{"report_id":"f3d7a61e-d09e-4ab2-8a71-9ec5310b5784","version":6,"status":"done","tags":[],"date":"2026-01-18T22:26:40Z","url":{"schema":"http","addr":"phoenixtrade.ltd","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":0,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"title":"phoenixtrade.ltd","dom":{"size":43044,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"745dd8410a82e27bfd3b680b08073f45","sha1":"4bd38a42ec5a7243e950fff16f473e093733874b","sha256":"c79d650e5ba64367a589fd9be52d9202c5a641904ecbb7fa94dc2386a7d29917","sha512":"b2a827717fef8398f0ce694bbc514ffb2473eb28a0ad7a0e2294a181849d287a28560a1230ac16c64061664d655329956cbccf77c1984bb2dde74a1b206d6e75","ssdeep":"768:4jr8FYTbfsTO+bDGBPKHs9TvfqaSQXOQqGMWYWf:4jr8FYTbfsTO+bDCPKHshqa/XOl6rf","tlshash":"421396176780462c9c5392a8f399e54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2026-01-13T20:30:56.180443Z","last_seen":"2026-01-18T22:26:47.227243Z","times_seen":15,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"phoenixtrade.ltd","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":0,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-22T22:26:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-18T22:26:17Z","timestamp":1768775177,"ip_dst":{"addr":"172.66.138.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":46158,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed Blockchain Domain (api .blockcypher .com in TLS SNI)","source":"{\"timestamp\":\"2026-01-18T22:26:17.703238+0000\",\"flow_id\":1831113639699372,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":46158,\"dest_ip\":\"172.66.138.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033877,\"rev\":1,\"signature\":\"ET INFO Observed Blockchain Domain (api .blockcypher .com in TLS SNI)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2021_09_02\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_09_02\"]}},\"tls\":{\"sni\":\"api.blockcypher.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":921,\"bytes_toclient\":3530,\"start\":\"2026-01-18T22:26:17.697260+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-18","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/63/10a/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"phoenixtrade.ltd","ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-05","domain_rank":0,"first_seen":"2026-01-18T22:26:42.624976Z","last_seen":"2026-01-18T22:26:42.624976Z","alert_count":80,"request_count":40,"received_data":1977122,"sent_data":19844,"comment":"","tags":null,"fingerprints":[{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":5,"received_data":161428,"sent_data":2671,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.getbutton.io","ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-01-14T12:32:13.570745Z","alert_count":0,"request_count":2,"received_data":885325,"sent_data":863,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"maps.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-01-11T22:48:26.286762Z","alert_count":1,"request_count":4,"received_data":752838,"sent_data":1826,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-01-12T05:35:05.787916Z","alert_count":0,"request_count":2,"received_data":81879,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-11T22:26:49.271833Z","alert_count":0,"request_count":3,"received_data":25254,"sent_data":1622,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-01-12T04:13:55.784834Z","alert_count":0,"request_count":3,"received_data":372509,"sent_data":1704,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":7954,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.125.249.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-01-14T14:03:18.676391Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-01-14T14:03:17.759022Z","alert_count":0,"request_count":3,"received_data":323866,"sent_data":1369,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"api.blockcypher.com","ip":{"addr":"172.66.138.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-26","domain_rank":603290,"first_seen":"2015-07-22T15:41:18Z","last_seen":"2025-12-31T07:11:20.50558Z","alert_count":0,"request_count":2,"received_data":46372,"sent_data":908,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"52.29.138.202","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-01-14T14:03:18.690879Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":605,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-01-14T14:03:17.795209Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-01-14T14:03:17.722934Z","alert_count":0,"request_count":1,"received_data":7668,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"197b885dfa834a843f2c2799563d46d8","sha1":"db504abff1b36c76eae245c85c74767fbba1f0ec","sha256":"9d0076e302c872f8d6b12053aa45f12525ca38bf49beb263364b9a9c2d18d166","sha512":"07bb105d7b158e8a2c77fdcbc187080d51ab3187cd5c922fb72866e1a8463a6344c3760e3a38ac5284f9d4e7c4df2d89bccc3710e5b0ba75b2c7203019c6a73d","ssdeep":"","tlshash":"4560000000000c0300000000033c0c00cc30030f00c000f03033000c0000c003000030","size":12,"data":"","first_seen":"2023-03-08T02:14:33Z","last_seen":"2026-08-04T06:17:20.582996Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/10a/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"003700f15c5eecbeb9a8f8e96344e3da","sha1":"9682c53ba9272e1a98bfd5ec4cad72c7518020b1","sha256":"3977322faa4deb0f4c48db5da42362ed2b3929e623eeff860815ef5b11a5d470","sha512":"880a26c23b5d7ede0f2dddb06b4f557affca11a20e612e53daee3bb31635ee5d0cb4d67e83e19127e74c9436461d20b57b385f2a5fb4415aae8fd41ceea75fd9","ssdeep":"3072:j1K+q7bffsGxtzSbR/HgsPB1IXMvBOh3fNYN7UqIkqANVDUa/IMqEXRqCR:j1K+q7bffsGxtzSbR/FPB1IXMvBOhvN0","tlshash":"9dc3b685719370b3a751b8e414e74102b67aa8a5f02dcc2cb5fe8df2aff185611b5b38","size":128072,"data":"","first_seen":"2026-01-13T18:53:27.183044Z","last_seen":"2026-07-25T17:01:23.311183Z","times_seen":19772,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-18","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/63/10a/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/spop.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"433d540de36dc2949b9b37b21854de88","sha1":"318e6d3de3b2e7636ef895b6cad86926758b736a","sha256":"2968b385a5b0d0b3f4587c15ff122e939c78d3036cf0d42d083f0d419a2ad27c","sha512":"f001a6608bb7b381272afa8860b5610f1ecb8ba5a71b7685b97fba17401b224e4eec40e676c0e4f2d192ef1daf1e03b2046484468bdcf35384a6a0bdc381ed6a","ssdeep":"96:ZEnTeGLsAsRDK2j7PsvsjPsZlOu8uR0zIbVVCEUEI:WnbslDK2HUveUZloe0EBDnI","tlshash":"f591521d97ac532642f622dd745a109af03c8936ea5b181fbcecc7f49ad1c1c6721e34","size":4364,"data":"","first_seen":"2023-03-12T20:22:28Z","last_seen":"2026-08-04T06:17:20.397558Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/maps.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"827cf8079699f7fd2de0e855851a67a7","sha1":"037406cef0046bead0c86b1c6bcdfe12db414bb4","sha256":"a667202d8e1f5b1097f5b3d60255616271d61a8fab3d95ac5fd1905390bc3016","sha512":"b24b25e188b7161b3f0f811e557bd503a49f58d171241fcf8fd271d0bde4129977b9a00ce717f9325723b5ff52b0794291924d0140783a863e64fa9ef4145f49","ssdeep":"96:Qkk8RnkRkLk6kLkOkgkzkBBvb513yGm7Xk4bik716tmRGb+t:Qkk8RkiwVwhXYBZ73yGmQ4bik7YQRft","tlshash":"bf125894fc73009782c6f1aa04ed53da29b451834386fa6b783d87bc4fe8b6d95147a8","size":9136,"data":"","first_seen":"2023-04-01T11:13:17Z","last_seen":"2026-08-04T06:17:20.537568Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyDl7p8SWg-5kLe7i-usdYCu5m3eVllMDTs","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74f0b31657fd5254e1aee63ca36dfa35","sha1":"c688748918a7eda5d6791b6ac46c9ae67baf2a27","sha256":"1d4ddc37a00a7273dad28d9b1c42301fd21a35775981cc845f2233f3dc579a43","sha512":"2e23f0adc905d30fca3f9a890b1b5b6b6c87f6bfba08ceecc8d7226f2ff6541ec3c6ef24a36b2fc38e76f6c8fb1bf0d5238e62a33ba753d5f3ae3538673aee7a","ssdeep":"6144:iAnHjgcm0O2bHONlh+1eWe7Jb0S1QsN5Gcydcn/2uN/as7tvAvEBcSyVB5flJcF4:9nHjg30O2bHONlh+1eWeRz1QszGcydc2","tlshash":"4f542b55b2a230668392e4e0607b0105f17e58a9f04cc9acb69dcef2eff69464577f38","size":305227,"data":"","first_seen":"2026-01-18T22:26:47.253298Z","last_seen":"2026-01-18T22:26:47.253298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-06T04:59:15.5352Z","times_seen":738820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/10a/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"94d100fe9c09a616457eab9aec50a91d","sha1":"661772825b727105fe0449d4339807c765bf7c11","sha256":"f76345fbf022b8c4e4af7555b624d86417b8022fc80f31bc89c4b5952dd60105","sha512":"226a18fcb9b2d1ab82ff0e62c00fadf6e94d1e2a80d401adf1d416eb299911a4f57918b30f79f85360300bce7de01bcc2be231907624cd1cfacd6096bca47a77","ssdeep":"6144:PhPsjgz5g/SZrjL/aSsBXepjYyod1570aVREZ4NgYIsGsRttjsz1w:PhPsjgz5g/SZrH/aJBXepjYyod1570a7","tlshash":"6564b57c71326f4e6832c853c266311ed0356edbf964c8bdfee65254eaa5944f0e0a38","size":316745,"data":"","first_seen":"2026-01-13T18:53:27.1726Z","last_seen":"2026-07-25T17:01:23.301622Z","times_seen":19770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/parallax.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"003eef7ce2f228cab98944247cca74ee","sha1":"95a85835e39083abc35d86e238bcb3107167e3c3","sha256":"229ecad00567b5500eac836fefa00d79f3d86270ae993d420540bb3a94901276","sha512":"dc49b5e11c5fb3b60b2e2505178d2fed078b16cb41e622d4452e557cc41da85f98a11d7159c58c69cdbe8041bfd46a95f81595a2e85ef7de1e863ccfe2290cd0","ssdeep":"96:Kzw7xb6yrO0H3xZmOfFfN9MDbInQ/3Stg6Td0ySI+f6b3DKBBMURSFVEmDJTQUhf:Kk1b6yb3/mm19VQitg6Tu2yyDSjCVQu","tlshash":"f3d133457175201343abf392542e0609a236703d3a07846d7fbc54efed76e19227bbb9","size":6660,"data":"","first_seen":"2023-03-11T10:24:00Z","last_seen":"2026-08-04T06:17:20.463808Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"28fe2a3635328df39e5302f63e3470c6","sha1":"8b76e8291b2d3cbfd5d498712a50e1ccc159e662","sha256":"7cabc3e26e6ad592b818513528490a711e7c89fd70ec6fb06449e9d304b2987e","sha512":"f257b9cb9242241fb5fb6d9d75663a7ad17b56704f5db48a36cd4a6ebb0b6d30bd3de5d6a0a2bab399fc809c1b24b3d95c62db68678c9424b6dba62716614468","ssdeep":"","tlshash":"87d08c0bb071114b0087f009d3cb08883134810b01390d28368c608a3fb3f8c034e6ac","size":195,"data":"","first_seen":"2023-05-11T15:28:23Z","last_seen":"2026-05-27T23:56:50.97194Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"fc42f5096cd5278c9e99ae841987b343","sha1":"309f12cb3f1ab3e28a3e087aa3fb7c5d8ea90f29","sha256":"b6448311483cacf0276fc2623e6a84120f4c413eff82ff4867d3bd6d319c3a54","sha512":"43544f6ed6975239d10a238302b5d8f47f5f6860863b46e1caef9115c57e3b9b7438bba970c003db3fcf1c2737d79ea4e6e844208fff6e6854c2195fe92fb01e","ssdeep":"","tlshash":"5060000000000cc300000000033f0c00cc30030f00c300f03033000f0000c003000030","size":14,"data":"","first_seen":"2023-03-08T02:14:33Z","last_seen":"2026-08-04T06:17:20.586089Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/jquery.