{"report_id":"f43a3ebf-ad69-4e23-86ec-d351b7e03d5b","version":0,"status":"done","tags":[],"date":"2026-07-22T10:26:03Z","url":{"schema":"http","addr":"easytrading.exchange","fqdn":"easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"www.easytrading.exchange/","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"title":"Invest EasyTrading — Trading USDC 0.8%–5%","dom":{"size":78398,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52578)","md5":"c35a7bf14b4ddb2d12fc76788b290f72","sha1":"eb914d037ac701bbfc350fb3f504593af8025417","sha256":"2a9c9cdbfa2e35439e7086e6a589365b5448496e9f04853fa0cbfd02cf50b206","sha512":"495cc6190cbf96524db7ebcec84149df20b2e74712c779b887cb77f80c0c0fac2a94bebd001bf4a599716ccd943f130fda74e17536f1d4db9d344eae589c279b","ssdeep":"1536:Bebx/c64Jysq7v4S4PjzwYu9oDUO2oftCS7S4PjzwYu9oDUO2oftCSAaNlbgn5WA:BepaNlbg5W5y5AGOJES7XzrXwXYXZXsb","tlshash":"1a73c83491982e3d683bc7e0ebe4737810baa641d61b845cf67c0165d7cbee97863788","dom_hash":"domhash4a6a4c928f7ecea44987b6f81fbac2cf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"easytrading.exchange","fqdn":"easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:26:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"easytrading.exchange","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-22T10:21:07.599209Z","last_seen":"2026-07-22T10:21:07.599209Z","alert_count":1,"request_count":1,"received_data":663,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.easytrading.exchange","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-22T10:21:07.59097Z","last_seen":"2026-07-22T10:21:07.59097Z","alert_count":18,"request_count":18,"received_data":6151626,"sent_data":13997,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/link-4Pwm58SW.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb2b4851dab80f71606b1987fa91d9f7","sha1":"a75694562e02603fc07258063077690e954a1bd0","sha256":"840ab7225b440f4d2ab959a0cd35c602e9a36467a1775d0e92059cc340caaef7","sha512":"2305cb019e0e467d613bb7581993a7ef780062d75f46976607d638e1559aa63acbe5c7ff0e34305d60dd50e537de10e6463979d4738c5ef4c42b82525492c551","ssdeep":"96:NWeuPc7e6vBkvsLJoMRa3OPWwWww67SNmK1glvVVYSOcm4Zth7SSs+1sk6NFCkrF:Ae5OEFoA+bvNmU2NVYXcHSy36+c","tlshash":"79f1099ff140b0524ee3855241abd952f7a03bb12c7f8170a3b1e9746a87a086377f59","size":7783,"data":"","first_seen":"2026-07-22T10:21:12.491054Z","last_seen":"2026-07-22T10:26:10.423376Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/promo-rendimenti.jpg.asset-CdTXI9QO.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d056c7b0895475a722862ec3b6316e5","sha1":"7d40d30b94bc7777d77de6f4247afab3915b9298","sha256":"8f30242aad991c891c99aa66079eb6dd98eb5d31c58bb03682e17922185a28b4","sha512":"11c38d7f2789ceb0a2f4e142f90a15f3984e8593a27478a9a0e13f6bf163cce6e2dd92c7634fa8371c69244e5ee6a6d8bb2ffc11b2a6e9c6928d95504e13911a","ssdeep":"","tlshash":"10e02797d6cdd22e46d82380876588ec4e07f22389299dfad32206c7dfd0921008456d","size":434,"data":"","first_seen":"2026-07-22T10:21:12.498567Z","last_seen":"2026-07-22T10:26:10.433568Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/index-NRk0Fz0s.