{"report_id":"ebeafa5c-c9f2-4598-8a59-effdd0a8e03c","version":0,"status":"done","tags":[],"date":"2026-07-13T01:57:31Z","url":{"schema":"http","addr":"jtx-trading.pro","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jtx-trading.pro/","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"title":"JTX.","dom":{"size":75912,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (58493)","md5":"a8a8c76d44e84f7f0800306a8dfa943e","sha1":"6dcf8785fffec9ae74b507678e3475deefd7bd29","sha256":"d68e0540431af4a78eea7e35d8d7012ec189688d846ca11eea596b9ae6d78e57","sha512":"30e709718fcea99996562e32f57796867e7274c21ff949e336922c3b7b948481f4b0276d2065f5b01274fba50885122ea465e5da80c482627af5ebdbc3ac7ff2","ssdeep":"1536:yjebx/c64Jysq7vtcBwiJ/aZ8Z3paZ8Zn+PvegzZbZoPuIVI5ILPmvzoCt:ieWq+y","tlshash":"427395f493089926085b49ccfa9bf784a00252c4df694a6472be4e77ff84df232365e4","dom_hash":"domhashee4953573342ec7ac1c0538fda0ffe5c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jtx-trading.pro","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T01:57:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jtx-trading.pro","ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T08:56:10.85137Z","last_seen":"2026-07-10T08:56:10.85137Z","alert_count":18,"request_count":18,"received_data":1130940,"sent_data":9238,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jtx.trade","ip":{"addr":"104.26.10.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-26","domain_rank":0,"first_seen":"2026-05-08T14:20:01.348833Z","last_seen":"2026-07-10T08:56:11.551668Z","alert_count":1,"request_count":1,"received_data":761,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"jtx.com","ip":{"addr":"172.67.72.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1997-12-09","domain_rank":0,"first_seen":"2026-07-10T08:56:10.849949Z","last_seen":"2026-07-10T08:56:10.849949Z","alert_count":0,"request_count":1,"received_data":4227,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jtx-trading.pro/","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2d4eb901ad09a2dd2031655df674ed3","sha1":"451bc857e74490216a947d911f9ba313751860f5","sha256":"2868df48cff10e65ca656ba74ca98c1aa79a9ecd681a684df8a16c59c86d2b3f","sha512":"9d7ab38110565e2749de75a810f470657a933a77ad4add37cae0d256e1159b7c9faf782598c8271e8a6ba3e3ddc9b6ac4253a1059fc19df68d0ad9f15515d648","ssdeep":"","tlshash":"41c0c04082608d704c3c00ebd030b18830603c5d004920fdc3fcac4e50ecfc00d08649","size":180,"data":"","first_seen":"2026-07-10T08:56:15.476421Z","last_seen":"2026-07-13T01:57:32.777976Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-13T21:21:12.624625Z","times_seen":1885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-13T01:57:32.779317Z","times_seen":3215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/index_5.html","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-13T21:21:12.624625Z","times_seen":1885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/secureproxy?s=%2Fipfs%2F0fO56ho4GgFY0kw4qT6tOAaa60c3d5384f36012e8858b4be40a311%3Ft%3D1783907819265","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed3582b1321d57e0bf2cd7acf5cf19a1","sha1":"82f5f7f5b5e1de6a565db700f06efebceb33e16a","sha256":"4ef0bfc870f79cabb973dcd03a53277f028f840c3a81d93bffa03fa5ceb10447","sha512":"5a889dce329654433bf2b133a9214970a74ed064d0259342c571c275db2e02718a7c755198d0cda9c0a10fa958dca944c7e74dfe647d8d12a2209eac9dc49774","ssdeep":"6144:4hIFMHTn8U1qFcHZVNYT1XveUtK3+9mpQttmI4qrBLOfXsl3toLAp:vFMzn8UIFTeUtG+9Zmaxx","tlshash":"95c4b8e38b0899f344c427b7046f546fefc8bf481f8b985b53c1ac9e52653ae49e8158","size":571430,"data":"","first_seen":"2026-07-13T01:57:32.775118Z","last_seen":"2026-07-13T01:57:32.775118Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jtx-trading.pro/eade53c51abd78ea71a7d694c238ed6f2dbb0862-md-3.jpg","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.300Z","timestamp":1783907819300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /eade53c51abd78ea71a7d694c238ed6f2dbb0862-md-3.jpg HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\netag: \"69fb3ed6-7e89\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 23144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kuwzmDOYOanmZx3dzBEhZOQL0WJ62QjV%2BBZSG64BHY1iIHjFH6%2Fn%2FH2ci80GxBOzMtqojcJC6kdzb9H8PrV7CwUby86tb7yQFfHfYb%2BWz78ol4GzfO4Fw14ExPJXdXwWls%3D\"}]}\r\ncf-ray: a1a4ac9ea9757131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32393,"size_decoded":33332,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x482, components 3","md5":"a7b74a528cc211fc4c4bbcc8e5c15883","sha1":"4b827f518cfbc98d8a2620e128eaaa5cd4400d00","sha256":"434073e1a03a2a82f5febf400d0039ec6204c1975aba30081904e637ec16c1e7","sha512":"12b6c411f8ad05f580d41cabdf85baef4c5e981f3d43f3dc5ec356a2ecfbf519f4825ddd8fa12bc3ba167fe986957f1fcf2198bcdcaa8a659bc51940771560d8","ssdeep":"768:lzti0ciWubpeIY6AHSswkiW3pmhxTLPEZ:lztxciWubpI6jzWoXPQ","tlshash":"57e2f12de3dcbd106d41aa725e180b3b889c580487306e7f892e9358d8179c8cf98e9f","first_seen":"2026-05-08T14:19:43.683Z","last_seen":"2026-07-13T01:57:32.764321Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/footer-icon-stars.svg","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.306Z","timestamp":1783907819306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /footer-icon-stars.svg HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDRKbbSDr36sQ6yGMw9%2F6evuNhIJ3vaBySUrqlA8g0NkuqTV83Jsfd1ub4ssq9sfk1nBX0VXkGbajW4sw3rmntVOLXvUTXijw2YTNrp3jNWwUwPFpvZVL2XcQt6JlFTEVVU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 23144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fb3ed6-475\"\r\ncf-ray: a1a4ac9ea9797131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1141,"size_decoded":1311,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9c6be9e6e0e437a16b1e49fab2b7b67","sha1":"5b29ff02c7bca1f673dfa52d7d9b09d41ce52145","sha256":"110822341a959211a44f87f674aacdee31d697b74442125cd75d6ebf3b3ad635","sha512":"d5b6e068ac229f9894679a17f67c519a6d977aba9797870af827db8deba85edc3bd01053f487be5a61a7b2ab4553799b28163af66ce4094abc96b441003429ec","ssdeep":"","tlshash":"d02146d64355d21b8f25bf6cad2a042f0e3d3cb58b7f10a0a2f14267d3712f588805e8","first_seen":"2026-05-08T14:19:43.687991Z","last_seen":"2026-07-13T01:57:32.764987Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/index_1.html#frame=checkbox-invisible","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.349Z","timestamp":1783907819349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 23143\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RomP6XuBQTcZypTGjteCkpkeV81aPd4KdhJ9GqWzKoCjep9GoSP1YeNeQOn4ddyDCEYVDYgGooILjz6K2sE4wEKiyAl%2FvQeUUYrz2ZaaSWPeiutyp9vZJSAGJ3iM3tG6OI%3D\"}]}\r\ncf-ray: a1a4ac9ef97a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1643,"size_decoded":1613,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1235)","md5":"b37b62143df82ce245c12cda405c4bea","sha1":"43f9cd99e89e5bfc55a6cbb6b0f58499cc4b0df0","sha256":"c0d07ca8d09bf334b344f3e63d7abe93e3eb0eb31a4490b4cbd2ef600584147a","sha512":"258042948ccc6ab8d51f805a7fa57643dc6dd1cb212f4e2ddf5bd62a190b47c2ce78d8fa17e9a1d49325cadbd94d5f3b4f6872c14ba94d54be657d956699d0fc","ssdeep":"","tlshash":"b531e69a0d43109dd49389df8ce57ab4690eeb539a030ecb7161d09587437dda0f1f0b","first_seen":"2026-05-08T14:19:43.678466Z","last_seen":"2026-07-13T01:57:32.765663Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/index_5.html","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.358Z","timestamp":1783907819358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /index_5.html HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:04 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 23143\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtGKxyP9B%2FgPo3bOkyxDXJ1iC4w8RLFDmelP4Gba7Rv4KpW8FLPzarkybpJlXAu3T4h2nNRtIXzbYOLGzdhpGytwkSIx8Nk9MdNYNfpFRF5a7hFkPR1KgMkiSeSdgZmf4A0%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a4ac9ef97d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1109,"size_decoded":1560,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1108), with no line