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e72d21310a37cdb16b583e8c1da0098f","sha1":"ce2056141c589d3b823b1f585f858caa8f57105a","sha256":"e487e46b39f7c7f78934a48110f0026b70e98f7e9e34aa2ba25b3ef2403385b6","sha512":"376ab53d03d130fd434f21a953fcb00c18f25483326457bc6cb5baa56a57ff323ea6c62be90ac4c4bda31a61e7be36b779b25c3f6c1d7d8468ffd57860229ba0","ssdeep":"3072:fiW6e9xmwHU3dZtnMrwis3ZlPrB9SxRGebDUI:fiI9xE3dZtnMrwN3rPERTbDUI","tlshash":"34a385e973d63235864bf0b69d9fcd4df239595c23c98409a60cc4a6a830878977edec","size":104797,"data":"","first_seen":"2023-03-09T00:22:24Z","last_seen":"2026-08-04T06:17:20.460558Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/_/translate_http/_/js/k=translate_http.tr.no.cGhHRPJRFzA.O/am=AAQD/d=1/rs=AN8SPfqkRmVEnItNXlyEuKQq_GO32Xc8Xg/m=el_conf","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11d0c0547d7ffd469fa0babc018bda8","sha1":"c1f04d0eb5d411e9c873f5c21535b10b18c978a3","sha256":"05b6e8a819e89bffb09dcd656f745fb7d68247ac8ad17fbac6d5132f483ed410","sha512":"da6f523a7d19fcc728483219ce169be2816b6676ac6537975f72712ec548893de47e467428d334796ed787ab6fb83bc49cd212f56adea748350de76894adb89c","ssdeep":"1536:XNHiUZ8ZXu+e9fmgU1l4C0KGYbMfhyKucbR7ChiPwNWrA:XF+e9f7C0KGJehijA","tlshash":"6873b8ccb6a675618263f5b5513f000fb27b599af80c4cadb288d8e1adb4948413bf7d","size":79564,"data":"","first_seen":"2026-01-18T22:14:26.572086Z","last_seen":"2026-01-18T22:48:19.411275Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.cGhHRPJRFzA.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpMeXf13BAr6_Pkrwz1AQAwxrmieg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de06cf5ce297cd1fdbf6ae7b7fcd0438","sha1":"a50e2038d96581f41078cc440b34faaf50059f6f","sha256":"b41dbb84de4a0b2867a6f2ae3fec1ac94bdea4c8299788caba2c813de6839d43","sha512":"45b31fbc221ccd9dab1e5209ad33c1d8d11788035345f3f19312674610f84af7583bfc3bf967b402a6db8e979157244616c58ebe4415c778da7edcfb047fcada","ssdeep":"3072:cNOP/qRijmbFPW1ZPmdRaisuh+E7aCRVc+DTx1ySFJdu6IVquPUbyHyil3Y4NTyJ:2yJdQQinbXxxFmBCtC3Y4D3N13UP","tlshash":"6a74d9c9b26634539262f8a1d06f0087b93ead57b4484c6cb24decea5df084941b7f7b","size":370591,"data":"","first_seen":"2026-01-12T20:23:15.899742Z","last_seen":"2026-05-19T04:02:56.55463Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b50120b4395b8e757e4857c24421c50","sha1":"1dd7267d8437564b5f7efe19f553e33a3548d37d","sha256":"9f31455e280dfe62030657efe10be565b34716a3655d27869621e2c65e50c049","sha512":"1cf4fd1eb8187b36d47d10a0fa5a4b6fb61e2823598ca3f8ec7715f577c346b775807efd6c6fe5f8f42e3b06f621bcd985e681a5c544f0000f70af65ce87c10a","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnEI:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnEI","tlshash":"fd946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442019,"data":"","first_seen":"2025-07-22T21:56:55.389579Z","last_seen":"2026-02-13T05:13:50.572376Z","times_seen":3232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"41f541ce5bd1db0c18c68fe23835daf1","sha1":"ef721db8e2a54b06641c9cbba0cec313db664d16","sha256":"68fea54f386ad2d3f842070282df94b68b6b48f22c2687112ec3d45ddd63599e","sha512":"ccadc7663411b852c35bbf697c7454553fcec3f46ad5bfcbc928fd53dab0ca076e05d85ee26ffe2101b6cad833355348eae9fd321d4cdcf12c321ab619edb4ff","ssdeep":"","tlshash":"1e60003000c3c0000300c000003c0000c0000c0c00303c3c0030000f00000000000330","size":13,"data":"","first_seen":"2023-03-08T02:14:33Z","last_seen":"2026-08-04T06:17:20.567566Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-j6_tFwW2.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"913c9732892bae6b284120549bd60b9b","sha1":"ac51fdde75676e6562dd28805fff6e3f633bfd2a","sha256":"463ac9dbd1b49cc5badff900b78bd2a44c30df9fdae3ec892d52a342502720e6","sha512":"d7e92dd030a8603c12bc3ff550ee6a25c476f841d7d1749e7128635b0a0cf787f51e5a76d1725e7577c7546bc5cbbe84b212fb81b9326612e28b21557504463d","ssdeep":"3072:0apZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPVU3DuG4ZgQuQoau+:0DqU85ul+Exkz4ZgQuQ9urJgP35VYY8c","tlshash":"a6545ad47295b43443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283045,"data":"","first_seen":"2026-01-14T20:11:31.992579Z","last_seen":"2026-01-19T09:28:29.923348Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/glide.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"24302d1268fd497c2836f91638a2d910","sha1":"52ad69bb28a55654db128a5967a0943b28783494","sha256":"2db79ddabd11195baa94e0365e8d0430aa8626aee31af4c94392e8594440732b","sha512":"ce8a2f8ecc477e8817f7826f426c17958e614b580116a867794b21647eb65acd6e2884ce64b8ea3042bcd0f46eeb822c150921e9aeeb8591995fc6280d3a77e4","ssdeep":"384:+RyTuZf+ZoH9DbF03X6aIaJZyqQWxVeNr9bB3RXbE938sB8MRD8:se9DzQWx4NJbB3RXbE938Q8MRD8","tlshash":"b6c2a54cb381b0a9078370b9543f5a0ee1732d4898868588f5b9d8e59dbca8d117bffd","size":26364,"data":"","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.50927Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cfd4c4f7c8251e63e162515400d1631","sha1":"ad474ffd159c8a74866508fbb3d32c7685d3b96c","sha256":"08369858fc1a6016623001efa2514b74c13172cd942ee1ad17cc20522fb47b2b","sha512":"91116df6c91967141f656313abca0c487826f561ec3974a61f33fb3188cf60136d78a7a0d077029f9b9b7ef08bc96ff5264ba2ee4a51ce3333bcb2e04ac1daa6","ssdeep":"","tlshash":"01e0f13d3c34819457e210f4c0f7f22c3d1a30605048d96798aac8391cf0fcabe06584","size":418,"data":"","first_seen":"2026-01-18T22:26:47.28497Z","last_seen":"2026-01-18T22:26:47.28497Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#219","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-06T02:21:22.689793Z","times_seen":37106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a919b07d03064fed8034ef48165dc386","sha1":"12e0d022738272735c687ff3dc5495084f0d7e48","sha256":"d76272b68201433c2c5c77885d6dd5df237ef8f76c479310c54559f38a81606e","sha512":"1462582eb7862b5710be052aab6c851aff95da20f249111f1b727d178c753fab1921b13525af375b314f5eeef3722245d641db07fe4309c873febff601c3377e","ssdeep":"","tlshash":"8601fe8cdd06363a260b71f9313f901035b4805e9816e818b94ecaa05fb1d946c4bdee","size":715,"data":"","first_seen":"2026-01-18T22:26:47.286325Z","last_seen":"2026-01-18T22:26:47.286325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e21baf8a626608b8ebc6e326ef44b5c","sha1":"88920e2058a7a824d83c93ad742a34772b7a3ce5","sha256":"263a5b24275b9f29e1c7c80f84d629756a0a81881b257423a4e34987edfb5432","sha512":"0933fc2d289d08e98524a18c8423f308e579343493a36a4ee5868025c5dfd8b06a7d54a58f8dd4255e6ab4186beed946035de9fc444eec9ca536e33119c665f0","ssdeep":"","tlshash":"7c511080a0f61140a42335789f27af09947222abe7d6ccc4367d8a976fc7c72e1a358d","size":2782,"data":"","first_seen":"2026-01-18T22:26:47.287068Z","last_seen":"2026-01-18T22:26:47.287068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6023ef2593b1592f80eacfb01608c99","sha1":"768757a8fabb0934326fccc82a2fce78a62a5435","sha256":"774b42c7a644ac9ef69e46224afe1294d103e58237cfa5e716dcdcccaf2ebe77","sha512":"4d564fa7b891911d1fb1f81c5d7e5e0dba30c12fd7b430c81caf11211cab9bbb62b5ece38b1080c352e6447eb419dff1a4bc25d332d22a8779f5337e0faf092e","ssdeep":"","tlshash":"5a51dd3ceb608427c5f9e476b4c31b56f32853578411981fbd6e085c5f8e8a4e29a738","size":2924,"data":"","first_seen":"2024-12-22T05:06:35.452582Z","last_seen":"2026-02-11T20:06:02.332012Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/tab-accordion.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"72d643d674177416d21223ea9474f6da","sha1":"c874a831089bfa0e6f5bb5bc302a3fc8e00990c8","sha256":"e0e5c884616b9117f71d391e76363f34543795808987d81faf89e16528cfe79e","sha512":"41200058557385c9e0530abbe4430682befb494c027b58825c2913cdd20eef73b411db9598bce8e69a04a084090abd362622a5386af118465ffb680ba2de68fd","ssdeep":"96:2rumelehWSYGnfanXbLhnPPgyTx6huMIR62fkIkZ2sRmLGrk6z62fkIkZ2YTuNbA:2ru0WSYEaXb1PPgIxiu/5cfwswGrb7cj","tlshash":"1ba1ce7df31036f285fbb5bb042f3854a266eca28512c01d665e90b90df4d8a3d73b66","size":4750,"data":"","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.467114Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/imagesloaded.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa2998400b6d79ce431233d8a105c0a8","sha1":"ae94d0d0c2ff62bf8d488007973db2486da9b5e7","sha256":"b657f10fdb8a60995e43370e83e70bd6cb474382a9b54a7786d7018a5af4ed07","sha512":"4a8178d1b6c4934f9f366bc98b46048478a51aebececa4f7c100594af27c44c36453fa2c5ef8a79183c6772ae18bf5e5ca5f39241220a4095c147aaa1ba977ce","ssdeep":"96:Dxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7rWy:Vrycrr3rKvE9IjRxjGjgNhdTLo3reNW9","tlshash":"91b112cd77a67535229af0b3a21f020f727a406e6918815d7969ecf65cfcd092633bb0","size":5490,"data":"","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.436905Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/contact-form/contact-form.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"688e4b70668fda7570f687694d584ed0","sha1":"81354c821f4e03e918d160ba791a34673ecab9de","sha256":"179edb995606be05c67a56148526183548318aa4a80b50f08b10e2bc6d07a92a","sha512":"c933a667a342829e1dcf277314dfb46b6a48ec9bfba8dbf1bf293f77174538076a5fa0eea9a52573296ae222c69f7077ebaf8c040861af6d248abe91609ae449","ssdeep":"","tlshash":"c36121457ca7409124b3e07a1f9f6601f62850774188d6203e0d99e05fe8c9de7bebca","size":3456,"data":"","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.415857Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/magnific-popup.