61f3597a9f1dfedc8d07","ssdeep":"","tlshash":"5a900248615911e101800222499496601d7c51229a83158121561810945a99c1008810","size":45,"data":"","first_seen":"2025-10-27T04:07:27.443996Z","last_seen":"2026-08-19T13:17:51.386706Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"8cf0b7301b2c3ad8eca8583e923a9405","sha1":"d9bcb974994a09b8aa099045c56d5797d35b7b30","sha256":"58b1b023d8b7ba48bc5bf7de57e380903239bead525dc938161586a2e77206c9","sha512":"68e75e44dbd39aa6324014f7f26f7b206427cdfa839d11553dfcdb7a997e192127234e955cd2f9631c4ce7eeed3aca3e179c9025fb34ab090ed558fb5903d7a6","ssdeep":"","tlshash":"c4900248615911e101800222499496601d7c51239a93164121571810845a99c101c810","size":46,"data":"","first_seen":"2023-03-26T00:29:38Z","last_seen":"2026-08-19T13:17:51.387379Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d4fbca4b62d7bd4ddda9352ba3a4312","sha1":"8fa5e2a214df73e6346ea0d575db018dcbc16e05","sha256":"084731cf8936ea4a61c3af954c45bf21f7a56b94a7fc072333ceef479d05e0e3","sha512":"c5965e8e6fd26921d6bdb3318859c4c32eb7e351e81ab37db6d949a235a6e15b4d1730a6801d33e146b21ddf5ea7813eed7589eafeb0878b0660b603b3954cc3","ssdeep":"","tlshash":"155140ecb150206717b39534693b7b017b62111f6e053861b79f06b88f4d2ac27b7b81","size":2602,"data":"","first_seen":"2026-08-19T13:17:44.523124Z","last_seen":"2026-08-19T13:17:51.38819Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"3702d8a744d460c6e57f4e9148ae0836","sha1":"0576426ef598db469030c5801f10eac9a67befdd","sha256":"9d49346a47992f0307dce5368dd4252167942ce2ad0f1802f1a939e4dc783cb7","sha512":"cbb6c7cc7074754ccb86062aa870cf032da87871627e9f6b52f2f6f859ab0c31702cc23d362ae75e98ed514b6e99b2a4b0de85449025926cb996e839538df089","ssdeep":"","tlshash":"05811baeb2ed532209be9d3585e734492bbd384b201d9744f0b41b958fec296318fd93","size":3937,"data":"","first_seen":"2026-08-19T13:17:44.524157Z","last_seen":"2026-08-19T13:17:51.388973Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae34fb18e46507192836280582247c97","sha1":"fc56cfa3abfa930029d4477abe197af452a217a0","sha256":"8e09556426d686cff750e79f86614d6bed96b040f08ff0708b71b3ae5f35788d","sha512":"9f5d087d9f33d0a1c8f807df746740baaea592dc42862cf5f1b341d9b7497edcbf1617a30d44e38e83af03c6aee01ccd66b2ba2e6ea56a730ec1b32daf5fc0df","ssdeep":"","tlshash":"b4e0a27d3c38908447d240f481bbe6383d1a70204044ce5388aac8686cf0bcaad01898","size":416,"data":"","first_seen":"2026-08-19T13:17:44.52504Z","last_seen":"2026-08-19T13:17:51.389948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b7c105e73e59903ef4bcd79eddcd601","sha1":"135e9054745e1d855f9c6b113c3786db3bd294e2","sha256":"4000bdc9ee88b360c0a5ad0ab2c3c5be2cd007de32ba1482089ca9812dcaf131","sha512":"716fd25e1885c34578224b024bff8349888fa1e75ed4c6b76418a60fca2760961b0014d80dcfac6a327a4ee64d745e183d36c5b1409a5c23bce64f7339f82ba4","ssdeep":"","tlshash":"75c04c47f530585a6886a129d396468d7275844905361d242a41649a78b7f99070e9a8","size":149,"data":"","first_seen":"2023-03-11T22:05:11Z","last_seen":"2026-08-19T13:17:51.3907Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"905092834d59e6ce43aca3a20a58e6c9","sha1":"0c7db5bb06693250d7db2d1f993e3a37f936d8c2","sha256":"e0a4b86a90a79d606abad02a7afb53842e7ab93b276fa9103e3df31fcbdd81f2","sha512":"d038095e3dd516fed5d7e83f1b9bd53567c0dadf648d45e86d971ddcd410128b1728f38e56dcd3a1e51a41706b5d1e9c5b301472587dc615016dcc4e19256aec","ssdeep":"","tlshash":"e41121ba36c764a61326a46307af400db3e527821a2a04f0e4a0d44d6f94e85a56fb8c","size":1000,"data":"","first_seen":"2023-09-18T13:12:18Z","last_seen":"2026-08-19T13:17:51.398458Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.themepunch.revolution.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"515ff748d023fd6f99bbbce59db6c1fc","sha1":"511d0b9f4bef8eda2d426b8ea2a4790069d1fc96","sha256":"19b440db8d0bdf4df7c7c683674b7fd005a78ecd973b509ed625a82672b3e1a7","sha512":"3a84858c42b5e6cca5151b9fc6974bc17e42f29385743aeb74eaceceb94151ff3f3e626ad87898dbc32dfd53a50f36c3f85194d9ed20c9d2a2c73d5bc11ea84b","ssdeep":"1536:mCnzw4tAzmyit9gJLySYeDw5XsmBeDE+RxoqRw1SD8ZRvXvV:mCnzXQZit9gQ+FRw3vV","tlshash":"ad33f854790074b655fb3166e43e411572b27c3b9b078090e2aba87cabfcd89235afdc","size":54824,"data":"","first_seen":"2023-03-07T12:41:31Z","last_seen":"2026-08-19T13:17:51.346582Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/wow.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fcf8f685dc926ccc2866296061ae168","sha1":"80945eebd84a463827395151a74b1e78408df4d8","sha256":"186412f7166b1cc4ae633617a83bac2a507e549387c6e97f69f7654881f086ac","sha512":"2ed6a408595af79ac1aaffdb4b3781522f984ab633c6bfe737b7db16528fd037c25049ebc395ce66cafab8ff221fc06ffc2034c52f9f547824613c6a51a9bbb7","ssdeep":"96:EGqKtAZw5D9jEOVEE1VlebgJAW42IJDaDle:pGO55YOVEEblekJAWNIkDU","tlshash":"c4a143c9bb467032c79792f2863f4205b33a15bda00944bcb6b984e57d34d299236f38","size":4777,"data":"","first_seen":"2023-03-07T01:12:01Z","last_seen":"2026-08-19T13:17:51.357485Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/bootsnav.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ed7f9c0b9b1a801b49fad0ba542493d","sha1":"2ae39fd4df3dfbc9e84195e254697789309ccd6a","sha256":"5f9d6c6a466a6d0bb56e57411685c2f91837740a7651bc0ddf63248eb857864a","sha512":"3d17affddd3b040797973c0ae390fba3511d84d60f1f96dcb80fd205072960405f005d9423545a4071b0cd2bb3aef6dd3ccc9f9b7a138d2fc9dfb02cd00b5ff2","ssdeep":"192:We62Z1ShCl1XgJUV5odfsO6A/cVGV/paRxIZV:iq1SMlnVq1xkGV/pyIZV","tlshash":"e532fd5cf0f071a211ff115e21eb2560add24ca2d788c015f47356a91ea5ea63ea3f3e","size":11733,"data":"","first_seen":"2024-08-19T20:38:17.256508Z","last_seen":"2026-08-19T13:17:51.325934Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.video.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"190469b1b1eabceee324cecf5eaab44d","sha1":"864882d5a16d3ab89f0904b7514b6ce339832664","sha256":"76484dd1a96d73fe092f713341713a5c9518639f85b01ad6e80fe6f519b81da5","sha512":"4e37a20c596b6917cd747f538f9ee5d3f4909a391f902e70017d343ad89cfeef0d9f192395b2b9394ac7039a310f0ebe53730c076a517f7415686561fd8149ac","ssdeep":"384:vdzW20i93Qxima/kkWk9RvwjiuoS45Uw/y1YMcdBU16yyygLEp4BDgKfGsZifSRI:Y/aZfC4RVdBw42wkSR2pB","tlshash":"5ca2b7a7f10428a9651df995a82f13617271be7d9009ca9438b3f1b80f7ce43354aafd","size":23249,"data":"","first_seen":"2023-03-07T12:41:31Z","last_seen":"2026-08-19T13:17:51.333655Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","size":16032,"data":"","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-19T15:48:16.89764Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","size":273837,"data":"","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-19T15:48:16.90418Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.slideanims.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d98dbfaf16fdb036d2d818ea17bed39b","sha1":"e0258619e05634f70ed52863d4d6e60e7449b268","sha256":"d88a29dc6bc426920a8ba03cf1e514736006e851df3ede235864a5f98d9271c6","sha512":"d63c88845bd6603fd859468d8add63c583cf96b1207f68bbe6e99db1359bd6b39f23892ab5292231ef9f6b4fc4dc546da1b02d939a58310d86d9ae43a15386ea","ssdeep":"384:S1aX4OwfkNgPwEN8vo05g4z8QWwwBWCp1FajXUAgQN88Wm3FrWkgH:orPwEN8Qj4RfjXpWvH","tlshash":"0ec20aaade2658a344536243d3f589185214cd33fe33aeca33f590f505e305e22eed96","size":28131,"data":"","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-08-19T13:17:51.356713Z","times_seen":1017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/static/widget/coinPriceBlock.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a67a75e847c10f426a7f44d421dead5e","sha1":"dc93060eed4010b107fa9b036e54fa1c80d9019a","sha256":"fed563a5fe3b581e5459272cd2133581774a8edc76a4fc28ba69222ea5282a27","sha512":"8458f5a4d9b5581a0e53faf9fb61cc8071a8ada62d7d4c6bea50b4cce2a2510a3416b99cf67a64812805fcfea33bb182909b896b76abf9785f71ff0ab4c88f70","ssdeep":"768:6Y4hlf3gv7EmCb1yDHCjP9ey4i+qNBc+fXgfYcs1K3nf4sZELk+CuIZELk+Cu6yc:6ZJQv7EmCb1yTuXArPH+CJ+Cyc","tlshash":"17432adab2d1b1ae4263f3b4583b0205a37f6d3e748ac650f514ddc16e7a89c8613f68","size":57894,"data":"","first_seen":"2026-08-19T13:17:44.471677Z","last_seen":"2026-08-19T13:17:51.351744Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-19T15:48:16.917402Z","times_seen":8578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.cubeportfolio.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa9faf5df6e0fbbdff9f6df27b804fd7","sha1":"aeeeaebdc6e860f660ab32dac80c9e3c3e37ea9b","sha256":"f0a103337ea801ef124ae93d8ceacf7cc0b83ba7d6fd69e341a3a7926df0f2d2","sha512":"c33acb82535d96a0de080b208f9aab368c1a3f3721fbb09120ce25a6f6bab63d8b04649c215e1fe3c9219e923645d7ee2299aa6a6a0ffee780a2e98b7e38d2d0","ssdeep":"1536:SrAn2uNt7Hvn0lhm6Th4cTo8PNXPqWQknr8fH1rlm8H4yy71+P1e+ihx+mux:SUn2ur2hRFr8/rm8HJyQde9M","tlshash":"dea3074471e13ab6c4b33971a20f6407f3b2917ee406a869b1adc1a41b3dd8c5337b6e","size":98351,"data":"","first_seen":"2024-08-19T20:38:17.265196Z","last_seen":"2026-08-19T13:17:51.327286Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.layeranimation.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4b161bd54011818c42aff8f1d3d57fe","sha1":"7a6636f327a30ce3c62acc3a74789ca5d70ebb47","sha256":"7a941f0ecfa25b9b4f9c1a0aeae74d19e672ee6edb798f5dbb4d94284dd3da50","sha512":"197646c574e55d0a1f7a43f68cc28c606271c817039b23a64fc47cfd6a012b3d305a8090335317211bb662a72bdf65f748fe08bba2e9025fd49133d536ea0eca","ssdeep":"384:cTgpinjyBvaLur7x1gzLLXDTtaSjn87UWtXFIEaFYuvZyTvKTM:c0qW7xOzLTDXnlQIE1+M","tlshash":"30e2bad8ba003ce9f25bd196c06f45292260fd7d9602c0f1ba57a4ba1b1cd4136e6f5e","size":31993,"data":"","first_seen":"2023-03-07T12:41:31Z","last_seen":"2026-08-19T13:17:51.371117Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/maxcdn.bootstrapcdn.com/bootstrap/3.3.1/js/bootstrap.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dcb19dbdb18d04b1007be864a85cd13","sha1":"7509c1ded1d9562a4cf99dd63539a08d6a9a7c02","sha256":"6d0c489d9ab712d6670a54b4e665a39072926d309b001e179ccd721102b558df","sha512":"35c297a00d547111544d80f2eb3a0c43017075e42dea5e64cad56ce2ef910a96a0842631258de3931ef62256c978a617c6d6b60057baacbba77e860e9712ca44","ssdeep":"768:q1+7/uRE672wlNrDMlbGqXYu+jS1s8ep0s1QfrXf8X8GEpZOWQ:eFRx7zYyS1WOv8UpZDQ","tlshash":"d2f28546b230316107efb1e5515f020a72396a6ee90690bc78a5daf63db9c48317bf3d","size":35607,"data":"","first_seen":"2023-03-07T17:00:36Z","last_seen":"2026-08-19T13:17:51.375857Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.parallax.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"72a538f2c14775fec8cd74a8245af472","sha1":"912c173386966f62d1826e8162ea297eed4d1cc3","sha256":"3626ea991478ddb13369da7d10a61b01f39224f9b5137402efae175eeb6c63c0","sha512":"71d6db87ab513a5e4d6ce29e5173e69b2443884e077e6f24409c57e82755940efe7357c1ee4026d6d917dab054cb3b697340711e9c81c7ad7db6116e0cf70ada","ssdeep":"192:n1459q1+1t1XgVFO0v4ppsZ244pc0sZYynlIip5ApQWb:h1+1t1XuApC2TpsYynl3p2pQA","tlshash":"0a02c862ae142cb604b723adf56c4bd231224431e909894175fa78b82b6ce5a077efcc","size":8580,"data":"","first_seen":"2023-03-09T10:17:27Z","last_seen":"2026-08-19T13:17:51.367509Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"367a6bebc0f3f8f227abcf8662c43330","sha1":"ad3ca7b3caf8969e7fde4fb28129878f76452cf6","sha256":"00637729923c5a53ac9cc0c40e8ba57043d1868cbd3cd6beed0af955c4013dd7","sha512":"99d94a7fdd976b7ccfabb867ed0f0f4a252201b0f016db3f1cd231446b32b3cd60a1d8d0f6ab672e242a2391e947661de0f8d04fa2440314770199ed2242bfb3","ssdeep":"192:7Q0Zh7WVrvYcFMB3yKfPYc1Xa5dQrgXzfYv7jMcfDr27:7Q0zyRvYcFMB3yRcc5Wkq4","tlshash":"66420c8829522134c977777fce5f520cfb3a416f900696427ead89c85f708144beafae","size":12955,"data":"","first_seen":"2026-08-19T13:17:44.425921Z","last_seen":"2026-08-19T13:17:51.342204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/static/widget/coinMarquee.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c972a951e94508b4e5fce0129122343","sha1":"3fd4032c7f991d1fa38dbcdaed42b199ad4ce073","sha256":"28005a8b2a696febc7b9c1b2659d82f8af19ca5a36753e56443631164b596b4b","sha512":"da9b85a95b389f380f6ee3180232bce2e83c2f4e08f1f5c4c1033fff03d5d0561f9ca64333ec37efc640e7d3ac768cb45a3c9dab9d8587771a31a2b5b6242204","ssdeep":"768:6M4hlf3gv7EmCb1kFHCTP9eyXp+VeRr+HcAYkF/Knf4VZELk+CuIZELk+CuX4scS:69JQv7EmCb1+H+3vw+CJ+Ck40","tlshash":"844319dab2c1b5de02a3f3b4582b0205623e6e7d748dc655f614dec16e7a46c8a13e38","size":59176,"data":"","first_seen":"2023-05-18T08:37:00Z","last_seen":"2026-08-19T13:17:51.360497Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.parallax-1.1.3.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"765661f62c5b9eb9d21b290b84aaa253","sha1":"8f8a035fba7422a32da265b584f2ea6fbb5a3481","sha256":"d2aa60b6fa5eb8296f2dc939b72753a89ac8dc515add32c812d0343594ba627a","sha512":"9ba65ad207dcfa87567583cf61336a24732d77189bcb2b289c2f554dfe0090af2a1b4ff3bb6f5bcf5b1985191bff04c05285c0870be2ca4c1aace489ddae7af1","ssdeep":"","tlshash":"26f04c4c6e44b08b9af361bfc0bf924a513a8a011949e1205009fce89c74e3d5ef7c14","size":562,"data":"","first_seen":"2023-03-11T20:52:52Z","last_seen":"2026-08-19T13:17:51.325212Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/fe05167a24.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"676e89ee559439cbf649bbe18c27b68b","sha1":"f6d3337ccf8622df37d060d5c7155558a42ef884","sha256":"2863c7b436bc7e06fbc7950fb6ccb0a01071c7f808c45abf2e56efdbc50da55a","sha512":"a1fc3fd1b0d945769b8cba1327a5c58f1450b43727c73c049930389ef02449ec27acfd49bb1cbc7c7d3f12e478e30ad0c82f4ebbc75ba1c3ffeb2e5911d14940","ssdeep":"384:ykK7CCF+WhoQxTCljKht0nEGKe2h36YXyl8Yol5:ybCCF+CVxTClj8tIEGKb36YXyl8YU","tlshash":"c262f91c7e81b47a8aaf7092843f670fb675342a30128461e25cd9d4ad7de9ea123f1d","size":15889,"data":"","first_seen":"2026-08-19T13:17:44.417254Z","last_seen":"2026-08-19T13:17:51.334629Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"eval","is_inline":false,"md5":"01cece45c90a71db7d3616eb1b64ee64","sha1":"51ec46279d524491393c8a9d3ef1835c8947b961","sha256":"3a62321995cd73f8e559e86048958d42a12bedd237f56310881e8eff6cfb4ca7","sha512":"952bfdec446a7acfef9800e976fd6c9e12cb56c988c854644015a5b446171d2d90a8ca5c0b42b6399a57e2f952db2b83aace4f2a1b608a7aaaacaa1ee89679b3","ssdeep":"","tlshash":"8f01cb9376d41439c0ad102273bf81a6f8b126e75d3261e0541edc458db0e081faeeb9","size":724,"data":"","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-08-19T13:17:51.39944Z","times_seen":4584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/code.jquery.com/jquery-2.1.3.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e65e8606c70994e503ac69ba288f9f2","sha1":"255057d893d00bf46df9a1471672e5a68d67199d","sha256":"8e9945d7ebf431506391edb3431741c9007f4248bbb09dd451f54d67da1ef01e","sha512":"29f28687ddec577d8dd29430f954fdea53f6a7de3bd71f7752f71c90f2da8139e397220ad8a24f00f4233a431c26c9657383c462dda377ab60c97325aa328687","ssdeep":"1536:vP1vk7i6GUHdXXeyQazBu+4HhiO2wd3uJO1z6/A4fGAub0R4ULgGiyz4npa98HrL:S4Ud/Jiz6UANJ8pa98HrL","tlshash":"b383d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","size":84322,"data":"","first_seen":"2023-03-07T12:09:52Z","last_seen":"2026-08-19T13:17:51.332813Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/owl.carousel.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c52f27fcac36c7667f8fb846e1e94d5","sha1":"e5862559db659ffd530c91452d668c5e7b3f0f2d","sha256":"6c1e31700f68d1666de6b0992e89d413434707718bf729a472404029845bdbad","sha512":"9b8f2503bf30b879d3318e8d3ee6ba447fdd0b3d7e2d4f0c3cc03eb325247e2e05e8a7978318e648c91f1a90fcd7ab7ce1018189d27f028ea33064e38307fb20","ssdeep":"384:7Ket0QK/Q52Cgwm0PQtiRX55DzNvYUyzLsxVxRbm:dK/Q4ptuXNQUyzLIk","tlshash":"08b2a54bb2202385469372b9419b110d713bfb78fc42855c70b6dadfaa4b84e9277b3d","size":23936,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T13:17:51.329333Z","times_seen":4335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.themepunch.tools.