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a05994ff74d7ebe79b6e7ce44fa32ed","sha1":"c0f8c519d254207aa83a8c38138b12c0d9b4d2b4","sha256":"21d989844aeeded8aa372fab7269b4813b2f771bed8985b8bba5a4f6aa4a2442","sha512":"76510c70ecca9561e40468026e49787d4bf9f7de465633f90aa3cbc32bf1865eb2c32ef2fcde353e679ec92ee442072c262e8d238c04cbb6698f0dbc612f8667","ssdeep":"6144:bUewdxjw1qLLdd34EJi4tei6G26+gkt/ezDCFcrxBBHqtMPJz+pBQJ3nCPrEffMq:gaR0CEBKtMxgEmBqFOwuyrD","tlshash":"b4c46ee433a6b1320bd75272907b1502f33964567c0d0428b628eddf76e5885e6bbfb8","size":573572,"data":"","first_seen":"2026-07-22T10:21:12.49415Z","last_seen":"2026-07-22T10:26:10.435792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/arrow-up-right-CAYkux7n.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d29b6843a695ece5348494e7ee222e8","sha1":"c5ab3bbb1f3ce6ca82dde3c09ba29773d6bd2f94","sha256":"8572157024531fdd75d0a3260cf76d7cd20f8eb20c38354c8865bbca0bed6424","sha512":"554bae4022a132d01d1a3dcaf41b7acf30bce01cb4f73c9767d8d8b853d4b6e1c940fb721330b3bcb3ac1c81c84569111f5926419b2fc3d4bd1774e243d2bb69","ssdeep":"","tlshash":"5fd0172f7dc60a70814417a2540fbc088e46aaec62b3060672893a7a07c18963e6df39","size":271,"data":"","first_seen":"2026-07-22T10:21:12.495737Z","last_seen":"2026-07-22T10:26:10.43855Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/~flock.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-22T16:21:58.886619Z","times_seen":14125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/routes-CeMzDpFS.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf2d7c4442d17db9e7d39c7a844845dd","sha1":"319fe55dfb0b4137d1f370bda8ca42015a6e0050","sha256":"a85125585a5ff63975c2129540a206a723212d81ea841d32becff8082ee291d8","sha512":"1e1a95d4a6f05d5eb35850378eaad51e2a5b303523c6d336dc574e37a5f0f5138bffb59cf71ac0dda217f0d3fc36eaefa76fa787a138e40001dbadd8251d82d0","ssdeep":"192:bmldRzZj4YGWzqxBqdmFV4RV2qAZPUJtTGq8FiYkqeMIQqqDgbcLlD3YrXhPia1R:bm112FG/2qCUXWFIQsud4FFt","tlshash":"5892941a70917eec74e70ae0f9dfe85da12ec548c69b4478fabc341517814ecaa43bc5","size":19626,"data":"","first_seen":"2026-07-22T10:21:12.501495Z","last_seen":"2026-07-22T10:26:10.437151Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/card-32_CT5ME.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7977298c05f61f3ecd16aab66fde3a6d","sha1":"920495485ef050d46e065ea3376810e9fbdb3c8b","sha256":"f6ef1707c801e5bd96be0409daa4607cc844005579f0a9dcfd5ada072a70a270","sha512":"adead19725b4284202be2228c5b616117527e9f03c9cc4d615012f65b70c304f5169b1938e6c407a8942b43ebfdf1ee47752f6b07feca3d9da598157cae901bd","ssdeep":"384:VJVtHHsv3qMP7wvr/3/HOMfEl6aUNW91UKJwitivX7Pe3tG4h8TJJHYWy4+aq+xf:TXM/37wvz3/H6FvJhB8XYWycrOI","tlshash":"57e208537042267e22bfc267d31cea9dd6366781ca0e8b08f3420b319779be45696f1d","size":32560,"data":"","first_seen":"2026-07-22T10:21:12.492069Z","last_seen":"2026-07-22T10:26:10.425886Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/trader5.jpg.asset-TRmUBsQy.