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac80f1384f7e7c0f1f0c93f4722e973a","sha1":"38fb358e49ef9eb83df2695ac4c31809910e7bfe","sha256":"9770048ee1a053b01b685ca75a3d1061d98c3dcea0c8561f737171ff209d37e9","sha512":"f96f04e0d28dd83c0f798569e91e2dd0ad673af77974a53b48e9c50f24ad0f94a3218a2cbf8f9623641a5c9a53f6810187427b73d18ef6ebb462f3cc01dbc4a3","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"81921894f2b2b21383a735b8686f700939729952ed06c855a55d98d87efcec89037f3c","size":20087,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-08-04T17:55:28.132982Z","times_seen":1172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/main.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ecbb614eaf2f9340c5b18bbffcdfedd","sha1":"8c0f974ada910bda8d6fb72beec016146fd68f27","sha256":"5d7532a21021da6e9eec185471971c16dabdf30feaf5157c67095a03272ddaf7","sha512":"1cc7fab7a851897d550f74557666863323e6d26d4e2e43740c38dddb85468110f242b50b55f473e2456988946bf51d587bcbc322885a0a3fd0d4b242632810e4","ssdeep":"768:pMEVF3sRi6IEWsuj/X0cKNCQJn7wUN40yZ7atykOY+JPLVg7BhJMBL4d3dvZpTnD:pbuq8vynOTbtqJe","tlshash":"c453750979f3116260bbb0ba0f5f5008b6718417415ace107e5daae45fe0938a7beff9","size":61388,"data":"","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.548446Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/progress.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8812974e8e2841f6a7eee2a7264cf4e","sha1":"487a752cb1a18609e9a3044b860236a3d5c9bb24","sha256":"28c2954a84d4f705c7b12fe1b578410bececc08230d4fdd9bdd8bdb9fb101b44","sha512":"48de83d64beeab20eac27799d09bd56eca4da657bf2ca641b7e34a811d7ce535029766037c2e68e8d699f5274292aa92721436dfc2183bea18ff44fc6df17023","ssdeep":"384:41RjOycDiwXQCaM7MUY71IARcfw3fwUtlRfFLfcCjBgCIEEzD8D:OFm3XQC/LYaARcTUtlRfFLfcCjBgCIEP","tlshash":"3a42300b77e22511a59b70b65e0f1144b330a56f121b891c7e1c95e09fb4a398b7eff8","size":12948,"data":"","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.34442Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fb417d156519176b05410d65b27e0e06","sha1":"6e99d61a17654ca85bbd940108bddea93b283f5d","sha256":"c4769d1847e5f79a5d38f336b5f6cf94e9ee526b32417ec989b94fa366848c3b","sha512":"19ac2005dc0febd5d09ead6752e8bc84903a3a6df683c9dceba6521efda50245c181debeff4cea4a87ed7d46d174c114381c5938ccff60d51a3f3c72fe567311","ssdeep":"","tlshash":"115151a2605ca01b4503c5d0f8a23eeef4de0058c37169d07e1c29efdadac7704a716d","size":3011,"data":"","first_seen":"2025-12-11T22:16:04.368455Z","last_seen":"2026-02-02T19:35:57.84792Z","times_seen":2384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T22:26:15.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=mkd1ndk11rtued6nn6sn4kplf5; path=/; domain=phoenixtrade.ltd; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50880,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2223)","md5":"bb53d9e2fc04bfe747184557311f29dd","sha1":"2d0b3d7a248379c308c49ea98bf9b0a6f6996486","sha256":"97bbabd5eaa9992a4def6f4a9c6e9923d1d96fc17f63100c68c1e09edcf528e2","sha512":"8e518904de36e8b9b51e23e89acde7800f51a4e80e1196a9325763cad8f9d4fe5c2f1ce7d9f790fbc38e9d46fbb82f7d1a5639952179b0d31311057b9fa14825","ssdeep":"768:o+KbyeWiUN+IQ23BOHfp59BDTpwcpZzs7nv2AbR70Xd50B:o+KbyHj+VqBOvpZzsD2AbR7+I","tlshash":"7633f526a8f22237419341e1b6626f0fbfa1d107d6565e047abc0b8c4fd6ca5ce3768d","first_seen":"2026-01-18T22:26:47.228647Z","last_seen":"2026-01-18T22:26:47.228647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":141,"dns":88,"connect":22,"send":0,"wait":913,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/css/contact-form.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/css/contact-form.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:12 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6389,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f0309af6b5ae47ea385a687f1270db95","sha1":"1b011490f387af910a061a6cccda024a4f6b0851","sha256":"137f690d4c962206d46b64c6fa415234b5a26a2e2f464da07bbb20eaa0cb2de7","sha512":"9722267e4a68fcd9c2d3954eb5f3f1adce6bb12ce0db47fb56489d5319032dc5c1420ee270e32df6af467528df80008f08055fc82117fd08cc2aa306b11ec147","ssdeep":"192:th8jL824iL7JQ5iWlr4WLlZraHbvE6QJun:thgLHJQ5iWlr4WLlZrwbvzQi","tlshash":"4dd1c09e6c633c4f722bc9540a99ff83a2571087914bd861b984b4484f5dfc09ebef88","first_seen":"2023-08-14T18:27:34Z","last_seen":"2026-08-04T06:17:20.378045Z","times_seen":48,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/image-5.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/image-5.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 67516\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":67516,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x500, components 3","md5":"66414cbd42d800873ea8afe6e391c7f4","sha1":"d81f2d0b47136319e3d785c6d8d9c5fca44b679e","sha256":"2f8f6e2e1787938a68bc759398c74f4af5f7e1d1dc8982881b9ec508b81f5fa8","sha512":"46148b56912710e2c73e8648e907f05d417d135c138134af2c9c7ef9a4d8a6f46db71648762a33dbfb484e3530f3881e9302b343f3e70ada3234aa71114a8260","ssdeep":"1536:v2FN/lM8Ho5ocFN8lQz+CGdO8Bt369pxf/reQnBJ2aMq:u5aFeCz+CJANgxnBdp","tlshash":"ba6302a511460812ec30a73360c674b67ee9f98c1cc88565fec21a70abb127599febe5","first_seen":"2023-10-22T17:17:33Z","last_seen":"2026-08-04T06:17:20.440986Z","times_seen":88,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":293,"dns":0,"connect":0,"send":0,"wait":27,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/box-3.png?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/box-3.png?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 588792\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":588792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 282, 8-bit/color RGBA, non-interlaced","md5":"4b5383f49266d188c8be75a2095a376f","sha1":"812802eac48da26832f8b3754e9692521e19cea6","sha256":"9d33877bc90dc771f598dbafb388bac6c47bff22dda60ff535093def5ee1040d","sha512":"c40e7d38c679f7b489e21278fb877a39c89cb5eb526657425837536fa0ac460d7ff73e6299249b02f550876bbabdec42f4b790c516903b25850f114ebdaff3cf","ssdeep":"12288:lJkN5qkMhKuyE6I5pyMmXiSo2MQN3kE9r1GjOks3J/Rp1K/j:DC5qXhzR75AMmdo2VNXr13X35d6","tlshash":"8cc423319774c5e8f0a894b69f558c56d1e5a87bc335d80a38f3aac9924082ecf25dfc","first_seen":"2026-01-18T22:26:47.233252Z","last_seen":"2026-08-04T06:17:20.345231Z","times_seen":3,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":51,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/exch4.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/exch4.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4009\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:14 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 227x142, components 3","md5":"d03434a5f6e44edc5742238e4edefc2a","sha1":"65180309c36d0c7802dcf11c402d0481aead6da5","sha256":"d2dd93704187507b8d7c286553f92cb4cac23fec2703961cd655e0e5dc43f242","sha512":"db9575b94279abc43f32063ef73dc5f6dd2a8b134185aa7001deeebaed1452ac240232c4a22961797e66100a4f84dea3f0fd1aac54c6d953b6c30a60fcef44c1","ssdeep":"","tlshash":"70813a3edf31ac86e5d72375264e3250b24c9906c9dfc94f11aaaf9030eb5457d821ae","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.517286Z","times_seen":37,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 07:38:24 GMT\r\nexpires: Sun, 17 Jan 2027 07:38:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 139673\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-06T04:48:09.921739Z","times_seen":546712,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 07:38:24 GMT\r\nexpires: Sun, 17 Jan 2027 07:38:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 139673\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-06T04:48:09.921739Z","times_seen":546712,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/c53cda37e456767c3aa88f017a1ac5fe3f3c58f0.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.125.249.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/c53cda37e456767c3aa88f017a1ac5fe3f3c58f0.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":77,"dns":1,"connect":23,"send":0,"wait":25,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/logo.png?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/logo.png?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 37800\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":37800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 374 x 103, 8-bit/color RGBA, non-interlaced","md5":"db484b0b731453e927eca5df1e3efd31","sha1":"547e06d3d21d49274a66f5aed0310dcd2b753599","sha256":"a3ec8859931bbd1704a0ec8f453ab33d9f183968570573c671a1030956a343c3","sha512":"64c18f108ec2b9c74fa6c9438466a3dee0e6d1542eac27ff5cc738de96920c76502799057cff0b605093a2593711299a381919e5604ca20e063b6f2a554dc63f","ssdeep":"768:+wwm+TNdbLRgQRP8/D2oWAFqWtwW8y9WvHOJX3nn197OYZeGffgpL:nsPR6/DcUvWvHMHPJ3M","tlshash":"d503e1f1a9ceef1af8a3c5fca8c479ea52d3c966c2375d090b27101ec144f229f81455","first_seen":"2026-01-18T22:26:47.237775Z","last_seen":"2026-01-18T22:26:47.237775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":296,"dns":0,"connect":0,"send":0,"wait":21,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/magnific-popup.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/magnific-popup.min.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20087,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with no line terminators","md5":"ac80f1384f7e7c0f1f0c93f4722e973a","sha1":"38fb358e49ef9eb83df2695ac4c31809910e7bfe","sha256":"9770048ee1a053b01b685ca75a3d1061d98c3dcea0c8561f737171ff209d37e9","sha512":"f96f04e0d28dd83c0f798569e91e2dd0ad673af77974a53b48e9c50f24ad0f94a3218a2cbf8f9623641a5c9a53f6810187427b73d18ef6ebb462f3cc01dbc4a3","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"81921894f2b2b21383a735b8686f700939729952ed06c855a55d98d87efcec89037f3c","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-08-04T17:55:28.132982Z","times_seen":1172,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:57:34 GMT","end":"Sat, 21 Mar 2026 00:57:21 GMT"},"fingerprint":{"sha1":"2F:33:3A:58:2C:0D:D2:E0:A3:35:99:D0:60:FD:56:1D:AD:88:F5:4C","sha256":"CD:EE:0C:2B:45:7D:D2:FC:B5:19:9F:5E:16:DD:EE:8D:7C:CA:97:E5:BF:F1:C7:F1:A3:3C:55:3B:9D:BF:47:94"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mp4NE%2FqWrD0hinXYqwRVUsX01QvR4Y4YnQpbDVYJqmWfKPWBzy27EpHfOS0H14A1Cs1km2Oy6R%2B05zKUavyEQZMwZHQo%2FY5qBJO%2FG0l6XR0%3D\"}]}\r\ncf-ray: 9c0183592b43b4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T05:01:15.330506Z","times_seen":17737366,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":73,"dns":43,"connect":8,"send":0,"wait":60,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/hd-4.