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ad9d3676ffba76cd2747580adf677ee","sha1":"cf0556cc05e7b00cf3670565257065c0c0220d4d","sha256":"4bd878668d31670b881ff794d5f3bdc8682d27fe6bb3c801bef72997d51d104f","sha512":"20459cd4dd59fa9af26543de22af59735d857a22cd0bdaa80fbc7520f8c83a71e18afce6f8214361d5639393c5f561941e8b5f2cc8a486aa2500f4463a035684","ssdeep":"3072:iJc8VnIZ6x8/72S4BhYld0pQOHyLEdayi:iJcinI0x8iS20SNHyLEdC","tlshash":"42a34aca7251702145d611e5913f0a43733b98aa740e896cf258d9de3d3cdca21bbfb6","size":104765,"data":"","first_seen":"2023-05-04T08:56:03Z","last_seen":"2026-08-19T13:17:51.370515Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/bootstrap.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb0e635db142b1b9fce20fe2370ec6cc","sha1":"c5c481ca5a263031d938f6c12abd2fe5fb4b6a83","sha256":"5a4a5359110a773bd154da94c48ffd6a6233a29dfd5a9314555f5ae6c3e47459","sha512":"ddcff973930485feaef0476731caf0d210e4e9be47c6271fe5a9175a885f27509558b1ef1be42e791e0398d7d109bad33c3a912b11653c3290825bc0c7871411","ssdeep":"768:9UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXfl/8Gf3ZTbQ:m/76whqKGvl33ZXQ","tlshash":"9af29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","size":36874,"data":"","first_seen":"2023-03-07T01:15:27Z","last_seen":"2026-08-19T13:17:51.347847Z","times_seen":2280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/alert/js/jquery.fake-notification.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"13d39a7d682712fef9676e8ce3f6a8ce","sha1":"1c04189c1270cde1219efea0c349b230990b9ff0","sha256":"a2e77918046fe456ba3d874ccddd3d0bf40a9774c0ffe5d70b08e069b777e847","sha512":"73f0bc1a545a05d7674530d8c8178dccbdd06d1a54851749d1210a1e8e4fc1ccbba7f757b724492ad4d1a08ea2e1e6444d1a8a956259a613df204fae8bc074f9","ssdeep":"","tlshash":"a17172df2251602e53e7d03aa9dff4c48632121ede460629251bd06e9ae437c638fcd8","size":3570,"data":"","first_seen":"2023-03-11T14:50:15Z","last_seen":"2026-08-19T13:17:51.35826Z","times_seen":783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-brands-400.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.580Z","timestamp":1787145401580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-brands-400.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\netag: \"e45da7adeca3d43feb19fa7736201689\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5ef788d0f05b31973ca8ae989fe9748.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 8p45-SOJYxjsj_dyhMdI0UnRWPBUSskuZWV7OUzBmfKeR5Ef3EKRzQ==\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEnXpxJVzkj9WxWrP66ZxnP3tyo2T7mrjsSp%2BcTXR2ADgQoQii%2Bworb23X7N%2BpwGVwgabPHnCkofG9CwOU%2Fl22zsoe5%2Fh8GT5zgrUrHlmruwRIj4MDOs59QxypOKm9dPmTjJ4p%2B7AQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2d96f27dda256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 118696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":118696,"size_decoded":119810,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118696, version 775.1280","md5":"e45da7adeca3d43feb19fa7736201689","sha1":"7e10560e5ba072b6744cb06066cec4d37c631f16","sha256":"cc90a2b68dabba4496647c4e8644ad0ca0444c3fffa5355100482731b2959618","sha512":"f841c42a049680cd0ed489c670f66703dbfb3a6cfed258fec5768cddf35c70b2c1099151d2bde5b57219acc7c40e0dedd313590c360f9e458223f3d102bd788d","ssdeep":"3072:/s0sEGeI2tuiZwN9hCj/54V0qFWugENotGeUv+l/hG:5sehz54RFz1Noge/l5G","tlshash":"e5c3128ae8ccdb19b026463bf18d92854f2751e9744106b4a353fd221dbba43c2e7eb5","first_seen":"2024-12-19T14:38:39.090068Z","last_seen":"2026-08-19T15:18:44.447612Z","times_seen":2977,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/flags/blank.png","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.565Z","timestamp":1787145400565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /flags/blank.png HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 04:48:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 95\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95,"size_decoded":358,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 1-bit colormap, non-interlaced","md5":"71a50dbba44c78128b221b7df7bb51f1","sha1":"0ec63b140374ba704a58fa0c743cb357683313dd","sha256":"3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517","sha512":"6ad523f5b65487369d305613366b9f68dcdeee225291766e3b25faf45439ca069f614030c08ca54c714fdbf7a944fac489b1515a8bf9e0d3191e1bcbbfe6a9df","ssdeep":"","tlshash":"fdb012e323704c36d1014173523c92138b22c31ca14d19438001fc280c63305ccc879a","first_seen":"2023-04-05T13:40:31Z","last_seen":"2026-08-19T13:17:51.348346Z","times_seen":22364,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/flags/16.png","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.274Z","timestamp":1787145401274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /flags/16.png HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.510Z","timestamp":1787145401510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/font-awesome/4.5.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/img/favicon.php","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.982Z","timestamp":1787145401982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /img/favicon.php HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/envas-icons.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.212Z","timestamp":1787145400212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/envas-icons.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:53:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11237\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63339,"size_decoded":11547,"mime_type":"text/css","magic":"ASCII text, with very long lines (63339), with no line terminators","md5":"829b628f8aa0dc192d11e0aaa7fc82bf","sha1":"51e1b169c1e8502f56adc6fc6b4d684d29c73c4e","sha256":"785beebfb39a37eaab842488a634d0d23370d25ef8dfa5f7e7a67fce3f719e46","sha512":"43bd7d452ff7cd38b2ca72c268895e0c97df7e525335ac2baecca3e65532dc572c56916e4782c5463488488487a146ecc6e0b8d7a21ed180e4977603909e2c2c","ssdeep":"768:/J6l9TBU20cCOULtrpYPzV4DQNp6uvBIs:/0i2AOULtruPZBIs","tlshash":"4253a3e4e89e12ec7732c446c745b64c9de6f122cee04d13f06f991c1fe12669786ab8","first_seen":"2025-11-12T04:02:28.259886Z","last_seen":"2026-08-19T13:17:51.376444Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/fe05167a24.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.482Z","timestamp":1787145400482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 22:43:58 GMT","end":"Tue, 10 Nov 2026 23:43:53 GMT"},"fingerprint":{"sha1":"27:66:CD:33:A1:36:78:CF:48:0E:80:96:7F:BF:D5:3D:EA:A1:BA:94","sha256":"E0:AA:C3:D8:02:C4:8B:44:BD:25:27:FC:56:D4:4C:A2:5E:A6:71:77:C7:35:20:F5:59:BB:5F:1F:70:30:2B:3B"}}},"request":{"raw":"GET /fe05167a24.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=60, public, stale-while-revalidate=30\r\nserver: cloudflare\r\nvary: origin, accept-encoding, access-control-request-headers, access-control-request-method\r\nx-request-id: GM03RerMY1xDN4KTM0yC\r\ncf-cache-status: MISS\r\ncontent-encoding: gzip\r\ncf-ray: a2d96f211922a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15889,"size_decoded":6172,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15427)","md5":"676e89ee559439cbf649bbe18c27b68b","sha1":"f6d3337ccf8622df37d060d5c7155558a42ef884","sha256":"2863c7b436bc7e06fbc7950fb6ccb0a01071c7f808c45abf2e56efdbc50da55a","sha512":"a1fc3fd1b0d945769b8cba1327a5c58f1450b43727c73c049930389ef02449ec27acfd49bb1cbc7c7d3f12e478e30ad0c82f4ebbc75ba1c3ffeb2e5911d14940","ssdeep":"384:ykK7CCF+WhoQxTCljKht0nEGKe2h36YXyl8Yol5:ybCCF+CVxTClj8tIEGKb36YXyl8YU","tlshash":"c262f91c7e81b47a8aaf7092843f670fb675342a30128461e25cd9d4ad7de9ea123f1d","first_seen":"2026-08-19T13:17:44.417254Z","last_seen":"2026-08-19T13:17:51.334629Z","times_seen":2,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":140,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/grid33.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.512Z","timestamp":1787145400512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/grid33.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:26:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 252605\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":252605,"size_decoded":252873,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=17, height=4912, bps=218, compression=none, manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=7360], progressive, precision 8, 724x483, components 3","md5":"05e91e20d9cdc27938a16ba541852ae7","sha1":"a612555c3d774568386f0b2d3bdf1b21200f26cc","sha256":"33989ffb598ea5700965c134c9463d2e3948fcba1c3b00e488107149799bc672","sha512":"bc3e8936189b219440d00b4625e695bf67259cbbf3b274c77a2bddaf89e7dc6cf6135bbeb447be385c54552eeda5f0f11733e86f67e7dc84ca58e0bcfad2525e","ssdeep":"6144:Nv8COPCDgc+MXX2lou676dBCxRRx5aI7tHny+b:NFiMWbBCxR7Ry+b","tlshash":"74341242f8752105f9c86a3a70fcc285e6bb5be1673a5a8b7f8d452b3f78a464c1c053","first_seen":"2025-11-12T04:02:28.272865Z","last_seen":"2026-08-19T13:17:51.362352Z","times_seen":4,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/translate.google.com/translate_a/elementa0d8.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.815Z","timestamp":1787145400815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/fonts/fontawesome-webfont3295-3.html","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.281Z","timestamp":1787145401281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/fonts/fontawesome-webfont3295-3.html HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ui/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/bootsnav.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.466Z","timestamp":1787145400466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/bootsnav.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:22:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2181\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11733,"size_decoded":2418,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2958), with CRLF line terminators","md5":"7ed7f9c0b9b1a801b49fad0ba542493d","sha1":"2ae39fd4df3dfbc9e84195e254697789309ccd6a","sha256":"5f9d6c6a466a6d0bb56e57411685c2f91837740a7651bc0ddf63248eb857864a","sha512":"3d17affddd3b040797973c0ae390fba3511d84d60f1f96dcb80fd205072960405f005d9423545a4071b0cd2bb3aef6dd3ccc9f9b7a138d2fc9dfb02cd00b5ff2","ssdeep":"192:We62Z1ShCl1XgJUV5odfsO6A/cVGV/paRxIZV:iq1SMlnVq1xkGV/pyIZV","tlshash":"e532fd5cf0f071a211ff115e21eb2560add24ca2d788c015f47356a91ea5ea63ea3f3e","first_seen":"2024-08-19T20:38:17.256508Z","last_seen":"2026-08-19T13:17:51.325934Z","times_seen":5,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rdparty-apis.coinmarketcap.com/v1/cryptocurrency/widget?id=1,1027,825,1839,6636,52,2010\u0026convert_id=2781","fqdn":"3rdparty-apis.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.115","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.461Z","timestamp":1787145401461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Thu, 05 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E7:C3:E1:82:1C:B9:33:41:49:DA:99:D4:24:C5:BF:FA:51:0A:E1:DD","sha256":"AA:B1:23:FF:FD:AA:09:B6:24:65:4B:3D:C0:77:15:44:6B:48:EB:C7:BA:52:DE:64:54:F6:8C:1D:44:F3:EE:16"}}},"request":{"raw":"GET /v1/cryptocurrency/widget?id=1,1027,825,1839,6636,52,2010\u0026convert_id=2781 HTTP/1.1\r\nHost: 3rdparty-apis.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 19 Aug 2026 13:16:03 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nserver: Tengine\r\naccess-control-allow-credentials: false\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: WWW-Authenticate,Server-Authorization\r\ncache-control: max-age=30, must-revalidate\r\ncontent-encoding: gzip\r\nx-traefik-route: coinmarketcap-thirdparty-apis\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding,accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1abd987c61e5ddaeca88770eced438a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: aoxN53QFHCtfv7TAOYwd7oK44mhPw8OXFhl3Bve2vn8-3Wyfc4CKdA==\r\nage: 38\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8103,"size_decoded":2952,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8ee352b5b42d87c2b3cffd8c3b7c8936","sha1":"2f8260bd44f3f9ee671ef4cd69f3976f9ea5e611","sha256":"d949685e935bb55a54533eab4a9110510b6775afcf5828daddc97da0417bd0f6","sha512":"deabc43a7c478c4500012ce5d9ac5d48c695d6bc0b22a8d2746044999394479200ae8692ab42fc810cb4f28b56ce5da970f5775118353a0a837fb4707488649d","ssdeep":"96:I1SIJKY2dBkIkgzLUWQdBK7wJKY2djxPWrOqxHKofY2vG:I1V0/xgMUMuSqxqOG","tlshash":"6df1316746b41c7ac57f5c60081737880d2c74e5c88c69af2add0fa881d5fd76282bae","first_seen":"2026-08-19T13:17:44.421228Z","last_seen":"2026-08-19T13:17:51.350392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":27,"connect":26,"send":0,"wait":132,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/video.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.888Z","timestamp":1787145400888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/video.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ui/css/style52e5.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/cubeportfolio.min.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.214Z","timestamp":1787145400214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/cubeportfolio.min.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:54:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11119\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79815,"size_decoded":11429,"mime_type":"text/css","magic":"ASCII text, with very long lines (65247), with CRLF line terminators","md5":"0a69edcddcc7be519e90528c3aaba28f","sha1":"0c6e0f5f4b4f0420d87f77c284329a3e9bd3533a","sha256":"00eadcea578492179b015f71aa787be86b60c2430ccdbaecc360c95cf1cff4b3","sha512":"77f6fee4258536040877772e8bf07e7788c8460e978565feddf14427dbecee5afc24ed407966c547cb72fb93a57fb636a0fe7d17c4349c19d47c18a1e5197a71","ssdeep":"1536:daMVL15JavCxCwCJCIuVfOvmQ43pv47Je7pab6H95N68fvW5X1qKfGW8vGmf7sdW:TaB2T/fIfifTd","tlshash":"b6738411908132188163bf60f7ce9597573ccaa3b0620dff778ae909c3079ad9667b5b","first_seen":"2024-08-19T20:38:17.226407Z","last_seen":"2026-08-19T13:17:51.352681Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.238Z","timestamp":1787145400238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 10:17:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6631\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30930,"size_decoded":6940,"mime_type":"text/css","magic":"ASCII text, with very long lines (30765), with CRLF line terminators","md5":"d20438779b1e03dd042e5125ca75b584","sha1":"5f24e81acf39c3fc8003174346232e687d406cbe","sha256":"67c04522f01714791b1c36840e5983d16f7aa1cf35900d550eaf2adab031f298","sha512":"aedeef77b0cc38b7a2c199dff2486eb6578b31abc7fe0025c493471e4ea990c6c1370eb4d92786e37c2f2d61733618d0c84df430fa9861c586152c2f478d2dcb","ssdeep":"384:Mu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:Xlr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"fed241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d22a512c5fba","first_seen":"2024-08-19T20:17:24.217618Z","last_seen":"2026-08-19T13:17:51.345967Z","times_seen":17,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.486Z","timestamp":1787145400486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:46:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2847\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12955,"size_decoded":3084,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"367a6bebc0f3f8f227abcf8662c43330","sha1":"ad3ca7b3caf8969e7fde4fb28129878f76452cf6","sha256":"00637729923c5a53ac9cc0c40e8ba57043d1868cbd3cd6beed0af955c4013dd7","sha512":"99d94a7fdd976b7ccfabb867ed0f0f4a252201b0f016db3f1cd231446b32b3cd60a1d8d0f6ab672e242a2391e947661de0f8d04fa2440314770199ed2242bfb3","ssdeep":"192:7Q0Zh7WVrvYcFMB3yKfPYc1Xa5dQrgXzfYv7jMcfDr27:7Q0zyRvYcFMB3yRcc5Wkq4","tlshash":"66420c8829522134c977777fce5f520cfb3a416f900696427ead89c85f708144beafae","first_seen":"2026-08-19T13:17:44.425921Z","last_seen":"2026-08-19T13:17:51.342204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/2010.