terminators","md5":"671b84f978bf6003d2ef4531991b8e29","sha1":"c6fd8c865dc42ab0f1cd74300b72b1fa7ee1670d","sha256":"8d6778adac5e085c76ead8454f0b1cc8f83d12f4c26472ffab2b4ab570d610a4","sha512":"89802546010787ab96418c3dfe781af7329ec4de0ca0b9da28b0cd10efffc98489a8cb8f74786360b0bd0c077aca0d7ed54ceecd167bb08ce21335092b5f8a66","ssdeep":"","tlshash":"761163e27c10ee19111ba7e9ccca504e6d03fe2ed30018ccafcdd95d9db6a3d1155888","first_seen":"2026-05-08T14:19:43.689748Z","last_seen":"2026-07-13T01:57:32.766337Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/index_4.html#frame=challenge\u0026id=1f5nmlw5sli\u0026host=jtx.trade\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=b9fc5a50-2e5c-457a-9582-80ce342c2534\u0026size=invisible\u0026theme=light\u0026origin=https%3A%2F%2Fjtx.trade","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.365Z","timestamp":1783907819365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:04 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 23143\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RA5vAei7bO07PLvuVU1lEy%2BAqNwRkDb%2FyP36V4gFSfoDv1jU7j675ApQCrAcu2MPmsgGH95h1kCr21eLB1LW3UsYMAjYQA8ROWoaDA5FTvKtwlztlnyH%2Bn9qzF6sMCwlOFg%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a4ac9f097f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59033,"size_decoded":4693,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57363)","md5":"8f3363ee68a6f356e428ee51a1aa9b5d","sha1":"8ee9390f51031c32c9411468a8d5e3cfa847d869","sha256":"afc92c15c12da5623fe4123a762006695ec8e59e752251e5d872dc261ed35e42","sha512":"35ed7febf8867efaa2ddc1c7242b1e137100dde4f85dcb58292c0ac2ca27d8614f7d7ae10841da212abf4f04d8de1d8330e5da14a391010b6466aa2b931fb0f6","ssdeep":"192:ifIIINkNHCB4a1NqXfvXfFqgVLg6Xjb6XNb6XYb6Xrb6Xgb6XRb6XUb6Xrb6XvbI:ka1N0qgVqSAVxe","tlshash":"9543142196050427b177b798b4f18bcf27ab8309f55342389be92a92e1cfcb45c9b747","first_seen":"2026-05-08T14:19:43.679394Z","last_seen":"2026-07-13T01:57:32.767621Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/8425af5896365484.css","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.288Z","timestamp":1783907819288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /8425af5896365484.css HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\netag: W/\"69fb3ed6-12183\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 23144\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqWOx7QW6c90qVnVzT5Z3O%2F4xjgyW32UvEpAAlWokZOaqkolztt8w7%2FcO2D1wN73yA9RVeCPcG%2BpWySmZWvPF3h7pzvtZV29Gl87e6cLbTo0Ghzu48TYMUVEFnKVI2FxPYY%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a4ac9e89727131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74115,"size_decoded":17134,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"26a3b7e7d414b2eb93e5eb4fe28ecc99","sha1":"94eb346f355a95684ed6c2fef1116c80f55f1690","sha256":"e584f7937a208f0323b0182f657ef564db53be35b0dd431f8ba9933d62c9941c","sha512":"f7d495484d1dea92499f451cd3e257d565a5f9a77d3a100d8c92af548037e66068029f8c125f97bb28f52c737caf036175e7fb8911103c03dfcfe008e795a1ad","ssdeep":"768:M1rtEL3FkFof4jZmfH0PkmRaZ0Od4t1WgiZNOnFkssNpnuehpTM4g0Wjkdp0eIzs:WtEJkFof4jZmfH0PkmRUh3zdphGCWDsR","tlshash":"1173b5a0e326d83fec3764bd63acf89ca209b246de115becf511311256c7bf61d22619","first_seen":"2026-05-08T14:19:43.692309Z","last_seen":"2026-07-13T01:57:32.768713Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/favicon.svg","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.788Z","timestamp":1783907819788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pXTkV1gSnpHdkbqTVWLWQsA278LZO27BUmjj4ArLLGpyelOssp9VJJoczcQ8BsaOXsIAvv3%2Fd0%2B%2BLMSnqY7ODYw7qzfoeeqw%2BznsprpG%2FhCGjlFSp1hoqx6np88aUogLW08%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 23144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fb3ed6-8f7\"\r\ncf-ray: a1a4aca1b98a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2295,"size_decoded":1711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a03912c0459634b7721626fcb4204a7a","sha1":"383dff200fad4ff92ba979e269ed020de35623d4","sha256":"d31c229c0be107d9e502de13b3aa4e4a91c5b86d1eeaf1c0c6b5c087a482ab1b","sha512":"d4c7b0791fe145ee108bcdb268bfc27c8648f599b0d013a783c0e75198a3ec952654f35d3b064363380c148d85fdb8340a255da7877355a3fb894f518aac77a0","ssdeep":"","tlshash":"1a4162af83119914f2594b22fff4e258503fb057c6cd584efa582c66a741acc3c22bd1","first_seen":"2026-05-08T14:19:43.690614Z","last_seen":"2026-07-13T01:57:32.769715Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/footer-icon-target.svg","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.303Z","timestamp":1783907819303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /footer-icon-target.svg HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzkU3ENpMCtEdbLKnxGa1QU6IUlRlxsub1J2Jsm%2B9Wt7yS1Ri%2Fvd10NjGhmX8E5fUqAWQbFyEI7pbpaRZY0ZtHSe4q0azJCEAOl2YZFrgvZF97DS3385agPjA3jh%2FsIOlsM%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 23144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fb3ed6-cb2\"\r\ncf-ray: a1a4ac9ea9777131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3250,"size_decoded":2073,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09d1b93f1de62b20c0b9d83fddc7fcce","sha1":"53e8d1c99202733d84e8e1e8b3e77e88daea890d","sha256":"3d0c924b842107a04c39d122895fe728098a52dfecd1cf1dd65c310bd68e0465","sha512":"556925ad398693cf08e600d7fe217bd5a8cff95cecd5f9401e9dd454e09959bdb5b0a911c9c6f71a0cf4c77876c547958adb31b69166cf85dda48e3fa826e522","ssdeep":"","tlshash":"626114f96354c8a4f803d3f8ca7b52b8b402fc757ea58ad842d63c55784806dd85c9d6","first_seen":"2026-05-08T14:19:43.693724Z","last_seen":"2026-07-13T01:57:32.770293Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/footer-icon-dots.svg","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.305Z","timestamp":1783907819305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /footer-icon-dots.svg HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5169MQ31EyFrbA%2FG8rPQdK%2F5%2B%2BukPyFUJkkJsiSitmfzsl5g55lUN2ql5k0kXmUlh6VVCNrdG06jziPld1%2FDrzlocjxCttWozlv0qj7hvEia8bR7DzJjuVKPokw59rBPWE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 23144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fb3ed6-411\"\r\ncf-ray: a1a4ac9ea9787131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1148,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfa61bc6b889094cec749caad6e2d793","sha1":"6184083a405c281c5c89616ffe1a04c3120be3b6","sha256":"ea71d43279951b8a8888a29418562691b35be61a2fc6c60813739c75db0d2f53","sha512":"3b5709cfcc54eace5276da58b5cfcc7dcb8eb883f7a2dc77ea92166cd8e99655d5ab173c8dc89f083f67ddbb4dad1a847c71b8b60ae7b20399ffc09c5e579679","ssdeep":"","tlshash":"7611cb5160ede809269ca0ecc07bf1f9d91b82e4cf96f71182598e2f70002a7b0ad3e0","first_seen":"2026-05-08T14:19:43.687184Z","last_seen":"2026-07-13T01:57:32.770844Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/index_2.html#frame=checkbox-invisible","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.355Z","timestamp":1783907819355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 23143\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYOmCq8ttsEJnljGhJrW422v64OkeQvkTaWTKNmqEv%2FDYdjzWfwSm82j2ZLIq3QjIqAsIdVEYnhqdOGvRwQ8N%2B1V768%2FDrQtMG99vUQ7PdXKl%2BUQSN%2B97R2r73PXxTvQIug%3D\"}]}\r\ncf-ray: a1a4ac9ef97c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1643,"size_decoded":1621,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1235)","md5":"b37b62143df82ce245c12cda405c4bea","sha1":"43f9cd99e89e5bfc55a6cbb6b0f58499cc4b0df0","sha256":"c0d07ca8d09bf334b344f3e63d7abe93e3eb0eb31a4490b4cbd2ef600584147a","sha512":"258042948ccc6ab8d51f805a7fa57643dc6dd1cb212f4e2ddf5bd62a190b47c2ce78d8fa17e9a1d49325cadbd94d5f3b4f6872c14ba94d54be657d956699d0fc","ssdeep":"","tlshash":"b531e69a0d43109dd49389df8ce57ab4690eeb539a030ecb7161d09587437dda0f1f0b","first_seen":"2026-05-08T14:19:43.678466Z","last_seen":"2026-07-13T01:57:32.765663Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/index_3.html#frame=challenge\u0026id=0lsqhi4bwl5i\u0026host=jtx.trade\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=b9fc5a50-2e5c-457a-9582-80ce342c2534\u0026size=invisible\u0026theme=light\u0026origin=https%3A%2F%2Fjtx.trade","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.361Z","timestamp":1783907819361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:04 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 