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/hd-4.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109633\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:14 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109633,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"29075fce7d5ea12e63f2f8e62321c790","sha1":"35a2874a65e9d4221b52c2a89a09e76833d9a317","sha256":"f90c31ece3bd8e6d82910904cd9b5733910a6add0c749de091c93c4b297d59c5","sha512":"080f7ca016eda7e9705b2656c2ef82c3250289d02729ef3ccd4ad0d93626ccf96b00bf92442e862742c90e32faf19c6c071d2458db6b0257bf2f787304967c0f","ssdeep":"3072:TWK/C6E3Sr31K61dJNs5m80vlIuAOwZ7rH+9Hn:beMkmdrs6v2HOwTqH","tlshash":"4ab31216e3ad9067d7bd893dd30f06246b1f07f18b318fcb6a1948a220c5b59edd2e61","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.54498Z","times_seen":15,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6967a357-7b0\"\r\nexpires: Wed, 14 Jan 2026 14:14:45 GMT\r\nlast-modified: Wed, 14 Jan 2026 14:08:23 GMT\r\nx-77-nzt: EwwBuUwJCgH3OwAAAAwBuUwKCQH3AAAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: e2f7542063cb328c095e6d69c4b15132\r\nx-77-cache: HIT\r\nx-77-age: 59\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c1653ce2035ec7b8ed50655586d5dd5a","sha1":"58d78f2e6489479553555e6cdec1e84ec8305cff","sha256":"d43a93dd12b4bb41a330689ca54940258cc1d5fffec88db3e2713d209790061b","sha512":"2524273eff17d59a7fb4defee3a0ef863e8761661a0cb0ec283fae83e6fe4ea037bbce91fd3c6285495d4862fa337692ce821d410fc363bd33767520c2ba7ca7","ssdeep":"","tlshash":"0f412693c0f80e531b9c512bb8948a114d50c3c7e8c93d1d366d8a6f2f4ceb910e6b6d","first_seen":"2026-01-14T20:11:31.991195Z","last_seen":"2026-01-19T09:28:29.87515Z","times_seen":72,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":33,"dns":1,"connect":7,"send":0,"wait":7,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.blockcypher.com/v1/btc/main/txs","fqdn":"api.blockcypher.com","domain":"blockcypher.com","tld":"com"},"ip":{"addr":"172.66.138.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:22.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockcypher.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 01:35:07 GMT","end":"Tue, 24 Feb 2026 02:34:45 GMT"},"fingerprint":{"sha1":"60:51:AA:1C:E7:28:DC:3A:D0:2A:70:B6:23:82:13:4D:0A:CB:67:AC","sha256":"6F:23:C9:8D:CC:02:4F:90:79:7D:29:9B:A4:E2:7A:8B:17:F6:A3:3E:07:A2:2E:B3:F8:27:BF:8E:66:66:62:F1"}}},"request":{"raw":"GET /v1/btc/main/txs HTTP/1.1\r\nHost: api.blockcypher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:22 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\nx-ratelimit-remaining: 1\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c01837889d0c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22097,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5721a4f3bd83d5a978d1e45ca694661a","sha1":"7c4c405d6c5d86adf067e9a1d77d097fe2fa8aa3","sha256":"00f766c4b4f920e373ac2e4e9d81554670cb77ccacd44b5b574c65d36b880eef","sha512":"6f3b7acfad16ca6bf02640e6d2a9f8a447b91a1c9581ef681a0bcd8999c2f4c806d13e42d47046a1a750f243d352a21e11cbbdaf08d3325ae772015a49565d89","ssdeep":"384:85wyqVHm+jUb3JCQmPz+atXfBR6Eowk7SPIGhzxUVPF:Swyhb3YQ4XfBp9ESAUUVPF","tlshash":"e5a27459d83cace36445217a883882466351e3834c99be8e33dd81cc0fadb9f9e3566d","first_seen":"2026-01-18T22:26:47.241387Z","last_seen":"2026-01-18T22:26:47.241387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/css/media-box.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/css/media-box.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8d3bdc73f6432ef0fcc06979187e04f7","sha1":"c67fa176a2cd98b3f7cb6248d4a73cd2c760c4cd","sha256":"fdcb1d0cf4c531dee5075284bddbf46b0fb6cde3db7c99a1b305b7689652dd21","sha512":"89169baf3548480d01354674c99027a3780269d81aa45126310763e42765b9fe5d8b20e2c80bcbb9064b88732514684cd06682e64ab3470a67e8aeae93d568a7","ssdeep":"","tlshash":"fd71ca556e570850e05fc9940bbfa361e2698487a64fc93d3b40f3558f817a5c19ff84","first_seen":"2023-07-22T14:33:13Z","last_seen":"2026-08-04T06:17:20.504451Z","times_seen":80,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/exch2.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/exch2.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3453\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:14 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3453,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 227x142, components 3","md5":"ab845021224b2057c2cfbb96bb03a004","sha1":"cc587d4dfb33130feba8d7d2732d5432a6fa710e","sha256":"6332fa5ad59a799c546374b1d0fbaad033e2800ed83083354c6ce3cb84d87661","sha512":"7c77851a877807a359114152af9ed8199f00b59bfd0e3a9252ae4dcf80d56fb864b4a40928a51a062c7562ec2e2be53253bff387aaf9074053d7e5141cb102f0","ssdeep":"","tlshash":"f4611a4ece9aae00c8d6837a394772331b116e8620ff8a7f3c965d3082e954497995f1","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.470599Z","times_seen":38,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":366,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-j6_tFwW2.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-j6_tFwW2.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6967a357-451a5\"\r\nexpires: Thu, 14 Jan 2027 14:09:50 GMT\r\nlast-modified: Wed, 14 Jan 2026 14:08:23 GMT\r\nx-77-nzt: EwwBuUwJCgH3T7oFAAwBuUwKCQH3DAAAAAwBJRPCLgG3+P///w\r\nx-77-nzt-ray: e2f7542063cb328c095e6d696b762734\r\nx-77-cache: HIT\r\nx-77-age: 375375\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"913c9732892bae6b284120549bd60b9b","sha1":"ac51fdde75676e6562dd28805fff6e3f633bfd2a","sha256":"463ac9dbd1b49cc5badff900b78bd2a44c30df9fdae3ec892d52a342502720e6","sha512":"d7e92dd030a8603c12bc3ff550ee6a25c476f841d7d1749e7128635b0a0cf787f51e5a76d1725e7577c7546bc5cbbe84b212fb81b9326612e28b21557504463d","ssdeep":"3072:0apZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPVU3DuG4ZgQuQoau+:0DqU85ul+Exkz4ZgQuQ9urJgP35VYY8c","tlshash":"a6545ad47295b43443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-01-14T20:11:31.992579Z","last_seen":"2026-01-19T09:28:29.923348Z","times_seen":72,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/css/content-box.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/css/content-box.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:12 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11277,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7d405f010695872a364c5032ba0e5268","sha1":"501f0dbb577fe2f3c4d00f80f8e489b8d994d85b","sha256":"d33264dff484d4d28779295ecd1433d24c3d7f2cafc4a3a6ee7d20976ebf3743","sha512":"96507fa8c0053421279dca620ce31db94cdbe26108bf29554daa3754470f84bc9746f9a09e7704faf81fe2bcc147022856542f85601b1ac55254c700b9bcbe57","ssdeep":"192:zzlkV5boh+XNG9/jMpVNO1Vw4tJMCFIuXLCqn6Xq79p0Z2eKerU+su+b7CouqRQ3:z5kV5EhKNGtjsVNO1VwCJ1FIuX+qn66M","tlshash":"2032ff9a1e6388d0910fdc698aa7f28be14871f3564fc872f941fd588f813a443a6f4c","first_seen":"2023-07-22T14:33:13Z","last_seen":"2026-08-04T06:17:20.484621Z","times_seen":84,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/tab-accordion.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/tab-accordion.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4750,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1737)","md5":"72d643d674177416d21223ea9474f6da","sha1":"c874a831089bfa0e6f5bb5bc302a3fc8e00990c8","sha256":"e0e5c884616b9117f71d391e76363f34543795808987d81faf89e16528cfe79e","sha512":"41200058557385c9e0530abbe4430682befb494c027b58825c2913cdd20eef73b411db9598bce8e69a04a084090abd362622a5386af118465ffb680ba2de68fd","ssdeep":"96:2rumelehWSYGnfanXbLhnPPgyTx6huMIR62fkIkZ2sRmLGrk6z62fkIkZ2YTuNbA:2ru0WSYEaXb1PPgIxiu/5cfwswGrb7cj","tlshash":"1ba1ce7df31036f285fbb5bb042f3854a266eca28512c01d665e90b90df4d8a3d73b66","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.467114Z","times_seen":114,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://phoenixtrade.ltd\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=10\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-08-06T04:56:26.703964Z","times_seen":429710,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T05:01:15.330506Z","times_seen":17737366,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 18 Jan 2026 22:26:16 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79564,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2082)","md5":"b11d0c0547d7ffd469fa0babc018bda8","sha1":"c1f04d0eb5d411e9c873f5c21535b10b18c978a3","sha256":"05b6e8a819e89bffb09dcd656f745fb7d68247ac8ad17fbac6d5132f483ed410","sha512":"da6f523a7d19fcc728483219ce169be2816b6676ac6537975f72712ec548893de47e467428d334796ed787ab6fb83bc49cd212f56adea748350de76894adb89c","ssdeep":"1536:XNHiUZ8ZXu+e9fmgU1l4C0KGYbMfhyKucbR7ChiPwNWrA:XF+e9f7C0KGJehijA","tlshash":"6873b8ccb6a675618263f5b5513f000fb27b599af80c4cadb288d8e1adb4948413bf7d","first_seen":"2026-01-18T22:14:26.572086Z","last_seen":"2026-01-18T22:48:19.411275Z","times_seen":5,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":232,"dns":29,"connect":21,"send":0,"wait":43,"receive":0,"ssl":207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/exch1.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/exch1.