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.680Z","timestamp":1787145401680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/2010.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 294\r\nage: 29383\r\nlast-modified: Wed, 30 Jul 2025 12:26:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 19 Aug 2026 05:08:21 GMT\r\ncache-control: public, max-age=86400\r\netag: \"b0daee00997a77ee7106aae78a7519b0\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Tb6qejePivqFj8HwkHUlCmLjM7jvE7Zv2GaVhh9JsjSpg90KqmZ7vA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":865,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b0daee00997a77ee7106aae78a7519b0","sha1":"28de3b77db095abefe435988362da51f85c03d97","sha256":"9b4cd1b3fea428c732481ba097baa9c801d1021b9e9d3bc160b5e6d67b94daaa","sha512":"113a2b5c1daa16f10c6d328f36f2270985face81ae694e73f98a0ad4475b150a94ed0c573a36c350dba5284c46f61addbcf630a1c9c35ee817ab5ab5b0b25368","ssdeep":"","tlshash":"fce0ebf7a7ce06b6d431284f102261feab768db8c888002c052f15384b3d2babac01c5","first_seen":"2025-08-01T10:28:26.029463Z","last_seen":"2026-08-19T13:17:51.380708Z","times_seen":324,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.parallax-1.1.3.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.250Z","timestamp":1787145400250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/jquery.parallax-1.1.3.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Feb 2026 10:37:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":562,"size_decoded":519,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (562), with no line terminators","md5":"765661f62c5b9eb9d21b290b84aaa253","sha1":"8f8a035fba7422a32da265b584f2ea6fbb5a3481","sha256":"d2aa60b6fa5eb8296f2dc939b72753a89ac8dc515add32c812d0343594ba627a","sha512":"9ba65ad207dcfa87567583cf61336a24732d77189bcb2b289c2f554dfe0090af2a1b4ff3bb6f5bcf5b1985191bff04c05285c0870be2ca4c1aace489ddae7af1","ssdeep":"","tlshash":"26f04c4c6e44b08b9af361bfc0bf924a513a8a011949e1205009fce89c74e3d5ef7c14","first_seen":"2023-03-11T20:52:52Z","last_seen":"2026-08-19T13:17:51.325212Z","times_seen":208,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapital.live/en/ui/js/jquery-countTo.js","fqdn":"ultrexcapital.live","domain":"ultrexcapital.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.464Z","timestamp":1787145400464,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /en/ui/js/jquery-countTo.js HTTP/1.1\r\nHost: ultrexcapital.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T15:44:52.76299Z","times_seen":17975690,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/home3-banner3.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.501Z","timestamp":1787145400501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/home3-banner3.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:19:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 224640\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":224640,"size_decoded":224908,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x810, components 3","md5":"d902744e6d8bd2b13aebe7af4e4f7e94","sha1":"58a9a4aab5ddb482e034d4b6dbcef116f281ab5a","sha256":"8a4ed8bce5f7950d5f345263813f4b3684940707001a41b2638a9f0712253205","sha512":"dc240f5ba7446c0a47fad9e4483d40ccee9edcb6911ee3b7dc468ba913f802824aebf641de583b9c8887f4a87b68f1daf7b41211717649f52c0c942e15620502","ssdeep":"6144:3Cphlw6rGHkVnLlq2BysSHkkT+wWhfWbG:3eVSEVLlq2B7lLWbG","tlshash":"4d24230a9a060485f76fafc9d8223e57ca957434471fd6ef22349db31a3a58272472cb","first_seen":"2025-11-12T04:02:28.265452Z","last_seen":"2026-08-19T13:17:51.345325Z","times_seen":4,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/grid11.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.510Z","timestamp":1787145400510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/grid11.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:25:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 503148\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":503148,"size_decoded":503416,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, description=Two Businesswomen Meeting In Office, xresolution=122, yresolution=130, resolutionunit=2], baseline, precision 8, 1200x800, components 3","md5":"d3a080eb89aa67950041a82d79ebb642","sha1":"a4ce02da6760bdead4276f5846f816c41123988c","sha256":"c5222a7940490ba1c5779f81d992d84b69ffadab229c0da4041e2bddf80cea0e","sha512":"ea3c31e4af3b9200d1df21fe827be3d8ff67c546d59ce04f319733d387a48f6124cc567ced04a4c2c3588960cf0bdbfd584315a19ff15aa1d0356b42cc247a49","ssdeep":"12288:rWSZzVuZpOrnAAFQL6g46TiIgcTw+SWs6/JCi3DBBNOoA2vs:r7VuZpOtO6g9DTs613DJOotU","tlshash":"9bb423d76641b914963c612e0489492d820fae6e05e4253073cdd4bfeffb54b8d2eb8b","first_seen":"2025-11-12T04:02:28.26348Z","last_seen":"2026-08-19T13:17:51.337061Z","times_seen":4,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/uploads/testimonies/thumb/tes2.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.524Z","timestamp":1787145400524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /uploads/testimonies/thumb/tes2.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:30:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70692\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70692,"size_decoded":70959,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 828x800, components 3","md5":"12b1067fa550bb5bb9cca17a7fa3261f","sha1":"3d263a5fcebf4e298b1691b77f701e1bb576ef2f","sha256":"5d05c9f6cde58333485679d81a3a57e300f32a1e724fb7ff3f513a16800b9eb8","sha512":"486cb34f64ce2fc4d7041c2c469047e5f5f088e2cceafe860947978ce607a8dab7db553754c84f5282bf22233f536d0f6448001f7e967fd8e85f110caad00c4b","ssdeep":"1536:NwwXk0udiiCB0Ip2C2llscbAnb3BQi4eXbfjSRwB7YN7kzAv:CwZudBCd54Ujz4eXTuRwBsNAkv","tlshash":"616302087a459104ed6c04be51cd26148fb8b113e9ab74f2fa3512fb8b3715a4cf27a3","first_seen":"2025-11-12T04:02:28.290044Z","last_seen":"2026-08-19T13:17:51.332105Z","times_seen":6,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/uploads/testimonies/thumb/tes1.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.517Z","timestamp":1787145400517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /uploads/testimonies/thumb/tes1.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:29:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168002\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":168002,"size_decoded":168270,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 828x999, components 3","md5":"8a2d56e8257cf674c1042f99e5cb4201","sha1":"cf7b364cf7d465e20e934edf94f27c31afc92e53","sha256":"f9c1ac3eb056716dadef2f119769294a61dbaf5cd07699826cf30b2c5a9dcf6a","sha512":"f223e816776fe63852203cbf10e2b7cf560cefb7e7aa215cb557c6dd9d447e651010d5a966673a5d10c1710e659d0adec9586011d2b56f3614b69846c5392cf7","ssdeep":"3072:1DYlYw/s4rsD4ogWD+PAzrs3CL/82tVr0YC18CTHJpJwiZQTaD9Er8Z:ilPr2D+PeU2tVs1zVpJwiVZ","tlshash":"76f31212764d08d2e7ddbb3defa8a526c587f532211b928e180f0001b9e99a3de7d953","first_seen":"2025-11-12T04:02:28.246307Z","last_seen":"2026-08-19T13:17:51.383218Z","times_seen":6,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/bootstrap.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.248Z","timestamp":1787145400248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/bootstrap.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Feb 2026 10:36:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9451\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36874,"size_decoded":9688,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003), with CRLF line terminators","md5":"fb0e635db142b1b9fce20fe2370ec6cc","sha1":"c5c481ca5a263031d938f6c12abd2fe5fb4b6a83","sha256":"5a4a5359110a773bd154da94c48ffd6a6233a29dfd5a9314555f5ae6c3e47459","sha512":"ddcff973930485feaef0476731caf0d210e4e9be47c6271fe5a9175a885f27509558b1ef1be42e791e0398d7d109bad33c3a912b11653c3290825bc0c7871411","ssdeep":"768:9UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXfl/8Gf3ZTbQ:m/76whqKGvl33ZXQ","tlshash":"9af29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","first_seen":"2023-03-07T01:15:27Z","last_seen":"2026-08-19T13:17:51.347847Z","times_seen":2280,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/static/widget/coinMarquee.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.243Z","timestamp":1787145400243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /static/widget/coinMarquee.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Feb 2026 10:24:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16825\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59176,"size_decoded":17063,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58991), with no line terminators","md5":"0c972a951e94508b4e5fce0129122343","sha1":"3fd4032c7f991d1fa38dbcdaed42b199ad4ce073","sha256":"28005a8b2a696febc7b9c1b2659d82f8af19ca5a36753e56443631164b596b4b","sha512":"da9b85a95b389f380f6ee3180232bce2e83c2f4e08f1f5c4c1033fff03d5d0561f9ca64333ec37efc640e7d3ac768cb45a3c9dab9d8587771a31a2b5b6242204","ssdeep":"768:6M4hlf3gv7EmCb1kFHCTP9eyXp+VeRr+HcAYkF/Knf4VZELk+CuIZELk+CuX4scS:69JQv7EmCb1+H+3vw+CJ+Ck40","tlshash":"844319dab2c1b5de02a3f3b4582b0205623e6e7d748dc655f614dec16e7a46c8a13e38","first_seen":"2023-05-18T08:37:00Z","last_seen":"2026-08-19T13:17:51.360497Z","times_seen":15,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/news2.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.527Z","timestamp":1787145400527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/news2.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:33:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49987\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49987,"size_decoded":50254,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 590x350, components 3","md5":"df8f215dd3c6c8727a3cbca0d9e6104b","sha1":"4bc116d270f1fb22270b057b7a2b670f31e780b2","sha256":"4d405be26dd3addf2cc7c34e0635a2d640e88cda3123b3f9da874e5519bb9c85","sha512":"0588a7d760285d28967465f1f3ee186bee96131bb5115a3e3e3e2f2e88654b193716b97891e9c96cf1d42170038c83469313f3e0c34c7f2631225aca79595e0b","ssdeep":"768:RY/npT9uDTzJyVwDxiewucHEQb37peqWEHQB84MXSSsTeOFNkJGEe:6ftczmjQ4jrQ8QBP/egnF","tlshash":"b023f158b143c64613534c3da97efe1657b580f82bcb696e082f3854ae12bb47513b8c","first_seen":"2023-04-15T23:15:16Z","last_seen":"2026-08-19T13:17:51.378742Z","times_seen":160,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.885Z","timestamp":1787145400885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.themepunch.revolution.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.124Z","timestamp":1787145401124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:36:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14517\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54824,"size_decoded":14755,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32004), with CRLF line terminators","md5":"515ff748d023fd6f99bbbce59db6c1fc","sha1":"511d0b9f4bef8eda2d426b8ea2a4790069d1fc96","sha256":"19b440db8d0bdf4df7c7c683674b7fd005a78ecd973b509ed625a82672b3e1a7","sha512":"3a84858c42b5e6cca5151b9fc6974bc17e42f29385743aeb74eaceceb94151ff3f3e626ad87898dbc32dfd53a50f36c3f85194d9ed20c9d2a2c73d5bc11ea84b","ssdeep":"1536:mCnzw4tAzmyit9gJLySYeDw5XsmBeDE+RxoqRw1SD8ZRvXvV:mCnzXQZit9gQ+FRw3vV","tlshash":"ad33f854790074b655fb3166e43e411572b27c3b9b078090e2aba87cabfcd89235afdc","first_seen":"2023-03-07T12:41:31Z","last_seen":"2026-08-19T13:17:51.346582Z","times_seen":138,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/cloud/img/flags/us.svg","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.453Z","timestamp":1787145401453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/cloud/img/flags/us.svg HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 810\r\ndate: Sun, 14 Jun 2026 03:21:41 GMT\r\nlast-modified: Fri, 12 Jun 2026 02:53:01 GMT\r\netag: \"50162f60f2cd5ba81c94bbd8ec32dee0\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fb0991a0cdc083e8b3d013da8a2e9954.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: _cSb9gbEUKTobUVT3t8AIJ9T3Q40vf_amdOEmyJtyVZpJ6MlYTDzkg==\r\nage: 5738101\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":1404,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50162f60f2cd5ba81c94bbd8ec32dee0","sha1":"d128b6a142be876b37a25e4b2b7b84a4df0ebcec","sha256":"0af1cd813dd9bab39fb6bc264eeb506fc0d665a00def1716be679ecd3e3189c9","sha512":"8a43a657439df401b69972eac31fae374c25fa6c9d5086ce8206f0f74c7a97bb3c1a81edec97be248ef6bf3f058e41513e35f43679bd69d445b730c2dd4e7570","ssdeep":"","tlshash":"0a012fd6711e480d835d76cdd7bab499c0226065928f0573e451be07dc7bf61ad194c8","first_seen":"2023-06-28T16:08:39Z","last_seen":"2026-08-19T13:17:51.372994Z","times_seen":470,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/bootstrap.min.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.209Z","timestamp":1787145400209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/bootstrap.min.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:51:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18273\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121248,"size_decoded":18761,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"93193fcc89ac912bb75d079b2a12cb18","sha1":"6f35396dd90a07b825de317bfc4c9dda2d9429e3","sha256":"356ee1e8d52059b4b52d56cfd57e577d6ef43d0e77e1cbbcd4dac97c06b62702","sha512":"989a19891296399c69440f5aebfd2709d2f596e839c7d9a13f6bee766da9662e6e283bdb9ac1eb933a327179fec3d3152bfa52633d693858c5950324d2629ebd","ssdeep":"768:RyUGxw/jc/QWlJxtQ8IuiHlqLmzIkX8OAduFKbv2ctg2Bd8JP7ecQVvH1Fx:0w/o1BIuiHlqLmR8lDbNmPbU","tlshash":"43c3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f846ca1673f1a","first_seen":"2026-08-19T13:17:44.452772Z","last_seen":"2026-08-19T13:17:51.366837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/font-awesome/4.5.0/css/font-awesome.min.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.484Z","timestamp":1787145400484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 24 Feb 2026 08:54:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5858\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27396,"size_decoded":6167,"mime_type":"text/css","magic":"ASCII text, with very long lines (27231), with CRLF line terminators","md5":"5b5630a48d2917b897740bc795cd12a9","sha1":"dd1cb1cfcadffbfac263b14a31b5f462002460a4","sha256":"fd72508342aa931b0cb503c2952d2beb75c8c6bf381ed4e8b8f45f55ccb8deba","sha512":"90f89483886b5c6ddba12e90460952eecae5484bc005d29344339ac452d1b779d917db32a37ff1d354766eff846257ac07803fcef55cca40ac20be0dd81fd2bc","ssdeep":"384:qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8S:plr+Klk3YlKfwYUf8l8yQ/j","tlshash":"dac23ff8e54c01d66731c48bff81b36862baf73dd5814d99f01f690c29d22a522c5bba","first_seen":"2026-08-19T13:17:44.45402Z","last_seen":"2026-08-19T13:17:51.374139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/unpkg.com/sweetalert%402.1.2/dist/sweetalert.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.782Z","timestamp":1787145400782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /unpkg.com/sweetalert%402.1.2/dist/sweetalert.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.947Z","timestamp":1787145400947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.024Z","timestamp":1787145401024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.672Z","timestamp":1787145401672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1573\r\nage: 29694\r\nlast-modified: Mon, 07 Dec 2020 19:06:42 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 19 Aug 2026 05:04:21 GMT\r\netag: \"9b9545b0e6a87b4aa1009f10f35c37d2\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: uIwrT_c4eCb6fx-PlMAUCEYyVM-wfYYeYpA-uqF8EedAobYn3mufIg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1573,"size_decoded":2069,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"9b9545b0e6a87b4aa1009f10f35c37d2","sha1":"f5f942a5ea3a33ffcfb3d1d6e64233571bf843b5","sha256":"2b6064887ef3e3f56b479f8ea7f09711dd735504e5ba4f937ca2243eed79ca08","sha512":"c1362e9f353251e39422b644d7505799b3ea07e211aaa19c589d52796731b30acabe903746b9a5aca5d114379084a4e24e81f3dee6c962f6e46465f5754d91f3","ssdeep":"","tlshash":"6c31c5e0efa18bf915198d329614f498d8ed1d99bf214aaf8b254016d5b10a8868eb3c","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-08-19T13:17:51.351187Z","times_seen":952,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":13,"dns":16,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.themepunch.tools.