23143\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hITrDXkVHefbyZ98YgF99EVPPtWVglG7ejFKBo5%2FA3VfDCwRpDrH3vw8Fczpp02Uzf5gI3255G2P8GP8mccdKG3udZjZWHwzXUtoBWHGjcT4e%2BkarLMf%2B%2BB3kV%2BDl2J3olE%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a4ac9f097e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58859,"size_decoded":4641,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57189)","md5":"38c4067d43009ea1625e15ec5a944b73","sha1":"efdd3bf600cf53427b1de056c30b9d7b77bec902","sha256":"7ca3097952a217db4211a08103db5ef4bc0d4595990f4940de09a3e95fc6b71a","sha512":"40ad58e1d77cece4736662c0c0a9d4d53c7f3ae011f49978ba7ee7b258dce3f5e2eda9915497e8efd54d376f53139f149de2ed85533f5b02ec256d292fc7fd54","ssdeep":"192:ifIIINkNHCB4a1NkcXfvXfFqgVL36Xjb6XNb6XYb6Xrb6Xgb6XRb6XUb6Xrb6Xvo:ka1NkSqgVvSAK","tlshash":"8f43142156050427b177b798b4f18bcf27ab8309f55342389be92a92e1cfdb49c9b743","first_seen":"2026-05-08T14:19:43.685062Z","last_seen":"2026-07-13T01:57:32.771391Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/2a7befb109f35fd5.css","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jtx-trading.pro/index_5.html","date":"2026-07-13T01:56:59.423Z","timestamp":1783907819423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /2a7befb109f35fd5.css HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/index_5.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\netag: W/\"69fb3ed6-1c297\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 23143\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=knAwJzZnhr5R4p9Xb4d3KftGlEc0QTWpQ5WnO2Nv2pUShdvGRU%2F205gC3DjcqnQExZ6QjRHNYl2LDFPCx%2BW9ob%2F3Ak1yeNCpjIiRt8aMIjJlxzXEPMLvlBiz%2B6hTiWRvQss%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a4ac9f69807131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115351,"size_decoded":25473,"mime_type":"text/css","magic":"ASCII text, with very long lines (59489)","md5":"5beb76ae767abbc26a22ba115cd9cf27","sha1":"c7f948f0304e974f9bb30a5db5c1fa8a9e8c4467","sha256":"5b8cc5e4f63bc6cd14c63a3b06e460dfb4cee582ca80bc05b15f4c31261b7250","sha512":"92fbbf27435574f1a0f627f4b36e1bae92b23f99f9b3bf1a3edf4d3e1b9234f940a4f1c561d66b18126265e1af46aec52646f30207c2d81f29eddf269a0465ea","ssdeep":"3072:QG7hfV+2G5ZeYCmU2JIAE6T2A0tZbjrSWxDhbOZlvmzA0:QG7hfV+2G5ZexmUa8tZbjrSWxDhbOZli","tlshash":"3bb3811df652113f3c2780f9c29cededa116b1c0ee296be6be4261118ac67e35de3254","first_seen":"2026-05-08T14:19:43.680225Z","last_seen":"2026-07-13T01:57:32.772277Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx.trade/favicon/apple-touch-icon.png","fqdn":"jtx.trade","domain":"jtx.trade","tld":"trade"},"ip":{"addr":"104.26.10.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.786Z","timestamp":1783907819786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx.trade","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 13:32:46 GMT","end":"Wed, 23 Sep 2026 13:32:45 GMT"},"fingerprint":{"sha1":"C7:31:D4:33:84:1B:15:DD:E3:57:BE:FD:7F:FE:60:DF:79:75:94:58","sha256":"D6:24:26:8C:1A:56:44:D9:B3:27:9F:90:5F:FD:78:23:DC:80:CE:C9:FC:CA:31:81:8A:35:07:04:93:EA:99:38"}}},"request":{"raw":"GET /favicon/apple-touch-icon.png HTTP/1.1\r\nHost: jtx.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 \r\ndate: Mon, 13 Jul 2026 01:57:06 GMT\r\ncontent-type: text/plain\r\nlocation: https://jtx.com/favicon/apple-touch-icon.png\r\ncache-control: public, max-age=14400, must-revalidate\r\nrefresh: 0;url=https://jtx.com/favicon/apple-touch-icon.png\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::zdwjn-1783907826292-accac1bf688f\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ywapqv8SUUadnKM3M7EAJdmklRc9nAHwsglyw%2Bjf8dbKA472mfn5tQfTV1CcoEZLld%2FN%2F88EZ4HaCNB4nRfLf0ehnMxozfLFd73uD5cYI0NFuNdO8ultrZdAzQ%3D%3D\"}]}\r\ncf-ray: a1a4acc9bed056ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T16:18:41.402944Z","times_seen":17268108,"resource_available":true,"data":null}},"time_used":6535,"timings":{"blocked":-1,"dns":21,"connect":2,"send":0,"wait":126,"receive":0,"ssl":6385},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T01:56:58.913Z","timestamp":1783907818913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:44:48 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nage: 