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5690\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:14 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5690,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 227x142, components 3","md5":"02ae9b67a32b8937bcf6d1ab2ff331fd","sha1":"51203bd32a49d1a8a48a1b128a181724fc44456b","sha256":"cfd7d7cb36261fdf32baae8d267d6241712d238adc1a7a3df8554d4393e6cf56","sha512":"334d6043a7c9e302cb399323d72e2d6a610c706b694c82ed850ef64202638db0dc2b10863a517d035a5df3721f31ac35070f3e696d62b0099ea525470795b1ce","ssdeep":"96:qyXPhVWo78l41K7B45P7FrGvKY6YlSQWsrXE8Zf2Gt7QKFSfaDWWFn9Sp4w:qGpS41UBihGvKHY97BZ71iAS4w","tlshash":"ddc18e2bc349d4c6f85a0a3d47d80b5b6b5661792072e20e3582b939c7db39f8c139e2","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.40851Z","times_seen":38,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":369,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.blockcypher.com/v1/btc/main/txs","fqdn":"api.blockcypher.com","domain":"blockcypher.com","tld":"com"},"ip":{"addr":"172.66.138.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockcypher.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 01:35:07 GMT","end":"Tue, 24 Feb 2026 02:34:45 GMT"},"fingerprint":{"sha1":"60:51:AA:1C:E7:28:DC:3A:D0:2A:70:B6:23:82:13:4D:0A:CB:67:AC","sha256":"6F:23:C9:8D:CC:02:4F:90:79:7D:29:9B:A4:E2:7A:8B:17:F6:A3:3E:07:A2:2E:B3:F8:27:BF:8E:66:66:62:F1"}}},"request":{"raw":"GET /v1/btc/main/txs HTTP/1.1\r\nHost: api.blockcypher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:18 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\nx-ratelimit-remaining: 1\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c01835ccf8ec759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23487,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"19543d291659b137531b43dab393f6b8","sha1":"d239196092366cdf4f428ca69e92c4b90f847191","sha256":"b1d9c65b21c242dc164b573a472031c24ee037792f386c1e108b364228e67696","sha512":"9b8d061fd1d4dde31d86149b6f00e63159345c05f923ad92fb1c1f2359bf3e4615a9f7af1e288239f44cd19ea31cdf455869144ba977712a568512d6ba396a0b","ssdeep":"192:IYmD9CiQiHBWdOOsHjnSWWo/m5DF6bs1Wn3DvMfw9LAVFAgAfEhLo4CWPbQAbLC8:tmUVPWHjlWztQQWMfwJ6dbVjaBrxOhx","tlshash":"f6b2a669cc3c9cd36485227b882886566352e3834c69be4e33dc81dc0fade5f9e3596d","first_seen":"2026-01-18T22:26:47.249178Z","last_seen":"2026-01-18T22:26:47.249178Z","times_seen":1,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":54,"dns":32,"connect":1,"send":0,"wait":645,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/css/bootstrap-grid.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/css/bootstrap-grid.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:12 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":37644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1fbbbd329a05e2419c104d9c247d00f0","sha1":"3a9fc96570cb0fafcb58b5382506d9faebb5f598","sha256":"633f6ec5de5ef256201ff4d78b87ede4170dfd60d6550e90e776b61285189b8a","sha512":"a7ec0f8a2c0ba603a64964395d9eb9cf587e91ff27d1236275f7c15b609d77f779b87466caa1687d20892784ac0d28412b5512ee6ef75176315372c1abb9f280","ssdeep":"768:wLqQjYqzRTj1jT/DDtyio0wCk5bqdLNiC8Boio7wCL5b3dLO5RNsioLwC35bfdLJ:w8kd","tlshash":"c2f20526f8b1040d6465922c26d977bd79bcd04bd769fee2b9d623244f8a3c2cc920dd","first_seen":"2023-04-19T02:55:45Z","last_seen":"2026-08-04T06:17:20.49754Z","times_seen":110,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":34,"dns":1,"connect":20,"send":0,"wait":26,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/sop.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /sop.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7086,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, Unicode text, UTF-8 text","md5":"8e72f1a6d7a0d8fb112a948f62462dd3","sha1":"0147311045330ed0b0db932d40aae85c2a248dc7","sha256":"0107c20f70e4e9ed069864ea267f9d7e7c7bafa2a9eaa3066f86f35ceb9f5e1c","sha512":"57d2a77293d5ca2ebc746923538c24b2c768b8478c5fb9e8f843a6575569b4f71f6b8a81004d014c7a5c09e44fd07c184f000c4fee32348fd6d4c8a8b845c061","ssdeep":"192:MGsKnyaedh/+sKMGOHxY4G3LZB1yJQGxZjeXIV0IV4C76C70b/eumIInFSFKQ/Er:UeH78J/fM/FmPnFSFY","tlshash":"bbe1fffb0ed314846226464aa3cf5e687398f243748bece976cd534e8f04dd828d5617","first_seen":"2023-07-04T00:16:12Z","last_seen":"2026-08-04T06:17:20.525237Z","times_seen":137,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/sign-dark.png","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/sign-dark.png HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 1307\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 79, 4-bit colormap, non-interlaced","md5":"2390e55790e861517edfe3f12fad6fdc","sha1":"676b592d809661deafac38e6b53441e0bb9575d6","sha256":"f61152107a9542bce5bd0f651cfc6ffa06c3995dbfd84180d4527c6726dd0dcb","sha512":"3ae6f933ede1c508d5aef26e4054de980075a744aa027ab9d95ca29a57e0267f39b9aec58e8477e67cf41faaf932d80727cee671fe51ffede4cb8acb7b4f32ed","ssdeep":"","tlshash":"6921f8a774934900952efd36c74e8873ac78a1b184b3442a6c4185a639c5ab3b4b0632","first_seen":"2023-11-10T13:43:16Z","last_seen":"2026-08-04T06:17:20.541433Z","times_seen":50,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":358,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/parallax.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/parallax.min.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6660,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2730)","md5":"003eef7ce2f228cab98944247cca74ee","sha1":"95a85835e39083abc35d86e238bcb3107167e3c3","sha256":"229ecad00567b5500eac836fefa00d79f3d86270ae993d420540bb3a94901276","sha512":"dc49b5e11c5fb3b60b2e2505178d2fed078b16cb41e622d4452e557cc41da85f98a11d7159c58c69cdbe8041bfd46a95f81595a2e85ef7de1e863ccfe2290cd0","ssdeep":"96:Kzw7xb6yrO0H3xZmOfFfN9MDbInQ/3Stg6Td0ySI+f6b3DKBBMURSFVEmDJTQUhf:Kk1b6yb3/mm19VQitg6Tu2yyDSjCVQu","tlshash":"f3d133457175201343abf392542e0609a236703d3a07846d7fbc54efed76e19227bbb9","first_seen":"2023-03-11T10:24:00Z","last_seen":"2026-08-04T06:17:20.463808Z","times_seen":100,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyDl7p8SWg-5kLe7i-usdYCu5m3eVllMDTs","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /maps/api/js?key=AIzaSyDl7p8SWg-5kLe7i-usdYCu5m3eVllMDTs HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\ntiming-allow-origin: *\r\netag: cd128529\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sun, 18 Jan 2026 22:26:16 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 101443\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=28\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":305227,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11722)","md5":"74f0b31657fd5254e1aee63ca36dfa35","sha1":"c688748918a7eda5d6791b6ac46c9ae67baf2a27","sha256":"1d4ddc37a00a7273dad28d9b1c42301fd21a35775981cc845f2233f3dc579a43","sha512":"2e23f0adc905d30fca3f9a890b1b5b6b6c87f6bfba08ceecc8d7226f2ff6541ec3c6ef24a36b2fc38e76f6c8fb1bf0d5238e62a33ba753d5f3ae3538673aee7a","ssdeep":"6144:iAnHjgcm0O2bHONlh+1eWe7Jb0S1QsN5Gcydcn/2uN/as7tvAvEBcSyVB5flJcF4:9nHjg30O2bHONlh+1eWeRz1QszGcydc2","tlshash":"4f542b55b2a230668392e4e0607b0105f17e58a9f04cc9acb69dcef2eff69464577f38","first_seen":"2026-01-18T22:26:47.253298Z","last_seen":"2026-01-18T22:26:47.253298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":128,"dns":10,"connect":8,"send":0,"wait":36,"receive":27,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:57:34 GMT","end":"Sat, 21 Mar 2026 00:57:21 GMT"},"fingerprint":{"sha1":"2F:33:3A:58:2C:0D:D2:E0:A3:35:99:D0:60:FD:56:1D:AD:88:F5:4C","sha256":"CD:EE:0C:2B:45:7D:D2:FC:B5:19:9F:5E:16:DD:EE:8D:7C:CA:97:E5:BF:F1:C7:F1:A3:3C:55:3B:9D:BF:47:94"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://phoenixtrade.ltd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 06:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c7ad0e-6bea3\"\r\nexpires: Sun, 18 Jan 2026 23:03:47 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 8549\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYr37KvttxMRiKApspsgV8sR%2B%2FHdWzUeTwDfmEJ%2BZhwqYP2iMEznpD1gcJM9TZVxz9Vk9Hg9iLcYWSUBc9QVmjLFPRIKN%2BgvgS1rpsC3yWQ%3D\"}]}\r\ncf-ray: 9c01835a3c12b4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"5b50120b4395b8e757e4857c24421c50","sha1":"1dd7267d8437564b5f7efe19f553e33a3548d37d","sha256":"9f31455e280dfe62030657efe10be565b34716a3655d27869621e2c65e50c049","sha512":"1cf4fd1eb8187b36d47d10a0fa5a4b6fb61e2823598ca3f8ec7715f577c346b775807efd6c6fe5f8f42e3b06f621bcd985e681a5c544f0000f70af65ce87c10a","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnEI:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnEI","tlshash":"fd946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2025-07-22T21:56:55.389579Z","last_seen":"2026-02-13T05:13:50.572376Z","times_seen":3232,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"52.29.138.202","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:18.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://phoenixtrade.ltd\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: MlAHYJHcfyn0285ZT/ePHg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 18 Jan 2026 22:26:18 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: /SMfgXbIyCZewJs+rVkpFe8horE=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T05:01:15.330506Z","times_seen":17737366,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":0,"dns":233,"connect":253,"send":0,"wait":21,"receive":2,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/css/style.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/css/style.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:12 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108161,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"160c69406006c88119a3d658845caa6d","sha1":"98716b38026287a3e617e26bb7781212398a9019","sha256":"ae42311d7dc718282755f3a3f9e2cc654a889106e2e2b506f28cb92c70d49cb1","sha512":"f9708be9229baeb74fba852fa1b0ddc632cae42afee7345113564c3fa90a91e893cb3b169bb5cbd7d25b6ed5a87d1c34ab835e481c89e56186113d5a17452edf","ssdeep":"768:8Zq5w3xpqCF3F0RFYFUlXXsFbbjIjhFwVJGFRQPLtCLy2oRMAY4rlU2CGfCTha8w:8ZqEX5ciVEjhc0fQl23Jg4vNUHO55GIY","tlshash":"1db364ca1ef31844650bd0656bfbd710e3398083965fcc657a9da2488f8939849eff8d","first_seen":"2026-01-18T22:26:47.254927Z","last_seen":"2026-08-04T06:17:20.501001Z","times_seen":4,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":46,"dns":1,"connect":28,"send":0,"wait":44,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/css/glide.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/css/glide.