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.471Z","timestamp":1787145400471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34780\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104765,"size_decoded":35018,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26623), with CRLF line terminators","md5":"1ad9d3676ffba76cd2747580adf677ee","sha1":"cf0556cc05e7b00cf3670565257065c0c0220d4d","sha256":"4bd878668d31670b881ff794d5f3bdc8682d27fe6bb3c801bef72997d51d104f","sha512":"20459cd4dd59fa9af26543de22af59735d857a22cd0bdaa80fbc7520f8c83a71e18afce6f8214361d5639393c5f561941e8b5f2cc8a486aa2500f4463a035684","ssdeep":"3072:iJc8VnIZ6x8/72S4BhYld0pQOHyLEdayi:iJcinI0x8iS20SNHyLEdC","tlshash":"42a34aca7251702145d611e5913f0a43733b98aa740e896cf258d9de3d3cdca21bbfb6","first_seen":"2023-05-04T08:56:03Z","last_seen":"2026-08-19T13:17:51.370515Z","times_seen":14,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/alert/js/jquery.fake-notification.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.482Z","timestamp":1787145400482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /alert/js/jquery.fake-notification.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1184\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3570,"size_decoded":1421,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1999), with CRLF line terminators","md5":"13d39a7d682712fef9676e8ce3f6a8ce","sha1":"1c04189c1270cde1219efea0c349b230990b9ff0","sha256":"a2e77918046fe456ba3d874ccddd3d0bf40a9774c0ffe5d70b08e069b777e847","sha512":"73f0bc1a545a05d7674530d8c8178dccbdd06d1a54851749d1210a1e8e4fc1ccbba7f757b724492ad4d1a08ea2e1e6444d1a8a956259a613df204fae8bc074f9","ssdeep":"","tlshash":"a17172df2251602e53e7d03aa9dff4c48632121ede460629251bd06e9ae437c638fcd8","first_seen":"2023-03-11T14:50:15Z","last_seen":"2026-08-19T13:17:51.35826Z","times_seen":783,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:48.237Z","timestamp":1787145408237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-BI-Moxe0.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 13:16:48 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-3ea0\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k1tT4i+7YEPVJey12vj+KwqtUhVEzRipH8dqIXBZzhVGe7v/NjOy/DjTHfqOmsalwExZEAQ\r\nx-77-nzt-ray: fdb54123be597b2be5ac856ad4881b0e\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1382489\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16032,"size_decoded":6731,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15624)","md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-19T15:48:16.89764Z","times_seen":519,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapital.live/en/ui/js/viedobox_video.js","fqdn":"ultrexcapital.live","domain":"ultrexcapital.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.470Z","timestamp":1787145400470,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /en/ui/js/viedobox_video.js HTTP/1.1\r\nHost: ultrexcapital.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T15:44:52.76299Z","times_seen":17975690,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/grid22.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.513Z","timestamp":1787145400513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/grid22.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:26:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31682\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31682,"size_decoded":31949,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 598x398, components 3","md5":"34de916a514796626e3289d1ac289a26","sha1":"8be85af3c6ae22d3f1b3d8632790ffe66ec672ed","sha256":"bd65da0c5c09666e983c494ee0aa6a50a0edead8f06176da8b074891d0ac0f91","sha512":"95dac55f6241ecac8eef9392f619496e85356cf2ac5e0b18584c322c67aaf2fcffd3dc3fa5102e5f34404bc812de3a17e72017ff73c9e7c5bf070582112ac7aa","ssdeep":"768:qECfusCrC3poPb2495lfDOde3dydDWVHT6ebiADviNakCCYh:qECjCrCZob243pw6dykDigkvYh","tlshash":"74e2f29bc15cc903f63e3b332e984748a2516d73947015d72e6045e9dc6d08d699f7b8","first_seen":"2025-11-12T04:02:28.273643Z","last_seen":"2026-08-19T13:17:51.363004Z","times_seen":4,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.ttf","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.085Z","timestamp":1787145401085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.ttf HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/translate_a/element.js?cb=googleTranslateElementInit2","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.272Z","timestamp":1787145401272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/6636.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.682Z","timestamp":1787145401682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/6636.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 776\r\nage: 27944\r\nlast-modified: Tue, 23 Dec 2025 07:43:14 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 19 Aug 2026 05:30:58 GMT\r\ncache-control: public, max-age=86400\r\netag: \"addb519510c2673435e828b9679b3dd9\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: mMbNr1SXLj3F2DTxFgUBUg6GBAMT9ywNVSz4FHqG-6Ql9xeSrrDcbQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":776,"size_decoded":1347,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"addb519510c2673435e828b9679b3dd9","sha1":"162a72fd5a1aa21803aa4c8d5bd0711b882af2f3","sha256":"80a2efb8e28274296ccf1ef0a972c75665aa96739c295e8a73b276ac03e1f5ad","sha512":"259301a9d5ad6a01ed043830671953f1488d40536a5d6527453889d21f8156060d859a4f97b989fbab3e99340b2dcdf0883dc808451afa9b4eeec1ff8756699f","ssdeep":"","tlshash":"f101cacdc99605b9d468c751ec170171363cbfc281fb020fd1eb50350047d72d049643","first_seen":"2025-12-27T04:07:58.2776Z","last_seen":"2026-08-19T13:17:51.354217Z","times_seen":32,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/bb6a5b3e997cf71d068d4a1409fd7f1c5a59e07c.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.183.96.69","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:48.014Z","timestamp":1787145408014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/bb6a5b3e997cf71d068d4a1409fd7f1c5a59e07c.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 13:16:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"5d1-GRC0YytwLV4R1DTXi8LI994O7bA\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1489,"size_decoded":1026,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3939b1820cdfef146b2ab3216ac01654","sha1":"1910b4632b702d5e11d434d78bc2c8f7de0eedb0","sha256":"3293ae2661caa2947b501dac16d58576d3914e95887333c63d10b18f7ad9a19e","sha512":"c3f241698957f9b343288a5fddc70b6b132cf64a4b31b5442ca8f9df4045dcad80ee5fc710e55953164dcf6e32ae6c524a353876428dee0c5776ab5edaedd507","ssdeep":"","tlshash":"f631896e895826ed0249c6d6c5047f036abedcb771003ebdea0d091d70db6e5223685b","first_seen":"2026-08-19T13:17:44.462439Z","last_seen":"2026-08-19T13:17:51.361126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":3,"connect":21,"send":0,"wait":24,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/animate.min.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.213Z","timestamp":1787145400213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/animate.min.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:53:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4121\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75598,"size_decoded":4430,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a164c015e33f5d6308015677b6131531","sha1":"def06e670befba8cb1dd09173ded4a7562f1e730","sha256":"5b5bae7db9034f5cf7c4f5ebf562e80860e7687b1240389ea97cda5c421ecb76","sha512":"29c8048acbf4a7ceca33893781478962eea8e7ab2b7af043ae921b6bae375dabb312823c863a69e9d029c7887fe30f9b1069e61dfccceeea773066101e291e05","ssdeep":"384:ux1E1FplY5Y31k1XYEYn2W2Pvlv8UXY+Y7VQV4YuYglLC37nqMOjTrm/Xi:01E1lY5Y31k1XYEYTUXY+Y7VQV4YuYE","tlshash":"61730b6e184111c447724f29d7de8e28eb3d91731c221dee73c2588b9fa6fa853c994b","first_seen":"2024-08-19T20:38:17.228578Z","last_seen":"2026-08-19T13:17:51.361677Z","times_seen":4,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/maxcdn.bootstrapcdn.com/bootstrap/3.3.1/js/bootstrap.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.235Z","timestamp":1787145400235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /maxcdn.bootstrapcdn.com/bootstrap/3.3.1/js/bootstrap.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Feb 2026 10:09:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9103\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35607,"size_decoded":9340,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32087), with CRLF line terminators","md5":"5dcb19dbdb18d04b1007be864a85cd13","sha1":"7509c1ded1d9562a4cf99dd63539a08d6a9a7c02","sha256":"6d0c489d9ab712d6670a54b4e665a39072926d309b001e179ccd721102b558df","sha512":"35c297a00d547111544d80f2eb3a0c43017075e42dea5e64cad56ce2ef910a96a0842631258de3931ef62256c978a617c6d6b60057baacbba77e860e9712ca44","ssdeep":"768:q1+7/uRE672wlNrDMlbGqXYu+jS1s8ep0s1QfrXf8X8GEpZOWQ:eFRx7zYyS1WOv8UpZDQ","tlshash":"d2f28546b230316107efb1e5515f020a72396a6ee90690bc78a5daf63db9c48317bf3d","first_seen":"2023-03-07T17:00:36Z","last_seen":"2026-08-19T13:17:51.375857Z","times_seen":507,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/cryptoexchange.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.528Z","timestamp":1787145400528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/cryptoexchange.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:33:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7154\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7154,"size_decoded":7420,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 445x278, components 3","md5":"2c49d605ec276cd3bf4a3391fecf414c","sha1":"4d543e6456640ee31fb6a4e45f0b67398fbd1f71","sha256":"ced5a3b3cbcc30760c9ff9b169379ccad136cee1a5356277eccf28f1e1d7a205","sha512":"9696dac01d960177747e564b846752b0752ea90f20509bfc1748838410363cae475e526c43ee13ebe375b1195e2294489042b9c8c7a1a31785e5a096b61a51b1","ssdeep":"192:L9TuGPpN9Bb9o5bwl+LEIKR3y0NTGhkzBOS:hKezV+LE/i0TDBOS","tlshash":"6ae15c13b295e30bf018673646a3570e59c9cfe07eb84693f4541fb9fca842246a1ba1","first_seen":"2023-04-15T23:15:16Z","last_seen":"2026-08-19T13:17:51.34292Z","times_seen":157,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.973Z","timestamp":1787145400973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free.min.css?token=fe05167a24","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.251Z","timestamp":1787145401251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/css/free.min.css?token=fe05167a24 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ultrexcapitalfx.com/\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"14f5eecc946f901d192b02550e4dad67\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: dFprO2Xa5ixxqB0_F4CzwseNTqnVXfhF4ViRgxExeZfJJK0sCU9B0Q==\r\nage: 5376477\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHJ3b6jMgMUteVBTOMDbshKBXmZyg7UUU3i35lMoacVi%2F9r3rpgpX27mU1FmbZUaNVMmeeu6dP0sEvKzf6HFmCg1Lxc%2FHaOrZVsO5%2FpKxrBf2lfPQQWc%2FbOXIoOaBTeQ9lRUWIakpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d96f25fd6e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73986,"size_decoded":22467,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"14f5eecc946f901d192b02550e4dad67","sha1":"45d6a10e09484d078cad37282708d611e19a06e6","sha256":"8f13446769cd1916cbbbdc2be7eb5be4b331bc7ef9ed8b799ecb4674e48095bf","sha512":"82e20fec5704c5784624775facba87c0c85893707e6905e44390ca6671b3a3e212a0bbf7161bf5c779aaefc22a71be24c38043d3077aedfd2e53483cde032072","ssdeep":"1536:/rM1MvMaMfMRQdm0grfT/QypZhzZHpSjA691Q:ilgrLXzZJg191Q","tlshash":"3f731f16ad84019bb4568d7f3885bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-18T04:50:29.606533Z","last_seen":"2026-08-19T15:18:44.496402Z","times_seen":7395,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":14,"connect":10,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/video-img1.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.516Z","timestamp":1787145400516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/video-img1.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:27:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 327729\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":327729,"size_decoded":327997,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1279, components 3","md5":"7cf4af0335eb77da5d614c3f5f505dec","sha1":"14e9223d93e5a915641ed89ea660c9246c80f7f5","sha256":"ccd4dacd6169f63002a523ae5534f5588d67ce358b9e89f33c5571fadd7403d2","sha512":"2da8b6d7e453c0326da83d8d4c8948dfbb7e98fa2ce5620946b15272acfa83f179d163361d7708ec274ab0d0670e5bd28ebb4383095cbb4cf6229b863558f74f","ssdeep":"6144:erUidGazET4ooMPfc/nTm9cuyl8GCireP/HJjDI/hpjKh:GU8GnroL/TMul1rePvJjDIrWh","tlshash":"51642364373eb241c6016e359a8ceee9d8605f576c6985c30c390f2c9bc4ae45de9bec","first_seen":"2025-11-12T04:02:28.239499Z","last_seen":"2026-08-19T13:17:51.358813Z","times_seen":6,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T13:16:39.801Z","timestamp":1787145399801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 19 Aug 2026 13:16:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"BootstrapCDN:3.3.1","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Bootstrap:3.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":61360,"size_decoded":12607,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3093)","md5":"27f603bd9429551f9fcd3a03b601ae7d","sha1":"3fb55c476e5ed8b21172efd2d46f62da44253f10","sha256":"ebe3cbc7a431f5bca27312e70c586477520e82bd581b9feda845c27a7fed404d","sha512":"13112e8413ae48fcd8227298158466782f8ed6be0e07abb9c10c585d7c611982831541bf40648100a9f517da154a87ad6d6d66cfb48751aa6989f30147af84e4","ssdeep":"1536:cPm+6vHDJH9CWBgSAT0+keLfEReAxff8PSsmQqGzi2aNBrg:O6vHDx91gx0+kCfERtxff8PSsmQqGetg","tlshash":"4353d6227889563701c744e5a2726f2971f8831ed7139644f3fc87eb8fdadeaa427604","first_seen":"2026-08-19T13:17:44.468507Z","last_seen":"2026-08-19T13:17:51.35937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":85,"connect":29,"send":0,"wait":57,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/font-awesome.min.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.210Z","timestamp":1787145400210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/font-awesome.min.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:52:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5860\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27429,"size_decoded":6169,"mime_type":"text/css","magic":"ASCII text, with very long lines (27264), with CRLF line terminators","md5":"8595c741b8a46c30316a8e9df6a8e8e5","sha1":"f749133b46a939b1827739f4bf1621497e01fe8f","sha256":"70c5f5d8def32de6fd085607da055f11a3796aaa892025fe7816e99e4bc207ef","sha512":"96f6db2a731f796666cecf317338b5690bc2ab7a0060f03a162ae1f2a3679eba3d319ff60b7f94c7a8b8fb693f4ce577aa5e06785fe16b853eac0e0ce34e8b32","ssdeep":"384:Yi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8S:7lr+Klk3YlKfwYUf8l8yQ/j","tlshash":"52c230f8e54c01d6a731c48bff81b36862b6f73dd5814d99f01f690c29d22a522c5bba","first_seen":"2026-08-19T13:17:44.469647Z","last_seen":"2026-08-19T13:17:51.328597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/style52e5.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.228Z","timestamp":1787145400228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/style52e5.