23144\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rA1ZlQCwgFOoG%2BgFRoQbhTb3HuUpvMVvXUdUKHgfH%2FG8zVk7goswyUTsM0ZmUPUePc%2FmVn80I2wPObpvnOquX8UdsYuVIkEM6eH9vgWrZEHbbUARvlTD6Cbt4Znvx5rhBks%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a4ac9ca9677131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121074,"size_decoded":23656,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (19817)","md5":"0cbee926b8d20c613b1775e80d579912","sha1":"f574b14f68c2d4d620fd564452c65daa8b93f057","sha256":"590398d6702b44747f67c2ea67e6f6d28fb4ecfb4f0b5c10646c8ab48bf34a39","sha512":"0bf65e747001ee76705aed29bb60d8021c841283b3a670cf57565abaf9cef4c965238d1f7658a0f53ce20a277bddfbd9a731d5bf197235c2c0d27354ccf195a0","ssdeep":"1536:ga5fpJzUldFP6Joebx/c64Jysq7vtcBwiJ/JZ8Z3paZ8Zn+PvegzZbZoPeIVI5Ia:g+RJE6meFq+a","tlshash":"b0c376b3e165c2174c2f9385747bfbe86427138aaf501ff596692f25e79ace230221d0","first_seen":"2026-05-08T14:19:43.69147Z","last_seen":"2026-07-13T01:57:32.773849Z","times_seen":10,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":48,"connect":17,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/css2.css","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.286Z","timestamp":1783907819286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\netag: W/\"69fb3ed6-1080\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 23144\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7MbXq7FUDxzTQiLfn3j2AG%2Bj2o4Jm5hM%2BfHZMb3uKKN4FPEdBZ1y8IpY148alKpaeY9MmydG79KrOROw%2FToR2dkMVQi4DhzLZUcHyFfISbL12Zb6pef3K5X7YP%2FZabbs4k%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a4ac9e89717131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4224,"size_decoded":1352,"mime_type":"text/css","magic":"ASCII text","md5":"eeaaf41d45080a2fbaf24e6b58cbe9d9","sha1":"f0ce5204f807ef8858278bbd627b684b13ef3925","sha256":"abde037427f2144f35963f9e6e6f1de0bc0674807ff9fcb36c3029d5007ed994","sha512":"cd96e3b837c0e9680803daf5384ba5dbef1bb196534eaee876c56f069736da071f43f88dc563f4cf619cca3e749d378b87df7376769f25df19e40a9e779cee9d","ssdeep":"96:jYgEayJc+ufYgEadNkO1ayJc+ufO1adNkOEayJc+ufOEadNkOXayJc+ufOXadNk3:MOaVOiaiDaD8a8lalGaGc","tlshash":"81915a80086aa504db932dc122ce7e32ee1db290644599346ffa1498fc9ad59a3b2b4d","first_seen":"2026-05-08T14:19:43.686311Z","last_seen":"2026-07-13T01:57:32.774567Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/secureproxy?s=%2Fipfs%2F0fO56ho4GgFY0kw4qT6tOAaa60c3d5384f36012e8858b4be40a311%3Ft%3D1783907819265","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.290Z","timestamp":1783907819290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2F0fO56ho4GgFY0kw4qT6tOAaa60c3d5384f36012e8858b4be40a311%3Ft%3D1783907819265 HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:57:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"8b826-gvX39bXh3mpWXbcA8G7+vOsz4Wo\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=bg1t6hvQ3gH3PdRwEzNRHQ.js\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/13/2026 01:56:59\r\ncdn-edgestorageid: 883\r\ncdn-requestid: cedd8cfe697b86f436bd91aa36929b20\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hGnaw3sOmAvJ9sBv32%2FUY5z%2BWcpel%2BpFt6CxN3gOk3as2%2FUZsIZL1GlM5ppUGCzjhHOmkjhQD3HBGGZtdI7csYMf6GYW0JUIfKrJWurN5r8ezUKSqClgekOhh6OiGLbu5Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a4ac9e99737131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":571430,"size_decoded":119794,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ed3582b1321d57e0bf2cd7acf5cf19a1","sha1":"82f5f7f5b5e1de6a565db700f06efebceb33e16a","sha256":"4ef0bfc870f79cabb973dcd03a53277f028f840c3a81d93bffa03fa5ceb10447","sha512":"5a889dce329654433bf2b133a9214970a74ed064d0259342c571c275db2e02718a7c755198d0cda9c0a10fa958dca944c7e74dfe647d8d12a2209eac9dc49774","ssdeep":"6144:4hIFMHTn8U1qFcHZVNYT1XveUtK3+9mpQttmI4qrBLOfXsl3toLAp:vFMzn8UIFTeUtG+9Zmaxx","tlshash":"95c4b8e38b0899f344c427b7046f546fefc8bf481f8b985b53c1ac9e52653ae49e8158","first_seen":"2026-07-13T01:57:32.775118Z","last_seen":"2026-07-13T01:57:32.775118Z","times_seen":1,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/hero-poster.jpg","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.302Z","timestamp":1783907819302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /hero-poster.jpg HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:02 GMT\r\netag: \"69fb3ed6-f4b5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 23144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4L8Nm%2B%2BPuV7MmqnkiggN7zKeAnA3rAKsQiTUBt%2FTx7hmNODSLbwvrFS%2F0vZkNVdkxAgzNFXrBnXqsuNM05sjNWFPOCRkw%2BPpWiL0jLCeAUwoa15xPIhh1IIoEq3xO2WJlO4%3D\"}]}\r\ncf-ray: a1a4ac9ea9767131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62645\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62645,"size_decoded":63586,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc62.28.100\", baseline, precision 