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:12 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3c9cab411797fb6252b1c1a647a36423","sha1":"b6c73fc56594fa1bc9dcc5ce42cc68a336e9ce41","sha256":"45cf3c71c5384e3c5b5a3272af076704f38a1211e8245d9741a3f33c8a3dbded","sha512":"297f9b89feb7a407a8ce5898173ba5012eeeebe83a3c52a4daa137ca7a5e5ab4a681c8d2201d0b1ded8eab89b1593e6d3083784e89d58e2e33b065081048adf9","ssdeep":"","tlshash":"5151459a4ea35508100df4d52faac719a2add0a3990fc8d4fad77d04cf85b792253fc5","first_seen":"2023-07-22T14:33:13Z","last_seen":"2026-08-04T06:17:20.401324Z","times_seen":82,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":44,"dns":0,"connect":22,"send":0,"wait":25,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/exch3.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/exch3.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4475\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:14 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 227x142, components 3","md5":"4a03566924d7f38e77ad6e3e7eb54eef","sha1":"9695a9abb2bdfdb6b8a5e1e5f05b9b30d12e68c3","sha256":"6e90e8635e668cf8e4f1c3fbf1d221f65cfb35ca769218d650229c8f1a30afee","sha512":"cf7d042e5f1857732661f8c96e592f3ce42fea714b4650990de35c2f3459926505b993d1fc422c9278bf5c8c5687b4633c8c090ef9246f7262d8f4fa0bda9786","ssdeep":"96:qyXh0LaZ65/fCHTot0oQ22ar4duIecJoeA4ghY5ppdrl41Twz3sxjMOjf:qGCLaZ658TVdacBnI4csjRWm6Rj","tlshash":"52914b7cdf87dd86e9e7537c808932b60b301d1a64ffc6eeb0311481adf908a98e9425","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.529305Z","times_seen":37,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":330,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/contact-form/contact-form.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/contact-form/contact-form.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"688e4b70668fda7570f687694d584ed0","sha1":"81354c821f4e03e918d160ba791a34673ecab9de","sha256":"179edb995606be05c67a56148526183548318aa4a80b50f08b10e2bc6d07a92a","sha512":"c933a667a342829e1dcf277314dfb46b6a48ec9bfba8dbf1bf293f77174538076a5fa0eea9a52573296ae222c69f7077ebaf8c040861af6d248abe91609ae449","ssdeep":"","tlshash":"c36121457ca7409124b3e07a1f9f6601f62850774188d6203e0d99e05fe8c9de7bebca","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.415857Z","times_seen":50,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/spop.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /spop.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4364,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"433d540de36dc2949b9b37b21854de88","sha1":"318e6d3de3b2e7636ef895b6cad86926758b736a","sha256":"2968b385a5b0d0b3f4587c15ff122e939c78d3036cf0d42d083f0d419a2ad27c","sha512":"f001a6608bb7b381272afa8860b5610f1ecb8ba5a71b7685b97fba17401b224e4eec40e676c0e4f2d192ef1daf1e03b2046484468bdcf35384a6a0bdc381ed6a","ssdeep":"96:ZEnTeGLsAsRDK2j7PsvsjPsZlOu8uR0zIbVVCEUEI:WnbslDK2HUveUZloe0EBDnI","tlshash":"f591521d97ac532642f622dd745a109af03c8936ea5b181fbcecc7f49ad1c1c6721e34","first_seen":"2023-03-12T20:22:28Z","last_seen":"2026-08-04T06:17:20.397558Z","times_seen":167,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Sun, 18 Jan 2026 22:30:05 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJCgH3CwAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f75420b1d7bf78095e6d6934b7cc06\r\nx-77-cache: HIT\r\nx-77-age: 11\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":39,"dns":1,"connect":7,"send":0,"wait":8,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 07:38:42 GMT\r\nexpires: Sun, 17 Jan 2027 07:38:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 139655\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":96,"dns":2,"connect":25,"send":0,"wait":21,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/skin.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /skin.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59025,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, ASCII text, with very long lines (748)","md5":"9232bed4d37786eb7b54012a8b25a364","sha1":"8770dc89b67cc515f6a2ddeb3f3721d3c43ecb1a","sha256":"6c3753c6e4b4c8939999bbcf612c3bffe90c9450673308d9fbc4229e476fee9d","sha512":"8037a5c609cd1c5b0231c6f654d974053e89bae85c12ee74f42329a179257cad1a89674bb018985e4e41ef82470ead83458cdde957223db6e26bd0d36204b410","ssdeep":"1536:gV0Z72BNl5+FfcH4f6hV6HF2nVAL9WX+D8j9qxpquV75TucYITybQ4z/bH7:MOzuYbJe37","tlshash":"b04344ca6ea36890641bc06e77abda56e36dd453514fcc71bfdca60ccf443a04692b8c","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.365637Z","times_seen":14,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/image-16.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/image-16.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 86647\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86647,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x500, components 3","md5":"7e7e836dd9873baaebee1120c5e0e021","sha1":"c50a1cad3652ca90cf069021f006a9e22aa93e36","sha256":"e2d7227ce67a8c5cd67b192b0d6efb664749381c262b5f1e2b78622a226148dc","sha512":"c57b1c1194cca2200c3f3ff65ecf07ada367dfeb8ce7056ea183011f2c690bf3e4dd32238c7b7b9a029015a7fcc8750f34300e10a87ca80949c3d8842f9fabb5","ssdeep":"1536:yXtv2ni2BmPkOYPTUZr0J0n8YshwDtetU0UphADf/hBycsetYHQzOys9VV0aXCbV:yXk3BckOYPgZrl6getUNpha5BZ2HQaHs","tlshash":"2983021857fb5a65909e2cf4129e0defa560cf23f8eb473d4436320e1fae9c02e1a552","first_seen":"2023-09-03T15:04:50Z","last_seen":"2026-08-04T06:17:20.488208Z","times_seen":53,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":345,"dns":0,"connect":0,"send":0,"wait":24,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/media/icons/iconsmind/line-icons.min.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/media/icons/iconsmind/line-icons.min.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100794,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a18cbace67c74fa32d6f2ab9d5b5b3fc","sha1":"0f750c29270569407d575f69e2e7c6e88413bc52","sha256":"180b286c1683b30517979a7009595100a1c79353f276b83609d4974aa4b751e3","sha512":"b9fb9fbce0697b5928edaeaea023adc94a47f38237983f7c5c682c0e044e20de0885c005b4536335677ef1ca8eca00dd7aba7b61f56003fcf06708a714e5d84a","ssdeep":"768:dgNGxUIo3+nAFwtZ/NjhkBVw1akhyRl5m7fViQU6u:txUIo3wAFeRN9UVw1a4yfTQq","tlshash":"bea3c4a4d5ff1ca01719e0f5521ba64cbb1db2eb89450d1ff292fa8cbac22148592ddc","first_seen":"2025-08-09T19:17:13.649668Z","last_seen":"2026-08-04T06:17:20.369057Z","times_seen":8,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 07:38:24 GMT\r\nexpires: Sun, 17 Jan 2027 07:38:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 139673\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-06T04:48:09.921739Z","times_seen":546712,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":88,"dns":2,"connect":16,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/10a/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:22.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/10a/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37754\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 13 Jan 2026 18:31:08 GMT\r\nexpires: Wed, 13 Jan 2027 18:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 11 Jan 2026 08:44:04 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 446114\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128072,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (726)","md5":"003700f15c5eecbeb9a8f8e96344e3da","sha1":"9682c53ba9272e1a98bfd5ec4cad72c7518020b1","sha256":"3977322faa4deb0f4c48db5da42362ed2b3929e623eeff860815ef5b11a5d470","sha512":"880a26c23b5d7ede0f2dddb06b4f557affca11a20e612e53daee3bb31635ee5d0cb4d67e83e19127e74c9436461d20b57b385f2a5fb4415aae8fd41ceea75fd9","ssdeep":"3072:j1K+q7bffsGxtzSbR/HgsPB1IXMvBOh3fNYN7UqIkqANVDUa/IMqEXRqCR:j1K+q7bffsGxtzSbR/FPB1IXMvBOhvN0","tlshash":"9dc3b685719370b3a751b8e414e74102b67aa8a5f02dcc2cb5fe8df2aff185611b5b38","first_seen":"2026-01-13T18:53:27.183044Z","last_seen":"2026-07-25T17:01:23.311183Z","times_seen":19772,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-18","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/63/10a/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 18 Jan 2026 09:41:08 GMT\r\nexpires: Mon, 18 Jan 2027 09:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 45909\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-06T04:21:25.853345Z","times_seen":74094,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260112","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260112 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-mM9NYeUTDfouE6gzOWcxPQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw15BiEOLh6Nyz9TSbwIP24zeYlZSS8gvjS4oS84pzEktSi1OLylKL4o0MjMwMDA1N9AzM4gsMAB9NEsA\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=30.SE=NVYSr12Wf2O_9s1HKRZ8O-siNQNx63_hbyWdxysWTXEZG0sFiVhI0EFf9FvOKyhh0G9uTEoLGRlAVYkOL-hZRrQnoLFpMVfBKEEV2f8oiTcSBLOVql5UZdNLuD-WHDPRFOdVLrdwuyMt0f83xL3_Xd_QV7ntk86er1MaGcdPt8bN6xhPqZJU1p-p-X5Ribn1ESSE5LP3m07UKwst0shn1is0H0vqFjk6S0VXoJIzsPBhjMoMUI7M; expires=Thu, 18-Feb-2027 14:44:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T05:01:15.330506Z","times_seen":17737366,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/63/10a/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:22.