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 10:01:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10052\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52922,"size_decoded":10362,"mime_type":"text/css","magic":"ASCII text, with very long lines (52922), with no line terminators","md5":"5cc66224e479a526199cb50a86781f27","sha1":"85dcdef2a3c2c728f0c078565fd835e303ff32b1","sha256":"63bec789371d5e7954030724ebdb099768f02ce1d59e71938e4d163bef542c17","sha512":"af19ebee53d285cf98d241c86d36a4fb09ccff870ef6b919a7fd60db233cba871480e7456f18ffb95b2035486561508b3370f02ab1b447eb9d7647cc545ac2aa","ssdeep":"384:dyu+14d9nra97mngidbGvQoZ7++ocQoFS1DbHa97nnCdYvBGo68Sg96qbLF2CWdo:XKZ7+GePRdl8Hbo2yLWYEBB","tlshash":"fd33ba32a2962058b137d656f6c1bfa8755cc112e0070fbefa2f766bc6c21d92563f06","first_seen":"2025-11-12T04:02:28.26451Z","last_seen":"2026-08-19T13:17:51.336381Z","times_seen":4,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/static/widget/coinPriceBlock.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.241Z","timestamp":1787145400241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /static/widget/coinPriceBlock.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Feb 2026 10:21:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16709\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57894,"size_decoded":16947,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57709), with no line terminators","md5":"a67a75e847c10f426a7f44d421dead5e","sha1":"dc93060eed4010b107fa9b036e54fa1c80d9019a","sha256":"fed563a5fe3b581e5459272cd2133581774a8edc76a4fc28ba69222ea5282a27","sha512":"8458f5a4d9b5581a0e53faf9fb61cc8071a8ada62d7d4c6bea50b4cce2a2510a3416b99cf67a64812805fcfea33bb182909b896b76abf9785f71ff0ab4c88f70","ssdeep":"768:6Y4hlf3gv7EmCb1yDHCjP9ey4i+qNBc+fXgfYcs1K3nf4sZELk+CuIZELk+Cu6yc:6ZJQv7EmCb1yTuXArPH+CJ+Cyc","tlshash":"17432adab2d1b1ae4263f3b4583b0205a37f6d3e748ac650f514ddc16e7a89c8613f68","first_seen":"2026-08-19T13:17:44.471677Z","last_seen":"2026-08-19T13:17:51.351744Z","times_seen":2,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/external.php?link=https://cmcoptions.com/uss.png","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.519Z","timestamp":1787145400519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /external.php?link=https://cmcoptions.com/uss.png HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapital.live/en/ui/js/viedobox_video.js","fqdn":"ultrexcapital.live","domain":"ultrexcapital.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.090Z","timestamp":1787145401090,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /en/ui/js/viedobox_video.js HTTP/1.1\r\nHost: ultrexcapital.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T15:44:52.76299Z","times_seen":17975690,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v4-shims.min.css?token=fe05167a24","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.252Z","timestamp":1787145401252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v4-shims.min.css?token=fe05167a24 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ultrexcapitalfx.com/\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"43c494a755b81101cd0097c73bf4bd42\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bf9e29084831d9a2b72227f617c2b80c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: KtQ0MFpF83764nl7N0snEq9ZihqFv9jxi6vnUgQSy4U13fWsU5_P_w==\r\nage: 8400772\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvNmPI6HBMAOPjTgoKliN6nyzbLPosDJ7cIiizL8mDgBG18axtbFkp8wpnjk3SE9HdJ%2BfSpUvoA9aQKmADZn1MtjET%2FPdjtamtCx7pJPkmU1KPDzeNExsCYL4qAWb4L%2Fj37sX0bsgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d96f25fd6d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21210,"size_decoded":5244,"mime_type":"text/css","magic":"ASCII text, with very long lines (20995)","md5":"43c494a755b81101cd0097c73bf4bd42","sha1":"f4102ef32474a0629d2989a777ee5e738af6a6ec","sha256":"c723bc4b9c56380b5ccc209f6c288c26028e2ecad0d27795f665fb01a9f4e9ac","sha512":"7839dd420acce148a9ca85b74bdf7995ce7640eeb0cfacc26eb83e78154b0a59e7ea0ddfe63ebb6becec3b2821b53696a1120c3edcf720d2fe870697bd61418a","ssdeep":"384:/Wl6sTnnbF+PJeQlGngUHPAHyw5+E9mu1t:/O60OJigUHPAHyCtb","tlshash":"199258051b2d90a3b2dc3c6bb4417ee42776278919d64c51e3273c84bee789b31eeb61","first_seen":"2024-12-18T04:50:29.505919Z","last_seen":"2026-08-19T15:18:44.492801Z","times_seen":7350,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.269Z","timestamp":1787145401269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 13:16:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k3lTUe59pERzyNN9dpHy4EzdAYAfqpIY/bnaGWSf2bQldYisNCyc1sEzCJViJel+k/Pe/40\r\nx-77-nzt-ray: fdb54123e965b561e4ac856aea234c38\r\nx-77-cache: HIT\r\nx-77-age: 18\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-19T15:48:16.917402Z","times_seen":8578,"resource_available":true,"data":null}},"time_used":6683,"timings":{"blocked":3,"dns":30,"connect":9,"send":0,"wait":8,"receive":0,"ssl":6633},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/font-awesome/4.5.0/fonts/fontawesome-webfont.ttf","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.588Z","timestamp":1787145401588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /font-awesome/4.5.0/fonts/fontawesome-webfont.ttf HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/font-awesome/4.5.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-solid-900.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.655Z","timestamp":1787145401655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-solid-900.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\netag: \"0931d657c03a7e21f461178758aa2e19\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: i3e_ZYoxOo7kZYpMYggOcS9-tx5zb_E2fG0MbC5X8HJZfqoMd_Wljg==\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GNXe21Tf8wQNzJxM0Of1L07MLmDiV9yDZLLNTlDZpDAzb8MdJJp7U7oJbzdU9I2HmGYMXrm4XIz2PiYdyE1qTdCKBE3TmA%2F%2BqMCcQM81Kw%2BBaUvQqJmhoSJkw0LSBf5vmynrP%2BoIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2d96f285da756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":158212,"size_decoded":159322,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158212, version 775.1280","md5":"0931d657c03a7e21f461178758aa2e19","sha1":"0dc7d1527ac7015ec4db478ed1bde56b64fdcde0","sha256":"95e971e60878307902a92bc76c5d5e54bdd040e68834ac0b332f59526c68b1b3","sha512":"736674c3ec882e86ab16f6618a5b219cc34840a20e0e49e580b043863241a2fab4fc3197b7ea9cae40d09c5552fbf6c5b3a2d77b4e9d2a85741195f4e95ffdd3","ssdeep":"3072:yPQ3j6tlNJu8BwPA9UShIYNkCcpDhk6DJMj1Bce7XfRPnnW8tjet:R6tlK8BwcUKJcpDhk6DJMjrLRPnW8Fa","tlshash":"37f312cf72c1cfb70ca51aeba55879b76b382f8352816b8a501e3d649910d17268f3f1","first_seen":"2024-12-18T12:55:36.287523Z","last_seen":"2026-08-19T13:17:51.335855Z","times_seen":4539,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/translate.google.com/translate_a/elementa0d8.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.239Z","timestamp":1787145400239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/fonts/fontawesome-webfont3295-2.html","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.147Z","timestamp":1787145401147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/fonts/fontawesome-webfont3295-2.html HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ui/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.676Z","timestamp":1787145401676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1759\r\nage: 33685\r\nlast-modified: Mon, 07 Dec 2020 19:06:44 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 19 Aug 2026 03:55:18 GMT\r\netag: \"260aeac4b1626aecd0e88471a14ad8d9\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: rhkaNF5cMDhxdhzDzUogOm_wjh50kLSbWOP2LB7tczRpAFnwxeHkUg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1759,"size_decoded":2255,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"260aeac4b1626aecd0e88471a14ad8d9","sha1":"c575ce19a2a34cfacf9c84c04ff896827c65d933","sha256":"51a9972c6f13b5510730dff6c349f812510c778b2f7722f00426c287246c50cf","sha512":"bf1e327dd18483249a0a2bc6fc18e04934f99af93639e74c70f2b2357f1e9e1df4a9432e73835225183021ba50474d2423e806c0d2c82040bbeeefa1212cbc69","ssdeep":"","tlshash":"bd3108965f8423c76f2c056136bfe203db5c18207e7062deed5b7a157a213056d4b36a","first_seen":"2023-04-19T16:22:05Z","last_seen":"2026-08-19T13:17:51.338904Z","times_seen":944,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:48.349Z","timestamp":1787145408349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ultrexcapitalfx.com/\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 13:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 143765d349003193ebd3783518e376c4c54f428f\r\nx-77-nzt: k77yROPMfsc1GBC5W2zWj+saKVhvM2GYML+yHJ1uE+nNrIe07IF+/lc4lG/R+88Lp1rsR3M\r\nx-77-nzt-ray: e2f75420ca06211ce8ac856ae9cf5827\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 524\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3357,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-08-19T14:25:03.125613Z","times_seen":931,"resource_available":false,"data":null}},"time_used":3319,"timings":{"blocked":0,"dns":32,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/translate_a/element.js?cb=googleTranslateElementInit2","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.485Z","timestamp":1787145400485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/alert/css/animate.min.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.231Z","timestamp":1787145400231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /alert/css/animate.min.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 10:04:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2502\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16962,"size_decoded":2811,"mime_type":"text/css","magic":"ASCII text, with very long lines (16755), with CRLF line terminators","md5":"eab7261f4b1791d54131f5bb80d243e5","sha1":"1e6d01f7ab2987cb29f8e11f2fbae31f2e4ad8c8","sha256":"eaf5aea140f3e48516c27cd9c4a1b49b1cac780055ca2eaed084fcd75eb07e58","sha512":"f3b623f075b2d0586e7b53afb18f4e72a1a15c7a62bd06e6d801294ae4d23f874cd0aad077fe5c6e573eca57d1a7a34570f8214eab6744c0af8fc071842049ce","ssdeep":"192:uRq6Vn0u6SBWTRNS3DW5WfW4vLYz3i6PSz/hQQHL:uE6VHTgH4vLYz3i6PSbhTr","tlshash":"45725d4c4e50105941a60773dac89fac863dcbdb68722cef3396588f4b457ee23ea617","first_seen":"2023-04-07T08:25:33Z","last_seen":"2026-08-19T13:17:51.359971Z","times_seen":3012,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v4-font-face.min.css?token=fe05167a24","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.254Z","timestamp":1787145401254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v4-font-face.min.css?token=fe05167a24 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ultrexcapitalfx.com/\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"3e20aa01a74cb21290faa04e29684ce4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bf9e29084831d9a2b72227f617c2b80c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 2DVICfEMysvaqTNfeXwzaWHgzdmMhXsXjBrYTEQo32NMaBOjh6Rn5w==\r\nage: 4554839\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1P7OLRDolSl6QuMDO4QWR4yUzLta6Np0a9ZbYkJ%2F2gHC%2F4ZNt6w3q6BnHN6vlnMr%2FSzDqGXHz6D5wgc%2FYy6WGsaJ6tTPVNHM5r7nCdUPg9SCh%2FG%2BQvrNogfx3jNWYnFg2QWTIIP%2FoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d96f25fd6f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1775,"size_decoded":1765,"mime_type":"text/css","magic":"ASCII text, with very long lines (1560)","md5":"3e20aa01a74cb21290faa04e29684ce4","sha1":"9279c7200c52d95369427e5a9dd013a327e4c8b3","sha256":"e855bc2e1c23e76ebb884cb182a037c64af2cacc49eac782dd43fa0454ee1f27","sha512":"22dbdda00c128ae18ee4f2c09d6d2316bfacc58fea0749207905cdcad0fe1c3725754200d9182916d3e08e2a333c15de9d8f143fcdc482ead539fef21ccbb147","ssdeep":"","tlshash":"2231f02846d401b0b0313f193ac77125eeae74669bb95e63d62b88140dfec55f3d5f48","first_seen":"2025-04-07T02:17:37.738288Z","last_seen":"2026-08-19T15:18:44.451008Z","times_seen":6911,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/bitcoin.mp4","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.363Z","timestamp":1787145401363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/bitcoin.mp4 HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/mp4\r\nlast-modified: Mon, 23 Feb 2026 10:27:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3981235\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3981235,"size_decoded":3981424,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"aa48d2ef029168ce254a9c86ddb46741","sha1":"ca064e0ce45587aaffc2629bf600a461ce4a3ebf","sha256":"2db36aad703dfd1ac8b23200a51501db5b827788517b76665464b1c4ff21d3de","sha512":"8f73803333db80a1cd646ef88d6afd11948388205bd53510e71f8143e0779ef578ae8897354a2ffe611a2815131047652be0db5723234fffec888da3338a4a7e","ssdeep":"24576:mQGPLT4akqI903oMv7ikAyyrj1Up6oOm3JJU0raCe5ZxK9a:TGDT4akqiGekAyExOTz3JJRmC0ZxIa","tlshash":"3425129493f8150bec3347bc64c36308b331e6a1a25767d35379f635b4612ea9e4a8f8","first_seen":"2025-10-27T04:07:27.329697Z","last_seen":"2026-08-19T13:17:51.349135Z","times_seen":12,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/fonts/fontawesome-webfont3295-4.html","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.511Z","timestamp":1787145401511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/fonts/fontawesome-webfont3295-4.html HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ui/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.themepunch.revolution.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.472Z","timestamp":1787145400472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:36:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14517\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54824,"size_decoded":14755,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32004), with CRLF line terminators","md5":"515ff748d023fd6f99bbbce59db6c1fc","sha1":"511d0b9f4bef8eda2d426b8ea2a4790069d1fc96","sha256":"19b440db8d0bdf4df7c7c683674b7fd005a78ecd973b509ed625a82672b3e1a7","sha512":"3a84858c42b5e6cca5151b9fc6974bc17e42f29385743aeb74eaceceb94151ff3f3e626ad87898dbc32dfd53a50f36c3f85194d9ed20c9d2a2c73d5bc11ea84b","ssdeep":"1536:mCnzw4tAzmyit9gJLySYeDw5XsmBeDE+RxoqRw1SD8ZRvXvV:mCnzXQZit9gQ+FRw3vV","tlshash":"ad33f854790074b655fb3166e43e411572b27c3b9b078090e2aba87cabfcd89235afdc","first_seen":"2023-03-07T12:41:31Z","last_seen":"2026-08-19T13:17:51.346582Z","times_seen":138,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.video.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.478Z","timestamp":1787145400478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/revolution.extension.video.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:41:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5511\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":23249,"size_decoded":5748,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23007), with CRLF line terminators","md5":"190469b1b1eabceee324cecf5eaab44d","sha1":"864882d5a16d3ab89f0904b7514b6ce339832664","sha256":"76484dd1a96d73fe092f713341713a5c9518639f85b01ad6e80fe6f519b81da5","sha512":"4e37a20c596b6917cd747f538f9ee5d3f4909a391f902e70017d343ad89cfeef0d9f192395b2b9394ac7039a310f0ebe53730c076a517f7415686561fd8149ac","ssdeep":"384:vdzW20i93Qxima/kkWk9RvwjiuoS45Uw/y1YMcdBU16yyygLEp4BDgKfGsZifSRI:Y/aZfC4RVdBw42wkSR2pB","tlshash":"5ca2b7a7f10428a9651df995a82f13617271be7d9009ca9438b3f1b80f7ce43354aafd","first_seen":"2023-03-07T12:41:31Z","last_seen":"2026-08-19T13:17:51.333655Z","times_seen":74,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/security11.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.514Z","timestamp":1787145400514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/security11.