8, 1280x720, components 3","md5":"8bfc5cb1da28e9a6b0006d9c74377afd","sha1":"c3d1431dfe415b29df40b6002add6146c5dfd93c","sha256":"f9a80d2722a334a1c6cf3c7039dd281cf3d18910a906e048b7e527bcfeaf6d99","sha512":"72069225754c9ce325fbf6a0f0b953fb8a8da6185aab19b6a87a6cb0068e1bf3560fb749feaf33fafdccf3403ae280518560d27001c14899a670bb28ed279d02","ssdeep":"1536:KcNqBMmWiNFh4y+Elz0RBdATsUlPsrD22k3QmuFTv:KsqBMmFN8y+Elz0RBdATsUlcDZAuFr","tlshash":"db5312393d75f6b2891fc4b0ba82881823bf9211d9d95a95f33a01b4e13f5483a056cb","first_seen":"2026-05-08T14:19:43.684172Z","last_seen":"2026-07-13T01:57:32.776178Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/secureproxy?s=%2Fjmpd%2F","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:57:01.173Z","timestamp":1783907821173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jtx-trading.pro/\r\ncontent-type: application/json\r\nContent-Length: 1463\r\nOrigin: https://jtx-trading.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1463,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBCgNIAzAACQDfAjIDKACvAisAAAECUQMAAO8nhn2XtsKCAc02e1Qfj_iyiouu8WYCAACHtawuptllyQ7b_W4lyS10JBuyv80k3QJg1yZPK2fGeu6GYqJ-xKoKV75uy5CuMw1LXFTYalluRVf960wkiDOkcLkk9jzCKDXTfb4ehYwsnF1RL12oUg6itOHoQRI48SBng8kwLeOJuWkn0LOvBrCrvbYZta57naMMASCzMteiYMU1qCq4yNimfLGHLYsO3rHww3RrKLw358ApZlGIUSPx6IroJS7YfgRTFAT1e-1XbpQ2aBA9fnczN8R2r1bTAbnRtQGmlWNWgeyIq3PomgEs-5FD1oFEjumdEyUF4OsOtnx2XpuC2zi6DxhPanX4Et3_HST2UzX5-wbBdfI7bWQSDvNUzvKQhKhP9pHinUsVY62UCqpFnBpsmxDdGKeB-AA3eEwJMf6S_Ap5e4lyujDM0xKkZx1ZYZP3l26jglVTBkCDTb4IHFPI5eEWb1Tvm7Lh3Gk1Gyi-RdPVsF6z1o-ZvKPM5DySkqDGGnMiCFO0F5DTJKvylz3fh-vA6GekxldHfsTWcyB_pOeUNLEESFS6N7Kbu0uMI_0vwCZXBElsDUS350Kfi5niE5DVEfWpGQ2tHklY1KHkpo4CuytKZfSWJmMXLQSb1Mkw4f6yl4_oAwda10pGym3k1KfSd4x-i5qICh-diVCcv8GzbpX0Zglh7VLLUKRMaNzM2Ne_-H_m8b9oZd2pvNfS7CUP-3dhGSJCjs-5J7SHftG0r3iwdyrqKL9xWpTbBRd661_FFLgNfhnDDl76IoTkjdW9_3dXqM4zFdBoGFcr_GzmxY-QB15skdgvLtDd8mfJX8yv120SW8kJ9pgV34n7zYL7ofDT3jUN295z0bdkF48fqbMHrK_U2qeb-mGyMDElpCkPpSqnyxXQ7rDRmgRCz6GzfQdwdbRbmatGaibAnQItJo0cTYKiNsmKYFccj5YOqROlY0flCPCWWcgffzsqUCiVuBi7XI5moKnyR-4OZSl6oxFFo-4qDu10dOTkOom_l23mZuIn4AIz2Z0KmJE8OaywvywaaY2O2bbvz9RaVYR--KLDIxeTDQmNgNceuw0CL2-OyvcFmA4Kfm-0CWuqJiqkR9cqDwCfNaafzd5IMQwSTE9ZUOpNdmIuuol4Slt6HLQ0HGwiJqZEr_wK4HeEW9crWkOLDrMs5dIse078CRA\",\"challenge\":\"eyJpZCI6IkI3dVhNdUlMY051aDBsbHJHVDB0NEEiLCJub25jZSI6NjIwLCJoYXNoIjoiMDAwZDI0YTI3YWFhNjgzNzQxZDRkODFhNjA3YzcwMmVhMTgxOTkxN2I5NDlhMjZiNzk1YjUyYWEzYjRkMDZlNyJ9\"}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:57:01 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1783907881331\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 07/13/2026 01:57:01\r\ncdn-edgestorageid: 1444\r\ncdn-requestid: 3e5f0d03f3059119f12ad59d46fced8b\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PzgMYaKJFcnzku6hqDRjrg7s0Wee%2F4O2htnaFC%2FNH2XDMR41neymbnEP1qOfBqO0%2Bihoth%2FgB4xwTADVJQA%2B%2BSjmQx7zBH1icW7sozMHpc0m%2BRVHcqtOjJHnpkQSUgprOUE%3D\"}]}\r\ncf-ray: a1a4acaa59a37131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":3431,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T16:18:41.402944Z","times_seen":17268108,"resource_available":true,"data":null}},"time_used":733,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jtx.com/favicon/apple-touch-icon.png","fqdn":"jtx.com","domain":"jtx.com","tld":"com"},"ip":{"addr":"172.67.72.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:57:06.331Z","timestamp":1783907826331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 17:32:59 GMT","end":"Sun, 16 Aug 2026 17:32:58 GMT"},"fingerprint":{"sha1":"91:8C:FA:16:50:B0:C6:78:CA:5D:63:8E:46:4D:D1:29:32:7D:C2:97","sha256":"F3:A4:1E:DD:23:07:5D:B1:8B:6E:20:C3:9A:81:DF:6F:47:E7:82:3A:4A:12:E4:87:C8:BD:98:14:E0:89:5B:02"}}},"request":{"raw":"GET /favicon/apple-touch-icon.png HTTP/1.1\r\nHost: jtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jtx-trading.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 01:57:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1502\r\ncf-ray: a1a4accb08df76ef-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-touch-icon.png\"\r\netag: \"0be41989de61115066192ac56a5a75ee\"\r\nlast-modified: Mon, 06 Jul 2026 20:03:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.intercomcdn.