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /maps-api-v3/api/js/63/10a/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 71657\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 13 Jan 2026 18:31:08 GMT\r\nexpires: Wed, 13 Jan 2027 18:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 11 Jan 2026 08:44:04 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 446114\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":316745,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (526)","md5":"94d100fe9c09a616457eab9aec50a91d","sha1":"661772825b727105fe0449d4339807c765bf7c11","sha256":"f76345fbf022b8c4e4af7555b624d86417b8022fc80f31bc89c4b5952dd60105","sha512":"226a18fcb9b2d1ab82ff0e62c00fadf6e94d1e2a80d401adf1d416eb299911a4f57918b30f79f85360300bce7de01bcc2be231907624cd1cfacd6096bca47a77","ssdeep":"6144:PhPsjgz5g/SZrjL/aSsBXepjYyod1570aVREZ4NgYIsGsRttjsz1w:PhPsjgz5g/SZrH/aJBXepjYyod1570a7","tlshash":"6564b57c71326f4e6832c853c266311ed0356edbf964c8bdfee65254eaa5944f0e0a38","first_seen":"2026-01-13T18:53:27.1726Z","last_seen":"2026-07-25T17:01:23.301622Z","times_seen":19770,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/css/magnific-popup.css","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/css/magnific-popup.css HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:12 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10602,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"61ec90372f24a84d38dd32eb8de35735","sha1":"ed84b93c8bb54287dd678f393e44880710cde879","sha256":"bbc760a19645ddf7eb66da3ebe8f91540b457dbcbdf84b58cd521d86d6202919","sha512":"8454622f4894a6723235bcc8c859552832ea5230b7ebaca2cbfb344ae97eecfb22a5ccd1aefa7ee63c5745873e0f0bbde7e812a97a1ab2670ef17ccf33bc2286","ssdeep":"192:muYf74/KnjKliUi/x1Z/m6OZSsx6Oc//nuM16vtFHUET3FM4a3bFEW1kCkkz83vT:VZrlu/MF0QFqFEWd7yvvsDW","tlshash":"482232565fb32601e51ad4a89beb9718235a4053d30bdcab7fcd654ccf8e38885a3f84","first_seen":"2023-07-22T14:33:14Z","last_seen":"2026-08-04T06:17:20.521385Z","times_seen":80,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":43,"dns":1,"connect":22,"send":0,"wait":21,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/maps.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/maps.min.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9136,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2056)","md5":"827cf8079699f7fd2de0e855851a67a7","sha1":"037406cef0046bead0c86b1c6bcdfe12db414bb4","sha256":"a667202d8e1f5b1097f5b3d60255616271d61a8fab3d95ac5fd1905390bc3016","sha512":"b24b25e188b7161b3f0f811e557bd503a49f58d171241fcf8fd271d0bde4129977b9a00ce717f9325723b5ff52b0794291924d0140783a863e64fa9ef4145f49","ssdeep":"96:Qkk8RnkRkLk6kLkOkgkzkBBvb513yGm7Xk4bik716tmRGb+t:Qkk8RkiwVwhXYBZ73yGmQ4bik7YQRft","tlshash":"bf125894fc73009782c6f1aa04ed53da29b451834386fa6b783d87bc4fe8b6d95147a8","first_seen":"2023-04-01T11:13:17Z","last_seen":"2026-08-04T06:17:20.537568Z","times_seen":24,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/media/loader.svg","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/media/loader.svg HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/themekit/css/style.css\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:14 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edf504ae1e22a726903bd02b571b47bd","sha1":"c3faaf1debb2df0a45abb40a5e4d74a9b679b804","sha256":"7e602d7e53a155d5bc87843f49fd27ea339e1d499c307d01c6d409b19222ff18","sha512":"1d2919435f769c329102b7e2dbe8bfd9ad3368347ea08f6dfd33ca878720b61f9615baf3338449da4d8ba952342c7d41a14bb1cc00a545b217f00dc45c62a07b","ssdeep":"","tlshash":"0af07da4c5a88bbb842d8210d2f81dc7b735e1cb411748edb66c09b9ab198467593b4b","first_seen":"2023-07-22T14:33:14Z","last_seen":"2026-08-04T06:17:20.427233Z","times_seen":144,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:27.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://phoenixtrade.ltd/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1179\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1179,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,\"TE_20260112\",null,null,[4,0]]],1871,[[\"1768775177547\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"467B9676-C73F-409A-8E17-905CB5ACDD1F\\\",[\\\"https://phoenixtrade.ltd\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"http/1.1\\\",[],[],[],[null,23000000],[null,25000000],[null,113000000],[null,114000000],[null,166000000],[null,138000000],null,[null,189000000],[1,80000000],11944,11188,50880]],[\\\"translate:page_load_to_initialized\\\",[1,80000000],[1,125000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1768775187548\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://phoenixtrade.ltd\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sun, 18 Jan 2026 22:26:27 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-06T04:54:23.17224Z","times_seen":585007,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/man-3.png?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/man-3.png?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 154593\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 504 x 780, 8-bit colormap, non-interlaced","md5":"aadfe32fbacc2ed288c23eac14bbc1a7","sha1":"d9ae43b8dac4f61bf9b374d0413fc82583e4f9ac","sha256":"e6bb993533ea8ee5e7d5b89fabccbdfc341ed44df2f72185be14d6261e635cfb","sha512":"8eb854d4a2fe650aedac824adeef21c5c47bd2d994eef01305f3da4bce729d44e27407336c785f6146ee983a789f034f457769b2a963b1d299030a6fab4b87fb","ssdeep":"3072:gEXqWczMlW259ryv6mCM+ncO56nr4RtfxvBEF80UvEd/o3Cwdugd1:ZXqWI7So/wNBviwvEdwywdugX","tlshash":"7de313fedd1b17b62708d2cee36de815e6147b4a101857b47e4abe2b0dc4128b23734a","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.386806Z","times_seen":36,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":43,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/image-11.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/image-11.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109384\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":109384,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x500, components 3","md5":"835c65162b5ec377a380d9d976885a7a","sha1":"b73375741f130684fa1d344839da1016a817f789","sha256":"ace75034289493c06e24b75a1a36751c79635c6ccb80fc8baaf3b0b17089d02d","sha512":"e85cdec932d76325f7900e767076a87301dad21f6c92cd1811924db1b9d21d259962e273dfe313a38fb4eef4f08261579cdf8b606864a7e91d75674e15cdf6af","ssdeep":"1536:iv1Bhog5L3omiZ/H8SkRoiAaexa5B+NYYnLkVcWY2SCvb+FTetNK9Z:gBhog50miZ/H8Ske1aX5Bcnmcf2b+OcZ","tlshash":"8bb3128412ec6cb391145da1385cf1fdd0aadeaefcc14b5f02d06e284cb6576aa4b702","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.419713Z","times_seen":39,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":292,"dns":0,"connect":0,"send":0,"wait":27,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:500,600,700,800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Montserrat:500,600,700,800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 18 Jan 2026 22:26:16 GMT\r\ndate: Sun, 18 Jan 2026 22:26:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7268,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a39b5b19a1ad9808dc5a18c5c25efaf5","sha1":"5c82087c26794186ebb34389d7a9e45f4c0a3742","sha256":"7c8b826ff30e847191c77e8c1ef6288ce37358e51492a4e4b17c0c2183668f30","sha512":"8d4e6398a288934fba9b8faf491e06d3d15cc41ae4b096eb45354fe97c26ad24d0f35d2a2e08cdc3bae5d787f5e863f68244d76f86cb9f7eb40125c83e01f474","ssdeep":"192:NR97uGOXu7R47nfOeuQRD780ORuhRm71dOAu8:bpbAfnPeD","tlshash":"30e1ae51141ae500a7472cc923cf7e26cd4e61667494c476bbfe2ca8ade6c365321b3d","first_seen":"2025-10-03T15:32:48.833772Z","last_seen":"2026-08-02T12:54:02.562886Z","times_seen":89,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":55,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/hd-1.jpg","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/hd-1.jpg HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19510\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:14 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19510,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"d9b1f519fcac5a87ee05ceab4408dfef","sha1":"fcd37a666746b6fa2cfab1a3b9c9a6cb47e3fa02","sha256":"6645142ffca7211c60a73aa69dccd5f986110e8ea45136637b3ac3574d9b3a78","sha512":"11744e0f294ad580f1907c91fb93973f4ecdb716020566e4b3dd52dc169f74c8a1f182c50ec164a22dd1d3cd932d1a0d2fcbfb3e1652ba3d07a2cc7cfa9a2dfb","ssdeep":"384:tw2Ud7ZgmhLXKorrS3nPrDshIEuJb+J94K/:CZd7xhL7+PpJb694K/","tlshash":"ff924c738b05c1a7c0a8277548db1b29bf3744b8c35f424b67895532aaf3b897f1da90","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.559347Z","times_seen":43,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.cGhHRPJRFzA.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpMeXf13BAr6_Pkrwz1AQAwxrmieg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.cGhHRPJRFzA.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpMeXf13BAr6_Pkrwz1AQAwxrmieg/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 105293\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Jan 2026 18:31:13 GMT\r\nexpires: Tue, 12 Jan 2027 18:31:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 10 Jan 2026 10:10:07 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 532504\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":370591,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2581)","md5":"de06cf5ce297cd1fdbf6ae7b7fcd0438","sha1":"a50e2038d96581f41078cc440b34faaf50059f6f","sha256":"b41dbb84de4a0b2867a6f2ae3fec1ac94bdea4c8299788caba2c813de6839d43","sha512":"45b31fbc221ccd9dab1e5209ad33c1d8d11788035345f3f19312674610f84af7583bfc3bf967b402a6db8e979157244616c58ebe4415c778da7edcfb047fcada","ssdeep":"3072:cNOP/qRijmbFPW1ZPmdRaisuh+E7aCRVc+DTx1ySFJdu6IVquPUbyHyil3Y4NTyJ:2yJdQQinbXxxFmBCtC3Y4D3N13UP","tlshash":"6a74d9c9b26634539262f8a1d06f0087b93ead57b4484c6cb24decea5df084941b7f7b","first_seen":"2026-01-12T20:23:15.899742Z","last_seen":"2026-05-19T04:02:56.55463Z","times_seen":814,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-D6UbDNLw.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-D6UbDNLw.