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:26:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49972\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49972,"size_decoded":50239,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Macintosh), datetime=2020:02:05 22:23:47], progressive, precision 8, 517x368, components 3","md5":"2df62484866bfd9a666e48cc1b014330","sha1":"b92c7ec83d7bd61fd90ffd6d6fb4991060057702","sha256":"30088b44b35170792c9a26edacc3ae6d217e841b441a508e5db149a654858de9","sha512":"94aaff5fcf1b30c2768af5845ecd1279fd77c61dbf9c1cfbc3b3313945712eeb90d7d606bb37323ff1d6b480942a82ec876eca9e01779053da15f899b0658ede","ssdeep":"768:JNGq7mNG2JCtJ/8z7uJQGHw1RfjNeXcLgvFvSHxTE2I1+rF:JC5Ct98zxN1xh4c0tvSVFPF","tlshash":"70239d017d51dd52e48c757896ecd94593e38fd86e22120e7faed90a3f61ac8ccc828b","first_seen":"2025-11-12T04:02:28.289173Z","last_seen":"2026-08-19T13:17:51.365341Z","times_seen":4,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/0001.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.504Z","timestamp":1787145400504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /0001.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:22:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 246363\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":246363,"size_decoded":246631,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1920, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1440], baseline, precision 8, 1440x1920, components 3","md5":"66f2f9613a29655db9fccf82d18f6567","sha1":"b5eff362cf0d84cff61bc1a835545a62fef69150","sha256":"e759f81ed91d0bdc62c2add574f7b6ebb0d0ff01ce632cf36622d7e668b6f69b","sha512":"02bb46edd740c0e8e11caa1ca4fc78d3f401822cc4d753f6be40f03693f2c1324dfdbe21646f92b4b1873de5ccf455d255b8533c029dd54145b732e1501ad15c","ssdeep":"6144:c0P+wKHtW03ls3wjSeO0MZUpmwaGhZcAu7:12wMWDgjSB0Mumua7","tlshash":"373435205e3c9be09dca39274761ec31d3304f9447572bf3af386b186aa9d42583666f","first_seen":"2026-08-19T13:17:44.480471Z","last_seen":"2026-08-19T13:17:51.368631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/bg-contact2.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.001Z","timestamp":1787145401001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/bg-contact2.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ui/css/style52e5.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v5-font-face.min.css?token=fe05167a24","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.253Z","timestamp":1787145401253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v5-font-face.min.css?token=fe05167a24 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ultrexcapitalfx.com/\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJHisqUfJVtMYlyJCL6GEgMJ8ERNaLA78NHWv7M1686vDSrrOZE%2FAy8%2FcC%2F8UINyBDUDs6sonlcyh5MVkrmLapLpjAUL%2FKPZlZvnXj7Xp5g2Q8Lg%2Boxk%2FJF%2BMBQQTtESI1BpnaOApg%3D%3D\"}]}\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 29094763caaadfcf0f94a0905a4ca74c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: so3wFfRoXNcy2y9MciqqYTqt3v1xc3VWp9LO7hjgQO2lipiOjJDDSQ==\r\nage: 4554839\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"ce9c230eaa656cebb4bcb218cc034374\"\r\ncf-ray: a2d96f25fd7056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":823,"size_decoded":1417,"mime_type":"text/css","magic":"ASCII text, with very long lines (608)","md5":"ce9c230eaa656cebb4bcb218cc034374","sha1":"e7c962a7b5113bd9273f8eb56b1fd75d9a152d2d","sha256":"da44f714aafade532fab93527bdcec46596d87cfef74a613d529e34686b6a064","sha512":"38a99c70f756999b2a49b4d2f27aa2de516bcbf19596d63db88cabfa6251b3bb7f75621d4829ee18098ca63f9fc03a5bd1ab3ed757f0a30e011e841aac1ace6d","ssdeep":"","tlshash":"14012b5d4569006141510f1138dbbb0abd0ab16778a95ea3911b8d2c4cfa90773f5f09","first_seen":"2024-12-18T12:55:36.292311Z","last_seen":"2026-08-19T15:18:44.432374Z","times_seen":7098,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-brands-400.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.576Z","timestamp":1787145401576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-brands-400.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\netag: \"e45da7adeca3d43feb19fa7736201689\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5ef788d0f05b31973ca8ae989fe9748.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 8p45-SOJYxjsj_dyhMdI0UnRWPBUSskuZWV7OUzBmfKeR5Ef3EKRzQ==\r\nage: 5890389\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9KbuE%2BUOJ5bngVI4Aov5SAL5ZSa0tT7OGXYueoI1Hn2q4acpZKqOUsYI7g29QUo7ZTFK2acB8c86QFzhCnajrxnDlpwORmzcJ9JKz%2FNq6bynoPL71LO8dDBd71aXXNnCZS3y7Gm2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2d96f27dd9f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 118696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118696,"size_decoded":119809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118696, version 775.1280","md5":"e45da7adeca3d43feb19fa7736201689","sha1":"7e10560e5ba072b6744cb06066cec4d37c631f16","sha256":"cc90a2b68dabba4496647c4e8644ad0ca0444c3fffa5355100482731b2959618","sha512":"f841c42a049680cd0ed489c670f66703dbfb3a6cfed258fec5768cddf35c70b2c1099151d2bde5b57219acc7c40e0dedd313590c360f9e458223f3d102bd788d","ssdeep":"3072:/s0sEGeI2tuiZwN9hCj/54V0qFWugENotGeUv+l/hG:5sehz54RFz1Noge/l5G","tlshash":"e5c3128ae8ccdb19b026463bf18d92854f2751e9744106b4a353fd221dbba43c2e7eb5","first_seen":"2024-12-19T14:38:39.090068Z","last_seen":"2026-08-19T15:18:44.447612Z","times_seen":2977,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1839.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.679Z","timestamp":1787145401679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1839.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 619\r\nage: 42161\r\nlast-modified: Thu, 17 Feb 2022 08:19:34 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 19 Aug 2026 01:35:01 GMT\r\netag: \"b0abdaee81de6fc0c1fb3bbb150d752f\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Wkwqx4aLKaXZ0XhOwGQZaSTt5cTR8qXu-IQUWmABwywR6ZX4LHA4EA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":619,"size_decoded":1114,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b0abdaee81de6fc0c1fb3bbb150d752f","sha1":"e090189b43a9be7cacc2873045e0ab41dfcc5bc7","sha256":"1cddd83c4a977e459b4294d3fc77c28f77e51bfdfb6f468528d56f487a26e6a8","sha512":"dd3927e7750b3f66a0b23a626505d013048bccdbb0f535f4be7e251fade10dce0f3ac987c429b6c8179a6a1d7f72efebd48b9081417327d0c1a27a5e02763d30","ssdeep":"","tlshash":"4df0629bc6d00d88ea734a3e31d7a869fce10724c2761004ba1b88ff180a20c256934b","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-08-19T13:17:51.372401Z","times_seen":514,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/unpkg.com/sweetalert%402.1.2/dist/sweetalert.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.236Z","timestamp":1787145400236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /unpkg.com/sweetalert%402.1.2/dist/sweetalert.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.appear.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.251Z","timestamp":1787145400251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/jquery.appear.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:21:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 615\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1542,"size_decoded":851,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (744), with CRLF line terminators","md5":"a13255532aabf4becfcfb4ea389e9246","sha1":"1c37162e40776ba4c6e45f5a47aba8ebc0c14e94","sha256":"e967b1abaf71f368fba75f75f75d84b9b15f69fa888214f9dce7effd0a0ae848","sha512":"4368fb3fbe064bbea47571bb45242d82f1e1e748f88050b861742c53d7bb2632b06b4c88f1e91cb0a72a8954883b9bde428bb9df0afb500e84de0c51c94bfad0","ssdeep":"","tlshash":"4b311faa31da3e9447fb313f662f73129222c53b4251e46299fadd7c38b2d857803a44","first_seen":"2024-08-19T20:38:17.258841Z","last_seen":"2026-08-19T13:17:51.381583Z","times_seen":5,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/jquery.cubeportfolio.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.467Z","timestamp":1787145400467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/jquery.cubeportfolio.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:27:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23409\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98351,"size_decoded":23647,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2713), with CRLF line terminators","md5":"fa9faf5df6e0fbbdff9f6df27b804fd7","sha1":"aeeeaebdc6e860f660ab32dac80c9e3c3e37ea9b","sha256":"f0a103337ea801ef124ae93d8ceacf7cc0b83ba7d6fd69e341a3a7926df0f2d2","sha512":"c33acb82535d96a0de080b208f9aab368c1a3f3721fbb09120ce25a6f6bab63d8b04649c215e1fe3c9219e923645d7ee2299aa6a6a0ffee780a2e98b7e38d2d0","ssdeep":"1536:SrAn2uNt7Hvn0lhm6Th4cTo8PNXPqWQknr8fH1rlm8H4yy71+P1e+ihx+mux:SUn2ur2hRFr8/rm8HJyQde9M","tlshash":"dea3074471e13ab6c4b33971a20f6407f3b2917ee406a869b1adc1a41b3dd8c5337b6e","first_seen":"2024-08-19T20:38:17.265196Z","last_seen":"2026-08-19T13:17:51.327286Z","times_seen":5,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.navigation.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.474Z","timestamp":1787145400474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/revolution.extension.navigation.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:39:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6563\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25833,"size_decoded":6800,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25594), with CRLF line terminators","md5":"ef33f8ed48b7c54233783e793cad6d69","sha1":"d4fd35bbeca4d01d65d744d84b4b14aa14a7f30c","sha256":"89f584f82065d3f4b89698ad748bd4767ca3e162c71cc95a970bf8709caa18db","sha512":"34987962fa082ffa73c1ecff9ff4d46f3b66e2fcafee509a386ca24c15fafe02f069bcf900d99973873bae29f54a26ae40c27db4db9c1cdce3925ff301b8942c","ssdeep":"384:ecWILzzHepNo2jJivwBoOevB+i0NwkLFVj7w4EY2:cgzzHepNo2jJimoY2","tlshash":"58c29594769038ab547372bbc16a40b47272ca34730bea5075efe1f184b8cd523a7e9d","first_seen":"2023-03-09T10:17:27Z","last_seen":"2026-08-19T13:17:51.344711Z","times_seen":78,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.parallax.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.475Z","timestamp":1787145400475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/revolution.extension.parallax.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:40:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2325\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8580,"size_decoded":2562,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8343), with CRLF line terminators","md5":"72a538f2c14775fec8cd74a8245af472","sha1":"912c173386966f62d1826e8162ea297eed4d1cc3","sha256":"3626ea991478ddb13369da7d10a61b01f39224f9b5137402efae175eeb6c63c0","sha512":"71d6db87ab513a5e4d6ce29e5173e69b2443884e077e6f24409c57e82755940efe7357c1ee4026d6d917dab054cb3b697340711e9c81c7ad7db6116e0cf70ada","ssdeep":"192:n1459q1+1t1XgVFO0v4ppsZ244pc0sZYynlIip5ApQWb:h1+1t1XuApC2TpsYynl3p2pQA","tlshash":"0a02c862ae142cb604b723adf56c4bd231224431e909894175fa78b82b6ce5a077efcc","first_seen":"2023-03-09T10:17:27Z","last_seen":"2026-08-19T13:17:51.367509Z","times_seen":75,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rdparty-apis.coinmarketcap.com/v1/cryptocurrency/widget?id=1,1027,825,2010,1839,52,6636\u0026convert_id=2781","fqdn":"3rdparty-apis.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.115","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.457Z","timestamp":1787145401457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Thu, 05 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E7:C3:E1:82:1C:B9:33:41:49:DA:99:D4:24:C5:BF:FA:51:0A:E1:DD","sha256":"AA:B1:23:FF:FD:AA:09:B6:24:65:4B:3D:C0:77:15:44:6B:48:EB:C7:BA:52:DE:64:54:F6:8C:1D:44:F3:EE:16"}}},"request":{"raw":"GET /v1/cryptocurrency/widget?id=1,1027,825,2010,1839,52,6636\u0026convert_id=2781 HTTP/1.1\r\nHost: 3rdparty-apis.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 19 Aug 2026 13:16:03 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nserver: Tengine\r\naccess-control-allow-credentials: false\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: WWW-Authenticate,Server-Authorization\r\ncache-control: max-age=30, must-revalidate\r\ncontent-encoding: gzip\r\nx-traefik-route: coinmarketcap-thirdparty-apis\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding,accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1abd987c61e5ddaeca88770eced438a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: HcL59WpLA0Bbd42K-rFitf4uA9UcCsQe5U3mBWhkYSnSQQnv_PeO0A==\r\nage: 38\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":8153,"size_decoded":2960,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"55cbbcef8386b8bec990cef1f9259cae","sha1":"37130ba02c04d0ae8762676f5e840cc06a0f64dd","sha256":"98e5018024576ac4b6bc1fa6a7b4c0f3298d64c2cbe2bf50aa0e42534a0f0b2b","sha512":"4e15298957e47154d2ad9c7759b8ff199ada4dc0f6a3a5bea48a00cf4a29fa6bd94815e593564ebc272f7ba7d014a53a5f2a7b677dc9eead9d019bdf57a7b4f6","ssdeep":"96:IMhIJKY2dBkIkgzLUtQdBK7wJKY2d0xPWrOqxHKofY2vG:IMO0/xXMUjuSqxqOG","tlshash":"a5f1216746b41c7ac57f5c60081b37880d2c74e5c88c69af2add0fa8c1d5fd76286bae","first_seen":"2026-08-19T13:17:44.487055Z","last_seen":"2026-08-19T13:17:51.353218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":30,"connect":25,"send":0,"wait":137,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/loader.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.226Z","timestamp":1787145400226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/loader.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 10:00:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 625\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4301,"size_decoded":933,"mime_type":"text/css","magic":"ASCII text, with very long lines (4301), with no line terminators","md5":"7328920ceb5f4aaa0ea51aba55309adf","sha1":"fce7a06fdf928999133c7dd9d3c323c5691a80e8","sha256":"d45640d0a4717ac07b3367da3a07bbc99bba72c2450b9eb7e9e30f5b24f10fbd","sha512":"69a7854b21c5fa41ae763a34366320ab94c4c2adc37a46ce186853cf3c3717c83e679b5d2078a2fa7d11b828ed618445ec1f01a3c438d4ab3303ae789e2fc660","ssdeep":"96:1CWt+oUkapYnR7pCMuEJ7qXRzNeN5TQ9nuziS:GeJEq","tlshash":"7f91fd669cd9c812c82fcf2a63ed4a980a558f67bc13005e734334c6a2e5bbd564c7b7","first_seen":"2025-11-12T04:02:28.249561Z","last_seen":"2026-08-19T13:17:51.373521Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/home1-banner2.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.500Z","timestamp":1787145400500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/home1-banner2.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:19:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168300\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":168300,"size_decoded":168568,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2221x1666, components 3","md5":"73afb15b42cd02f10bab2c7e3a01d1c4","sha1":"441f7b9c7b39e9bf7eb9244e3682bf48c56bdf87","sha256":"33555c0ce8ed718b0cf700701902925d6fd47cfe0fc49c3302894b545cb5c2ec","sha512":"e7674ff01a32e3887771c07e460572d45169b852d42b5034dbd73e324d69d5ba9ee791300aada100ab75b6282e19cf782e7448917d5a518a0aa5deb8c2acd2f2","ssdeep":"3072:aVe8ropVy/4czzPHUeeNHzMV7a5hhzlCZEkpGYg0fVm49y32a:aVq8AcnHUeeNHzyaJoiUfjmR","tlshash":"42f312710fa31b8afd032d7b6163cd636d673a4cacc679c1099583229379752db24b8c","first_seen":"2025-11-12T04:02:28.280881Z","last_seen":"2026-08-19T13:17:51.368067Z","times_seen":4,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/external.html?link=https://fonts.googleapis.com/css?family=Open+Sans:400,300italic,300,400italic,600,600italic,700,700italic,800,800italic","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.675Z","timestamp":1787145400675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /external.html?link=https://fonts.googleapis.com/css?family=Open+Sans:400,300italic,300,400italic,600,600italic,700,700italic,800,800italic HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ui/css/style52e5.