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; child-src blob: https://auth.privy.io https://privy.jtx.com https://privy.jtx.trade https://verify.walletconnect.com https://verify.walletconnect.org https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://intercom-sheets.com; frame-src 'self' blob: https://auth.privy.io https://privy.jtx.com https://privy.jtx.trade https://verify.walletconnect.com https://verify.walletconnect.org https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://intercom-sheets.com; worker-src 'self' blob:; manifest-src 'self'; script-src-attr 'none'; script-src 'self' 'sha256-UAu6GEAXIuXwxdvziPzXmkXeKJDXFxd/RJR9yhmrxhk=' 'sha256-DJUpOHrMTHlmFR944bw7YE7kC1pdjSSWFzxxyv87EHk=' 'unsafe-eval' https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com\r\npermissions-policy: camera=(), microphone=(), geolocation=(), midi=(), magnetometer=(self \"https://challenges.cloudflare.com\"), gyroscope=(self \"https://challenges.cloudflare.com\"), accelerometer=(self \"https://challenges.cloudflare.com\"), xr-spatial-tracking=(self \"https://challenges.cloudflare.com\"), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-matched-path: /favicon/apple-touch-icon.png\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::5kt7d-1783368212793-e6139cb5cd6d\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWSEg3XC42hJRuPn%2FcytotVDq3Vf81BgAVr29EBoWSWXOAolEHq1DqLrDJH1q18bp5oD0%2FYwDGdcc2vxHhEAE%2B5EepVXJfr9YUXkeeNCd0sh55ppQLwIK9U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":1502,"size_decoded":4227,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0be41989de61115066192ac56a5a75ee","sha1":"56bddfe221011ecfdb47a198ed6eb3626e1f6a5a","sha256":"e3426a299d0b9f5c1d7006f083ec1cef35d54e649ae384b7bb0d545b7811ba63","sha512":"8945ccd596f97a76bd9494b09f7b78474d62fd83b9eda916ae2337a684e0fa34a1363d442da0963f237847f57a1f53922642c633aaf5897e17c64370e74b4b69","ssdeep":"","tlshash":"d631c8ed285fe448e8e72dea16d08f509d9a42c8e7506015bec3e71ce51fdad6124a83","first_seen":"2026-07-10T08:56:15.472829Z","last_seen":"2026-07-13T01:57:32.776826Z","times_seen":6,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":23,"connect":12,"send":0,"wait":95,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jtx-trading.pro/Privy_Brandmark_White.svg","fqdn":"jtx-trading.pro","domain":"jtx-trading.pro","tld":"pro"},"ip":{"addr":"104.21.38.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jtx-trading.pro/","date":"2026-07-13T01:56:59.296Z","timestamp":1783907819296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtx-trading.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 22:31:43 GMT","end":"Tue, 06 Oct 2026 23:27:47 GMT"},"fingerprint":{"sha1":"64:87:15:63:1E:23:28:7C:19:16:64:0F:B2:25:46:7D:04:1B:C8:99","sha256":"9A:3F:BB:A3:B4:B7:40:29:82:63:30:08:BF:0F:2C:D7:4A:28:99:DC:95:0B:11:06:CB:D3:61:BF:7A:30:F3:DA"}}},"request":{"raw":"GET /Privy_Brandmark_White.svg HTTP/1.1\r\nHost: jtx-trading.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jtx-trading.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 01:56:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oa5%2FxrvjvZpMu4R%2BxA7%2BFCsx37bl2TaoMs3nEfFIY8uQV7Yb%2BNos6Ovnl9mPAZzpFCNIJhi5LFYEPDN5yee36nq8i%2FU5r6k4nSEq1D8UGzq4JGvUDHWzt2hNZr%2B5quSMRb0%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 06 May 2026 13:15:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 23144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fb3ed8-7bd\"\r\ncf-ray: a1a4ac9e99747131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1981,"size_decoded":1762,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"689bf019f21cdfe714604ba9d7c64b8f","sha1":"9899d2b8583532eb81a1587a8ed2aa12d092bd0a","sha256":"4eb85f407d6f80bb8b39b2fc9bb809836b7f1f1808073f2258359006c59cd660","sha512":"f6c01a6b703d13245f8ae617f68de520f4dd403cba2b518aff79cdf0be5b4b01861af98b8f71ad83069b50098aaf7c216b5959d09b12f6ce10aa1e91f169cdc2","ssdeep":"","tlshash":"9441f0de621455c4a9c4e2bef61f02ae323ba4e77b85884c93c0ae45b8c95664818ed1","first_seen":"2026-05-08T14:19:43.682095Z","last_seen":"2026-07-13T01:57:32.77747Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"jtx-trading.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}