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69664346-9183\"\r\nexpires: Wed, 13 Jan 2027 13:13:13 GMT\r\nlast-modified: Tue, 13 Jan 2026 13:06:14 GMT\r\nx-77-nzt: EwwBuUwJCgH3EBkHAAwBuUwKEwH3EAAAAAwBJRPCMQG3AAAAAA\r\nx-77-nzt-ray: e2f7542063cb328c095e6d690c672f34\r\nx-77-cache: HIT\r\nx-77-age: 465168\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37251,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37250)","md5":"03bd13ee1a46ab03b1ef6d0d598c1459","sha1":"007f38f7ab0bd91da94c99f966ea3342655eb732","sha256":"cf46aef7c0bcdbaee767c2ca8902ad045464497eab06d6787ab451177387e524","sha512":"aa2b3d626a2dd781bd6bc254ed38616d292e095c2b7c94f921865ce28e38fa25d7d5451ee3e9d15c68592901887ec3c8a2481457dbd26a2d817e5f8cf62034d2","ssdeep":"768:E8C94TcCWYt8mXFDxrnSJPHs24vq+ggFgZ:E8W4TcCWYtRXjuPF4t2Z","tlshash":"2ff2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-01-13T16:51:21.527351Z","last_seen":"2026-01-19T09:28:29.925492Z","times_seen":81,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://phoenixtrade.ltd/\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:26:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 328a2bb6fa0144f5d85400b5b12df9bcac88a3e9\r\nx-77-nzt: EwwBuUwJGwH3zQEAAAwBuUwKEwH3AQAAAAwBw7WvFwG2WQIAAA\r\nx-77-nzt-ray: fdb54123496bdbda095e6d6935b77b3b\r\nx-77-cache: HIT\r\nx-77-age: 461\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e73fb26e61b7779ac37a909aa465da53","sha1":"f1aa800d8470d6f52b8f1a919951d96b8c2bac85","sha256":"99edc223afd1cef944e2059f41beadcacc433ce17f52855cdf7803d197268431","sha512":"0df22279f76ba298db9c864b8853738968705515f880586293dd22fd7b4caf87cab05e9aee3dd37c350a490ba4ba1f51011b28dbdf7afc065840020a3641a624","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/F:Al3GKYKZrJA2Yg48fXPdeD/F","tlshash":"c7e1b74f9a144eb987c6438276cfb84675bc807352509d3afd8cc8b842697cda3e3b94","first_seen":"2026-01-13T09:38:59.141589Z","last_seen":"2026-03-04T07:11:45.044045Z","times_seen":1814,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":28,"dns":1,"connect":7,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/jquery.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/jquery.min.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104797,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"e72d21310a37cdb16b583e8c1da0098f","sha1":"ce2056141c589d3b823b1f585f858caa8f57105a","sha256":"e487e46b39f7c7f78934a48110f0026b70e98f7e9e34aa2ba25b3ef2403385b6","sha512":"376ab53d03d130fd434f21a953fcb00c18f25483326457bc6cb5baa56a57ff323ea6c62be90ac4c4bda31a61e7be36b779b25c3f6c1d7d8468ffd57860229ba0","ssdeep":"3072:fiW6e9xmwHU3dZtnMrwis3ZlPrB9SxRGebDUI:fiI9xE3dZtnMrwN3rPERTbDUI","tlshash":"34a385e973d63235864bf0b69d9fcd4df239595c23c98409a60cc4a6a830878977edec","first_seen":"2023-03-09T00:22:24Z","last_seen":"2026-08-04T06:17:20.460558Z","times_seen":178,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/image-12.jpg?v=1.201990","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/image-12.jpg?v=1.201990 HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 101268\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":101268,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x500, components 3","md5":"f247dec2a5316684a074d06d42b1c1b7","sha1":"54d7a10573bbae391fd98cd9aa7e7e27bfc205d1","sha256":"45051d2f9b072b77f8069fcb61fb88e27664c7723f9c7f52c25b46ce670bbf1b","sha512":"40896fbf5063213f9a638e06ff095611141822b4eb801e95f5091b9cd6518becf5b3782509db9377833a1d89e6db223535d7c6a2a9d11c73f426668eebb69f86","ssdeep":"1536:P/SixsF4dbhDY9gq+Dm2+6Ab5TdCGKxpbuYGVbenFGehHzdC5lb5xzpn+Fu:P6qS4dbhDQgHm2+Ft1YpP7GeBzmTd+Y","tlshash":"f6a3125e46c7bbaff9f91c2035ece122265c5e927691f6a0ce658e1b11033100dfeb66","first_seen":"2023-11-05T23:39:30Z","last_seen":"2026-08-04T06:17:20.40506Z","times_seen":32,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":320,"dns":0,"connect":0,"send":0,"wait":23,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/imagesloaded.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/imagesloaded.min.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5490,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5490), with no line terminators","md5":"fa2998400b6d79ce431233d8a105c0a8","sha1":"ae94d0d0c2ff62bf8d488007973db2486da9b5e7","sha256":"b657f10fdb8a60995e43370e83e70bd6cb474382a9b54a7786d7018a5af4ed07","sha512":"4a8178d1b6c4934f9f366bc98b46048478a51aebececa4f7c100594af27c44c36453fa2c5ef8a79183c6772ae18bf5e5ca5f39241220a4095c147aaa1ba977ce","ssdeep":"96:Dxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7rWy:Vrycrr3rKvE9IjRxjGjgNhdTLo3reNW9","tlshash":"91b112cd77a67535229af0b3a21f020f727a406e6918815d7969ecf65cfcd092633bb0","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.436905Z","times_seen":105,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 07:38:24 GMT\r\nexpires: Sun, 17 Jan 2027 07:38:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 139673\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-06T04:48:09.921739Z","times_seen":546712,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/media/icons/icons.woff","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/media/icons/icons.woff HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/themekit/css/style.css\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: font/woff\r\nContent-Length: 3560\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 21:00:13 GMT\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 3560, version 1.0","md5":"0569df5e9d78c7493548d676ab4afd24","sha1":"64b9c8447749c5c936cafbb214e2155ee62da348","sha256":"421d1265c610c593cb0357f80105b25cade729eb21758b6a3d243e61cb238db8","sha512":"e0d85c39fd8c0574a78c8ab8dc2c11f37e56ded193e65fef299ebd8a77fe782a9a6ad4213188d9da05174b29480d3f739553892c7fd5b4e164aeb957cf8d66d2","ssdeep":"","tlshash":"32716d002f5616bfe1e64cfd7dd3a9b13a2147b2b5d39ef2a43c5151e487382c105e86","first_seen":"2023-04-19T02:55:45Z","last_seen":"2026-08-04T06:17:20.49455Z","times_seen":144,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:27.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://phoenixtrade.ltd/\r\nOrigin: https://phoenixtrade.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://phoenixtrade.ltd\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 18 Jan 2026 22:26:27 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T05:01:15.330506Z","times_seen":17737366,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/main.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/main.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61388,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1860)","md5":"2ecbb614eaf2f9340c5b18bbffcdfedd","sha1":"8c0f974ada910bda8d6fb72beec016146fd68f27","sha256":"5d7532a21021da6e9eec185471971c16dabdf30feaf5157c67095a03272ddaf7","sha512":"1cc7fab7a851897d550f74557666863323e6d26d4e2e43740c38dddb85468110f242b50b55f473e2456988946bf51d587bcbc322885a0a3fd0d4b242632810e4","ssdeep":"768:pMEVF3sRi6IEWsuj/X0cKNCQJn7wUN40yZ7atykOY+JPLVg7BhJMBL4d3dvZpTnD:pbuq8vynOTbtqJe","tlshash":"c453750979f3116260bbb0ba0f5f5008b6718417415ace107e5daae45fe0938a7beff9","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.548446Z","times_seen":83,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":29,"dns":0,"connect":20,"send":0,"wait":41,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/media/favicon.png","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /media/favicon.png HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:17 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-06T00:50:29.392969Z","times_seen":41455,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 13 Jan 2026 10:30:29 GMT\r\nexpires: Wed, 13 Jan 2027 10:30:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 474948\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-06T04:19:29.691572Z","times_seen":56591,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/glide.min.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/glide.min.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26364,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23809)","md5":"24302d1268fd497c2836f91638a2d910","sha1":"52ad69bb28a55654db128a5967a0943b28783494","sha256":"2db79ddabd11195baa94e0365e8d0430aa8626aee31af4c94392e8594440732b","sha512":"ce8a2f8ecc477e8817f7826f426c17958e614b580116a867794b21647eb65acd6e2884ce64b8ea3042bcd0f46eeb822c150921e9aeeb8591995fc6280d3a77e4","ssdeep":"384:+RyTuZf+ZoH9DbF03X6aIaJZyqQWxVeNr9bB3RXbE938sB8MRD8:se9DzQWx4NJbB3RXbE938Q8MRD8","tlshash":"b6c2a54cb381b0a9078370b9543f5a0ee1732d4898868588f5b9d8e59dbca8d117bffd","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.50927Z","times_seen":96,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phoenixtrade.ltd/themekit/scripts/progress.js","fqdn":"phoenixtrade.ltd","domain":"phoenixtrade.ltd","tld":"ltd"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:16.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phoenixtrade.ltd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 16:41:22 GMT","end":"Sun, 12 Apr 2026 16:41:21 GMT"},"fingerprint":{"sha1":"DE:79:5D:BC:E0:DF:3A:32:97:1D:D7:28:02:EC:AD:EF:29:D9:21:E3","sha256":"5B:86:92:18:63:D9:BC:F7:78:95:85:A5:54:89:13:89:95:F9:99:B4:8B:9B:6D:84:D3:DB:41:99:96:12:CA:7E"}}},"request":{"raw":"GET /themekit/scripts/progress.js HTTP/1.1\r\nHost: phoenixtrade.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nCookie: PHPSESSID=mkd1ndk11rtued6nn6sn4kplf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 22:26:16 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nlast-modified: Fri, 05 Apr 2024 10:28:21 GMT\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12948,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8330)","md5":"b8812974e8e2841f6a7eee2a7264cf4e","sha1":"487a752cb1a18609e9a3044b860236a3d5c9bb24","sha256":"28c2954a84d4f705c7b12fe1b578410bececc08230d4fdd9bdd8bdb9fb101b44","sha512":"48de83d64beeab20eac27799d09bd56eca4da657bf2ca641b7e34a811d7ce535029766037c2e68e8d699f5274292aa92721436dfc2183bea18ff44fc6df17023","ssdeep":"384:41RjOycDiwXQCaM7MUY71IARcfw3fwUtlRfFLfcCjBgCIEEzD8D:OFm3XQC/LYaARcTUtlRfFLfcCjBgCIEP","tlshash":"3a42300b77e22511a59b70b65e0f1144b330a56f121b891c7e1c95e09fb4a398b7eff8","first_seen":"2023-03-09T17:24:58Z","last_seen":"2026-08-04T06:17:20.34442Z","times_seen":89,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"phoenixtrade.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phoenixtrade.ltd/","date":"2026-01-18T22:26:17.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phoenixtrade.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:39:46 GMT\r\nexpires: Sun, 17 Jan 2027 18:39:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 99991\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-06T04:34:02.672553Z","times_seen":79046,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}