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/825.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.675Z","timestamp":1787145401675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/825.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 314\r\nage: 27264\r\nlast-modified: Fri, 28 Jul 2023 07:44:51 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 19 Aug 2026 05:42:18 GMT\r\netag: \"da33d4dc1767175abecee422b56d7678\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: j_22tTL6zeTxLubZLu694Z-Q4GM_ocf9SxrLBF3M9BzI42MG_jSzcg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":314,"size_decoded":847,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"da33d4dc1767175abecee422b56d7678","sha1":"0e525d1e7616980449f0f2617ddb65bc77e3f064","sha256":"357122652b497822a01833fc055edad08ac0c7db2f1069e4e3efb9cd9fbe0beb","sha512":"3cdd0ac2f64ecbd5c2051181fbb4fa3506566bdb822edd7c6eb4bfcbb843e2997fe211405777be8038e6ebd50878e38a8ac1961defc5876f159f04c9bd22f849","ssdeep":"","tlshash":"02e07d507a4052fec9327b76dc22032b745b1cc399b0502f19a09466eb624e193c6955","first_seen":"2023-07-28T23:49:01Z","last_seen":"2026-08-19T13:17:51.33103Z","times_seen":907,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:48.146Z","timestamp":1787145408146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 13:16:48 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a7093a4-891\"\r\nexpires: Mon, 03 Aug 2026 13:20:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k5ulMG3pOX4C/B80jKfbpl+NBn9wSDtNFkNdceRxym7QZQ9zs3jjyEZjnAHqfLGt0OupPX4\r\nx-77-nzt-ray: fdb54123be597b2be5ac856a42acd60b\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1043,"mime_type":"application/json","magic":"JSON text data","md5":"9f40d3a11c02b8dc0a1627186b6f2cd4","sha1":"705146cfc3126ce2d8ec54d6a5743c79aa0a91e4","sha256":"9f5c54c74d4c6345396c9b2e3a04393f90570c1eb949b2c9bf09a251e65487f1","sha512":"a2a090de8960f7292b52268ef5e5212d6a74b19840794d91c6e222f17e7f0a6b125d577fda4d95701f350b0c8d5c49025f0bf220c8f349ef58996693aad11b1a","ssdeep":"","tlshash":"fb413793c0f80d9317cc652b789585415d90c3c7ac893e0d76ae8a6f6f4cda914e677c","first_seen":"2026-08-03T19:54:11.717069Z","last_seen":"2026-08-19T15:48:16.913699Z","times_seen":494,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":30,"connect":8,"send":0,"wait":8,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/owl.transitions.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.222Z","timestamp":1787145400222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/owl.transitions.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:57:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 534\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3699,"size_decoded":842,"mime_type":"text/css","magic":"ASCII text, with very long lines (3699), with no line terminators","md5":"d3cae09d3a2a739d57ba673b3c84db71","sha1":"01ad3c7c272be1c23a796cf247bc1b689f9e7b7c","sha256":"df344411eb3c7585c6398e1b38475fcc3040ccdc4007ed707734d46e3a50843e","sha512":"66f617d0be9b552b5de55145950a2a325e665e218324c825e45eefc8acc8ee186267caaafbb6ed533908b3b66765179a8c96e3be762e234c0b6a969e0ecd6e6f","ssdeep":"","tlshash":"44711a6e41961348d09b0780b7d8fa980e5c89d668339dff31d9bd8ac7046de13f9a1b","first_seen":"2023-04-06T01:43:05Z","last_seen":"2026-08-19T13:17:51.37473Z","times_seen":1650,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/52.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.673Z","timestamp":1787145401673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/52.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1344\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 07 Dec 2020 19:11:36 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 19 Aug 2026 05:42:16 GMT\r\netag: \"3007f572f2d1d29b8c9bf993608742dd\"\r\nx-cache: Hit from cloudfront\r\nvary: Origin\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 40497\r\nx-amz-cf-id: _Id_6BU_ga-jS90U_fH6eTKI9MKd4G66JubF8AV2NL7_5Q5gawE3FA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1344,"size_decoded":1823,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3007f572f2d1d29b8c9bf993608742dd","sha1":"96806f51a39b29e1d5c0d38355e1d464a0b3d750","sha256":"81adb16c8bb35872dda383ce3a44a4c88acab45aeebd14352ae9fee24582651b","sha512":"2e77e11a36468c310ba525bd1388173531bec06f68ec5516a54d2682e4175b1cae796337c47c2c567d2509645b81150f237a5d34770dd768fac82a9dc3865802","ssdeep":"","tlshash":"f521b6cae2b28e69fb322af6832e4451add379391d72c806881832b11c112f2997dd58","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-08-19T13:17:51.337919Z","times_seen":632,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-regular-400.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.582Z","timestamp":1787145401582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-regular-400.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\netag: \"eedc5426d4ce1dec29ed9f448d7aa544\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ki3wvMpo8dGygGA20CaTM49_US6fI5tsNNxUvZuJZy2gNIZaaHN6Ng==\r\nage: 5303105\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1j%2BPLVrzVyooLa%2BoOAE5VhjqO%2B5lYQCdCkqPM5Q5nHMsLgWSzSnLIPY007FZwWXGkMVKz3d1sKeWeZGl7PHuUNz70Vb8RJ3JDL2IHG6ugEm7lbZKV9PPEsZpD57ZU2mrOz7r%2BHk6eA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2d96f27dda356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25476,"size_decoded":26592,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25476, version 775.1280","md5":"eedc5426d4ce1dec29ed9f448d7aa544","sha1":"806b0faeaf798a61d5d8fd6dcc91b65324f60908","sha256":"e71a997056207afc56d91dd0d9fc9a71ef860ddbd73e22960243c4bc0f760a3f","sha512":"874921520c75c9876b0b6016dbb03b1a93458c97da46c4189b6a5aef5b6b4020cbe6928c95cf84c05b565bb04ab27004f851c47a504b3a89d0d1ad5d18cfd23f","ssdeep":"768:MAuBipVRut5I5PJwMgwJee/jjFN3CjNgOsc2O9:MrBgE3yrJZ/qjNgTcr9","tlshash":"f8b2f2240a4c64574f5f8e3f9c30a42fea61d314026217a6b2da13053d99dafdf4e366","first_seen":"2024-12-20T05:38:41.493614Z","last_seen":"2026-08-19T13:17:51.379967Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/bootsnav.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.225Z","timestamp":1787145400225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/bootsnav.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:59:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3543\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24213,"size_decoded":3852,"mime_type":"text/css","magic":"ASCII text, with very long lines (24213), with no line terminators","md5":"2ab8f9f2358475588cac4ac4b0ccd875","sha1":"e92dd98c91d9a6a7643711139684d129c3d1fe53","sha256":"4f1780b6296603280ac687bf3cdd259ed95c2514894eb2dc108544fdc07619b7","sha512":"763eae9d5533350103c4f286b8a6e85e32bcbba8201c2e96054da95e49f9e65670e9e54a96b7a29d45a7ccf9a05d25137771fa7caace2728741da2b397145829","ssdeep":"384:/aBFYcNfIVtRnCfs2usikh3Lk3x/XcCm7J3Ag:EYowousVy3xtm7eg","tlshash":"64b20d619ae3381861a7c10e95c37764ddfac0516ba549bfb82f77ab4fd30810892f8c","first_seen":"2025-10-16T03:12:35.771708Z","last_seen":"2026-08-19T13:17:51.378145Z","times_seen":10,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/code.jquery.com/jquery-2.1.3.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.233Z","timestamp":1787145400233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /code.jquery.com/jquery-2.1.3.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Feb 2026 10:06:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28792\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84322,"size_decoded":29030,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32180), with CRLF line terminators","md5":"8e65e8606c70994e503ac69ba288f9f2","sha1":"255057d893d00bf46df9a1471672e5a68d67199d","sha256":"8e9945d7ebf431506391edb3431741c9007f4248bbb09dd451f54d67da1ef01e","sha512":"29f28687ddec577d8dd29430f954fdea53f6a7de3bd71f7752f71c90f2da8139e397220ad8a24f00f4233a431c26c9657383c462dda377ab60c97325aa328687","ssdeep":"1536:vP1vk7i6GUHdXXeyQazBu+4HhiO2wd3uJO1z6/A4fGAub0R4ULgGiyz4npa98HrL:S4Ud/Jiz6UANJ8pa98HrL","tlshash":"b383d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","first_seen":"2023-03-07T12:09:52Z","last_seen":"2026-08-19T13:17:51.332813Z","times_seen":357,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/external.php?link=https://cmcoptions.com/uss.png","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.879Z","timestamp":1787145400879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /external.php?link=https://cmcoptions.com/uss.png HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapital.live/en/ui/js/jquery-countTo.js","fqdn":"ultrexcapital.live","domain":"ultrexcapital.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.051Z","timestamp":1787145401051,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /en/ui/js/jquery-countTo.js HTTP/1.1\r\nHost: ultrexcapital.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T15:44:52.76299Z","times_seen":17975690,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:48.241Z","timestamp":1787145408241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 13:16:48 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k/8KfCRI9HFkFQW58IrYYKSuRy8+qOYZxgWg7T3qqlaDTf4mimvDUjnbhB/YWy/dUs2NHG8\r\nx-77-nzt-ray: fdb54123be597b2be5ac856a2b5d530e\r\nx-77-cache: HIT\r\nx-77-age: 3732365\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8208,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-08-19T15:48:16.9234Z","times_seen":3552,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/owl.carousel.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.216Z","timestamp":1787145400216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/owl.carousel.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:56:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 585\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3259,"size_decoded":893,"mime_type":"text/css","magic":"ASCII text, with very long lines (3259), with no line terminators","md5":"22891e301c3b9eaae3b88078947e77f7","sha1":"e70525c83b9dfbcaf0d18a91a56f54479d5e8536","sha256":"af86f9a51871482b8321e6d8979b4f6b79235910983d405c6fefeb53d7417b22","sha512":"60f4c20d006cc678d8dd475ae704ed761267e98128dfc9458df15d0eb1b17540a0250a287ddffde13465c633469d0bc70b2e0c3469bd5575cf7b441cd8c4b67d","ssdeep":"","tlshash":"2461cdf44618129c207ac3147a89dfce646ca2a39a1506af959efe24d387e15313f3ce","first_seen":"2025-10-16T03:12:35.483306Z","last_seen":"2026-08-19T13:17:51.340969Z","times_seen":10,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/owl.carousel.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.468Z","timestamp":1787145400468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/owl.carousel.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:31:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6299\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23936,"size_decoded":6536,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (635), with CRLF line terminators","md5":"8c52f27fcac36c7667f8fb846e1e94d5","sha1":"e5862559db659ffd530c91452d668c5e7b3f0f2d","sha256":"6c1e31700f68d1666de6b0992e89d413434707718bf729a472404029845bdbad","sha512":"9b8f2503bf30b879d3318e8d3ee6ba447fdd0b3d7e2d4f0c3cc03eb325247e2e05e8a7978318e648c91f1a90fcd7ab7ce1018189d27f028ea33064e38307fb20","ssdeep":"384:7Ket0QK/Q52Cgwm0PQtiRX55DzNvYUyzLsxVxRbm:dK/Q4ptuXNQUyzLIk","tlshash":"08b2a54bb2202385469372b9419b110d713bfb78fc42855c70b6dadfaa4b84e9277b3d","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-19T13:17:51.329333Z","times_seen":4335,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/external.html?link=https://fonts.googleapis.com/css?family=Raleway:400,800,700italic,700,800italic,900,900italic,600italic,600,500italic,500,400italic,300italic,300,200italic,200,100italic,100","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.673Z","timestamp":1787145400673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /external.html?link=https://fonts.googleapis.com/css?family=Raleway:400,800,700italic,700,800italic,900,900italic,600italic,600,500italic,500,400italic,300italic,300,200italic,200,100italic,100 HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/ui/css/style52e5.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/bitcoin.mp4","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.883Z","timestamp":1787145400883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/bitcoin.mp4 HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/mp4\r\nlast-modified: Mon, 23 Feb 2026 10:27:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3981235\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3981235,"size_decoded":3981424,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"aa48d2ef029168ce254a9c86ddb46741","sha1":"ca064e0ce45587aaffc2629bf600a461ce4a3ebf","sha256":"2db36aad703dfd1ac8b23200a51501db5b827788517b76665464b1c4ff21d3de","sha512":"8f73803333db80a1cd646ef88d6afd11948388205bd53510e71f8143e0779ef578ae8897354a2ffe611a2815131047652be0db5723234fffec888da3338a4a7e","ssdeep":"24576:mQGPLT4akqI903oMv7ikAyyrj1Up6oOm3JJU0raCe5ZxK9a:TGDT4akqiGekAyExOTz3JJRmC0ZxIa","tlshash":"3425129493f8150bec3347bc64c36308b331e6a1a25767d35379f635b4612ea9e4a8f8","first_seen":"2025-10-27T04:07:27.329697Z","last_seen":"2026-08-19T13:17:51.349135Z","times_seen":12,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.layeranimation.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.473Z","timestamp":1787145400473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/revolution.extension.layeranimation.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:38:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8505\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31993,"size_decoded":8742,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31742), with CRLF line terminators","md5":"a4b161bd54011818c42aff8f1d3d57fe","sha1":"7a6636f327a30ce3c62acc3a74789ca5d70ebb47","sha256":"7a941f0ecfa25b9b4f9c1a0aeae74d19e672ee6edb798f5dbb4d94284dd3da50","sha512":"197646c574e55d0a1f7a43f68cc28c606271c817039b23a64fc47cfd6a012b3d305a8090335317211bb662a72bdf65f748fe08bba2e9025fd49133d536ea0eca","ssdeep":"384:cTgpinjyBvaLur7x1gzLLXDTtaSjn87UWtXFIEaFYuvZyTvKTM:c0qW7xOzLTDXnlQIE1+M","tlshash":"30e2bad8ba003ce9f25bd196c06f45292260fd7d9602c0f1ba57a4ba1b1cd4136e6f5e","first_seen":"2023-03-07T12:41:31Z","last_seen":"2026-08-19T13:17:51.371117Z","times_seen":78,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/good-plans1.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.509Z","timestamp":1787145400509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/good-plans1.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:23:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 147191\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":147191,"size_decoded":147459,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 1356x807, components 3","md5":"9e468936fb0f53158cb30a735d3f1fd3","sha1":"47f42f657674e64df41ce14382011ffe5b65580a","sha256":"dad6e804ced0a6ae5a28cf312b9a3264fd445f2ad346177caa12ea69d2b02131","sha512":"db9598a02ce124be183fbddf12e03010c707eb4020ccac5debb126094a106a0103a39ee0763393e2d711d4d407c3998e56b64b50a4ef804338ceefd0d68a31fb","ssdeep":"3072:sz431lRsqRL6h9KB17s6PjQ6+0Ca82Y2OJBYMpyTKRH:sy1lRs8L6hQB1Q6NCCY2cbyORH","tlshash":"d6e3010b9d5cd612e49f4bb4fe552ced654a2b08e419bcfd352c2d8f3f009528ea219b","first_seen":"2025-11-12T04:02:28.245613Z","last_seen":"2026-08-19T13:17:51.371741Z","times_seen":6,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/css/settings.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.223Z","timestamp":1787145400223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/css/settings.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:58:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5210\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27209,"size_decoded":5519,"mime_type":"text/css","magic":"ASCII text, with very long lines (27209), with no line terminators","md5":"76f96edf93f0198a6457ba38a5335542","sha1":"9444e85fd478f11c3d39fda986d61bc815b57e35","sha256":"447e0e2a3787f19892d92a84c09b6fbfcaf865a793d021bca656db11cc473ea8","sha512":"e46ff95e7d61eca5123ad0fba7fe497523093138f2afb7041e5b09e50c80bec416b66fb5c0e36ef9260eaf56375787f1dae9424b10358b92ecd043a1f0f6be54","ssdeep":"384:kcYY6EbEHE1E8fIKZ4D6ZXEmS/SLSQs8kKrvtSXGh7g7m:JuKcWjfIKZXXEmS/SLSQLrvtSXGhU7m","tlshash":"3bc29771a48461e8b767ca2563c477ae203dc123eb131daef1177ab8cbc35da40a3758","first_seen":"2025-10-16T03:12:35.523993Z","last_seen":"2026-08-19T13:17:51.341515Z","times_seen":10,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/alert/css/fake-notification-min.css","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.229Z","timestamp":1787145400229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /alert/css/fake-notification-min.css HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 10:03:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":978,"size_decoded":677,"mime_type":"text/css","magic":"ASCII text, with very long lines (643), with CRLF line terminators","md5":"0f46a238cbd11ecd4c34398cd88fe05d","sha1":"904d82352b0f45cad8d98cc7416c265a0cf0e1be","sha256":"27ef53faac17a2fcf938097d718cbf926cc54f9b35d79815c26ea0e219156d6b","sha512":"a99c4ee17e2837697af6a564f0a1eada3eca0eed1fc73dd9e4ecf5c26e4b6485c0631e1f9395539665f15335f18ee9370beec61665df928c8b7b7d852ac1dbc9","ssdeep":"","tlshash":"c21144528133a0c675b5827b35132df57033854e7f131490eb93af21c146b9a3b4130d","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-08-19T13:17:51.375299Z","times_seen":849,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/revolution.extension.slideanims.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.477Z","timestamp":1787145400477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/revolution.extension.slideanims.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:41:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6233\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28131,"size_decoded":6470,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (27879), with CRLF line terminators","md5":"d98dbfaf16fdb036d2d818ea17bed39b","sha1":"e0258619e05634f70ed52863d4d6e60e7449b268","sha256":"d88a29dc6bc426920a8ba03cf1e514736006e851df3ede235864a5f98d9271c6","sha512":"d63c88845bd6603fd859468d8add63c583cf96b1207f68bbe6e99db1359bd6b39f23892ab5292231ef9f6b4fc4dc546da1b02d939a58310d86d9ae43a15386ea","ssdeep":"384:S1aX4OwfkNgPwEN8vo05g4z8QWwwBWCp1FajXUAgQN88Wm3FrWkgH:orPwEN8Qj4RfjXpWvH","tlshash":"0ec20aaade2658a344536243d3f589185214cd33fe33aeca33f590f505e305e22eed96","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-08-19T13:17:51.356713Z","times_seen":1017,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/uploads/testimonies/thumb/tes3.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.523Z","timestamp":1787145400523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /uploads/testimonies/thumb/tes3.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106143\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106143,"size_decoded":106411,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x672, components 3","md5":"e38dc854c9fd2041848c06b9cc29311a","sha1":"b5083e8cd5c1838651f685f1c74d1e212ca5cfcf","sha256":"425d835d563b6cb7c13746e336d59257628992cf1da6961c47d4c5edab7214f4","sha512":"d4ed5e27528e8c3f84481e609d9337a8abaf3056aba6215959d57b158d50a7f7249ea5c3b4df6f04596ec70ae06808e80ba234ea0b6519003422f0b317a9e02d","ssdeep":"1536:kruulf3LtjTuKPpic7mh+kfxC313XgsErqBCmNau1zijzZryEevSfHos8vaX:kTdx1picMzfxC3ZgrqBCmNB2jNL4SfUu","tlshash":"09a312d29fdc3e6f4e709559886c7f6ae0da837b1803b19e36442df48d412a5b6028fc","first_seen":"2025-11-12T04:02:28.25705Z","last_seen":"2026-08-19T13:17:51.329878Z","times_seen":6,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.277Z","timestamp":1787145401277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/font-awesome/4.5.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/uss.png","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.520Z","timestamp":1787145400520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /uss.png HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 23 Feb 2026 10:30:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28790\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28790,"size_decoded":29056,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"739297c3ec0f727c32c8135aca85df15","sha1":"a783ad0b3df302b111a0ad8938fa76ffb0922eee","sha256":"13ec0a8a2cad511b0695bc163a5ec32a646f120ad910b2dd6b78ce4e8925fbbd","sha512":"5d295d0abf9d4843e31677721bd87e6011a220418e833653ff8463820250c27e06e7e8361eeaae945dd146f72800130ee65fccd60bd453d2cfc4103cc38a34b6","ssdeep":"768:1WgX0oGadodsqVahjDuLPNANNRo1gpdnawmXnCU5cx:1WgxWsqUHuLPQoqpdaHXC3x","tlshash":"d4d2d0e05c698374af3f928592177bae9c5e852760395c2c0b781c6136b9263d83cbed","first_seen":"2023-05-06T03:40:19Z","last_seen":"2026-08-19T13:17:51.36948Z","times_seen":50,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/functionsaed0.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.480Z","timestamp":1787145400480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/functionsaed0.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:43:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1986\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7205,"size_decoded":2223,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4931), with CRLF line terminators","md5":"5e257e089808315ed604ee013df2cf02","sha1":"5fc8a3429bf3cc43e76df0520e93cab59abf3283","sha256":"4efc030afad11d79762835021273cd7b19399b0f286aa58e6fd3c45f331d5644","sha512":"643c7eafab60e5e33e75f12421d9713d16bd8371c3612673e82a2b09f0b6ae0670e6eac3165bfd6d2b76b9b6900912070641e331438dbc361a1cbcaab2333655","ssdeep":"192:/HzDtnibZrss3qxUkKtW7RZWoR2Oh/h2NKOyYL4A5fm:vtibZrss3qxUDW/WduXOTLNfm","tlshash":"c5e1b70df500a5fec23b2519e219772497e62c60eb12f85af1e9527806eaf554a32f0f","first_seen":"2026-08-19T13:17:44.511071Z","last_seen":"2026-08-19T13:17:51.349791Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/news3.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.526Z","timestamp":1787145400526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/news3.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:31:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 46958\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46958,"size_decoded":47225,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 445x278, components 3","md5":"19075aa63c020bf4618c4fbd61ced378","sha1":"f47206cad4df202a2070c1a7841184cd7dfa84fa","sha256":"06db492787188341adab034fef770040e0ec909aa124e564d437a8e00431bfa9","sha512":"79463bfac097c511fc608d5fb3b9db3aaf7768af5e7e49d11be90d713463a7c03cd63cc0674bf5acd7a9f4398d3766b1335c73c9fa84f0a4ec1555c30fc52273","ssdeep":"768:MYywFyp5EOO95wMG8Xsk7daD9MNaNM2iRncfZkexDHj3NlEHKZK:MsFlOO95wM/8Qd0+aNM2mncBk0Hj3PEh","tlshash":"5023f1edf772c171ea94c7f8df429fe98aa5f2f5eab410096c285b29c620801954d34e","first_seen":"2023-04-15T23:15:16Z","last_seen":"2026-08-19T13:17:51.377041Z","times_seen":149,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/logo.png","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.495Z","timestamp":1787145400495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 23 Feb 2026 10:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 216439\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":216439,"size_decoded":216706,"mime_type":"image/png","magic":"PNG image data, 1921 x 1080, 8-bit/color RGBA, non-interlaced","md5":"3f93f49d7bf69bf5ac6db15db859e2ac","sha1":"e65478b1fa1c4a23e716be749854cc28a103112d","sha256":"318529d16f24963e211658e5ca21a33cf1d70cc474121bf4cce75ba5f119a154","sha512":"04678615c6ffb61305ca9af2ce160d829c1d5538f9ab1a499ac23704010137ed7ba24b00cd73ca664a6ec895e69849165a96803626e5aa89338919e6d5d25a00","ssdeep":"3072:zRHcmbQqaBdQ2gE6PINA2mWKHyNgmPqoc5Qywdus42IAnLh8t8rMybRyZ:zPkdC5WKr0vuQRtdICWt8rMytK","tlshash":"f2240212a923ca5cdf8db1b142a85bb13f770b8269240762dbb5fe53c95794a8c138c3","first_seen":"2026-08-19T13:17:44.513362Z","last_seen":"2026-08-19T13:17:51.327913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-solid-900.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.139.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:41.578Z","timestamp":1787145401578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:02:30 GMT","end":"Sat, 07 Nov 2026 23:02:28 GMT"},"fingerprint":{"sha1":"2F:17:AE:D4:B3:E6:4C:75:84:C4:40:AC:B8:27:21:BE:C5:F0:2E:A1","sha256":"BC:20:3D:4B:EB:13:3F:C8:30:E3:A2:74:3C:B3:6E:43:B7:8A:82:C5:54:EA:87:E7:43:1F:0B:C7:8B:96:20:69"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-solid-900.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ndate: Wed, 19 Aug 2026 13:16:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\netag: \"0931d657c03a7e21f461178758aa2e19\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: i3e_ZYoxOo7kZYpMYggOcS9-tx5zb_E2fG0MbC5X8HJZfqoMd_Wljg==\r\nage: 9102953\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5mGyq7Ju9d7wHtVAzOL%2BOseFACYsrDBHQOokAt6Hbe2gDgABm50Dp3Co2ZaqBxZ5JcuYah%2BKUEzTkk44zq%2BDL798ntPzxFua2F3c4UAK92bKcnJZZNKUr5gULXnzVRpUm%2F0oyzXY8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2d96f27dda056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":158212,"size_decoded":159329,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158212, version 775.1280","md5":"0931d657c03a7e21f461178758aa2e19","sha1":"0dc7d1527ac7015ec4db478ed1bde56b64fdcde0","sha256":"95e971e60878307902a92bc76c5d5e54bdd040e68834ac0b332f59526c68b1b3","sha512":"736674c3ec882e86ab16f6618a5b219cc34840a20e0e49e580b043863241a2fab4fc3197b7ea9cae40d09c5552fbf6c5b3a2d77b4e9d2a85741195f4e95ffdd3","ssdeep":"3072:yPQ3j6tlNJu8BwPA9UShIYNkCcpDhk6DJMj1Bce7XfRPnnW8tjet:R6tlK8BwcUKJcpDhk6DJMjrLRPnW8Fa","tlshash":"37f312cf72c1cfb70ca51aeba55879b76b382f8352816b8a501e3d649910d17268f3f1","first_seen":"2024-12-18T12:55:36.287523Z","last_seen":"2026-08-19T13:17:51.335855Z","times_seen":4539,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:48.239Z","timestamp":1787145408239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-BKfXgL7M.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 13:16:48 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-42dad\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: ky+tkD9PHB8ptfmHckrbA6Tw49cYV2/w00f9KiviEEh23ff/F/GHR8K4DPhmCE7yNetUkUw\r\nx-77-nzt-ray: fdb54123be597b2be5ac856a9e44310e\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1382490\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":273837,"size_decoded":93096,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-19T15:48:16.90418Z","times_seen":509,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.185.39.247","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:51.703Z","timestamp":1787145411703,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ultrexcapitalfx.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dI+PndSnFdO7I72HETmalQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 19 Aug 2026 13:16:51 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: NjQUU7fTQMbhXz50sYVCh8XY6Ak=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T15:44:52.76299Z","times_seen":17975690,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":79,"connect":101,"send":0,"wait":26,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.247Z","timestamp":1787145400247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T15:44:51.703041Z","times_seen":151180,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/js/wow.min.js","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.479Z","timestamp":1787145400479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/js/wow.min.js HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 Feb 2026 04:42:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1566\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4777,"size_decoded":1803,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4746), with CRLF line terminators","md5":"3fcf8f685dc926ccc2866296061ae168","sha1":"80945eebd84a463827395151a74b1e78408df4d8","sha256":"186412f7166b1cc4ae633617a83bac2a507e549387c6e97f69f7654881f086ac","sha512":"2ed6a408595af79ac1aaffdb4b3781522f984ab633c6bfe737b7db16528fd037c25049ebc395ce66cafab8ff221fc06ffc2034c52f9f547824613c6a51a9bbb7","ssdeep":"96:EGqKtAZw5D9jEOVEE1VlebgJAW42IJDaDle:pGO55YOVEEblekJAWNIkDU","tlshash":"c4a143c9bb467032c79792f2863f4205b33a15bda00944bcb6b984e57d34d299236f38","first_seen":"2023-03-07T01:12:01Z","last_seen":"2026-08-19T13:17:51.357485Z","times_seen":591,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/grid55.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.515Z","timestamp":1787145400515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/grid55.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:26:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 677739\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":677739,"size_decoded":678007,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1000x626, components 3","md5":"724a9d884c7d0c766159e572aa17889f","sha1":"0a8539d266de141248443f8bcc3b244382a3ffbd","sha256":"6c7f5beb9f0b78df883b6fd2c3663c578967563a56855597348a4f0351e9232e","sha512":"82206df32b64e70c2a7a56ec988b577e285258e2df185a3c4b02f89ce8340f4660093f69ed35b87bfa5641863f28b1d484b340a5b8952a3424b4ff0d7f51a9fb","ssdeep":"12288:hj+Swt9UASr8h1yV2G6o6KEa3SbZ5YO5K8MTwqzdRsKcgynj2m00wilQEMReQ7sV:hjrwUv8ikHKEa0YD8MTwqdwj2m005lQg","tlshash":"5be423daccc746aafa42e7381876564da809c06f07f32d31ae912683c5fb9b4dc5711e","first_seen":"2025-11-12T04:02:28.252988Z","last_seen":"2026-08-19T13:17:51.38247Z","times_seen":4,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ultrexcapitalfx.com/ui/images/news1.jpg","fqdn":"ultrexcapitalfx.com","domain":"ultrexcapitalfx.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ultrexcapitalfx.com/","date":"2026-08-19T13:16:40.529Z","timestamp":1787145400529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultrexcapitalfx.com.werdmountbank.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 07:48:07 GMT","end":"Wed, 04 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"D5:6A:A8:1B:90:F5:FD:27:CE:18:D3:D8:B6:27:67:91:1F:C8:1B:F4","sha256":"A6:34:D5:46:1B:CD:5F:93:31:E1:DA:F6:34:E1:C9:08:A8:71:31:5F:54:B0:67:0F:CE:85:30:56:6D:6B:1F:5F"}}},"request":{"raw":"GET /ui/images/news1.jpg HTTP/1.1\r\nHost: ultrexcapitalfx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ultrexcapitalfx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 13:16:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Feb 2026 10:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27425\r\ndate: Wed, 19 Aug 2026 13:16:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27425,"size_decoded":27692,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop CC 2017 Windows, datetime=2018-01-14T22:43:37+06:00], baseline, precision 8, 360x210, components 3","md5":"9bf59a8672d27b08fe3cb6cee81934d5","sha1":"f667cc0e9475dd19e7e41075a475c4db1b59a8c5","sha256":"362def2ba0e81b9da5225229293fda88eda09580dfa385179f50ac78042fcd06","sha512":"65ffb92b33731ceeddbde131945a1f0f79c03b35a6ee511647ba628da68571ac5cc9546a0a02403bdaf9ce4b3be39dad34d37946561678b322a85bb70216a531","ssdeep":"768:IbuwXI6S+WpL8q/qOL+WBBSWc5m26ZtPJ:Ib1Y64pV/qOL+sj2o","tlshash":"c7c2e06ce52bed80f2088d70b3fd3a654f64a689586195cd47ac9f334930b7192e8ec2","first_seen":"2023-04-21T01:30:48Z","last_seen":"2026-08-19T13:17:51.379327Z","times_seen":162,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"ultrexcapitalfx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}