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"61e8cbc162c5fdabc03228400d2c3bd4","sha1":"ebfde36b22f47208a5927907c2c1ce08c84d92bc","sha256":"274605105d0f776237bf5da9fab15adbc7541886cde4d4b8ff06f03852c11387","sha512":"ae7b1b3053874c092c57690a0e80324b6bebb7b6a8401cb4a54df082afbba9022057fda3f5843b3539045946f1bd0e852d2dcbe8f8fcaf8b3a0f188edb058c35","ssdeep":"","tlshash":"4e4111a7e3dce33057ae0381a24bac9c8941e131057ba4a4b23c52addef0d17918663c","size":2286,"data":"","first_seen":"2026-07-22T10:21:12.497637Z","last_seen":"2026-07-22T10:26:10.439762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/useStore-JOSBexNl.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e574e70b37e84844f55d9e005241b30","sha1":"e787888af124ac83675a11ebf0c1c6b9ac0a854e","sha256":"11c23a5bc46b86bce194c7c31b9c8e8439af0d1922b763b854d563f58207c9fa","sha512":"5f256f0d5adaa9e68c8794532c76b9a50ab8ac4d44ea06f8368a5e5dd44c2729d8dcc87422ba2cacd446884fc97df22f12d260e8acfcd4a7691a74ee590534f1","ssdeep":"384:XvlLy/iblAolrIX1Ew02QdgFxtkbybDbts3tpdeB9Oe7Os6rv2pw27DcfrCihMdY:/lLJb9cGgFxSBeB9OaOs6EMnMdaN","tlshash":"abc2e6e532d2f0a647cb31a200bf5069f37d0991280c1524f2b1d9da38b5a59d6fbf6b","size":28156,"data":"","first_seen":"2026-06-18T20:07:27.537614Z","last_seen":"2026-07-22T10:26:10.420442Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/redirect-C-eRQtnH.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff005654f3c00945bf69e2136c16ab5d","sha1":"5d695d4fac0520bd34407a5f3fad3d96804070d4","sha256":"db1baefc3e1ef2b80c0b395b7107bd093b9f2453461f0dbcb723701041cab9ac","sha512":"0cccb4355b67c6f4c997f5b3a6ed97cabe490c35d53251c5c7c4bae4b26178d8f1958e6bbf73293d0972d256e110d5e2fe80ad62a691204b449e6c81661e44a9","ssdeep":"","tlshash":"95f0e7de79cfb35413d70451c0d7689df0e749da149c42207454ac7299e46ecc707d0b","size":557,"data":"","first_seen":"2026-05-17T23:26:57.077817Z","last_seen":"2026-07-22T10:26:10.442675Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/TickerBar-CV3lUzxf.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b68f34073672fdf32904ccebb1b73705","sha1":"0e5aa7e25e98b08f666500667e54924da1eedd3d","sha256":"2509f79f7bc2b8f9b5b3cee498c74b83264b68476727d0825d301aca146a6b8b","sha512":"747a8e0697652643be870bc530f90f3e894f91f09f554d156f3a7502ce272c2ce955ac7d8ef4a1b54b20c08bc53867718b29576d02a08915b0fac94ac3481a46","ssdeep":"","tlshash":"c361820f6bca2efc400a4364644fb0156b8f087cf26b4a17b47d202a1a918e4fd6ef59","size":3341,"data":"","first_seen":"2026-07-22T10:21:12.496713Z","last_seen":"2026-07-22T10:26:10.432162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/matchContext-abQDiW17.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ee59b70ce011414e9c863fd0156f849","sha1":"81789b3c2964c1d4348409f5dbceefad9c3d1797","sha256":"173f66307f15facbcf7c58428c591c01213908bb307ef3dbc51d47cd459dc716","sha512":"f6a5369e836575a086c6656fef3e01202cf4d4fd8d3f89c88234afc27083e2b1a9d2aadaaeb3011033ddcc34b8bbb825c0e7081c1b85b110dc55825c70b646af","ssdeep":"","tlshash":"1ec08c0de98006b06a2308d7c022d2b3837070a907ac8aa40003498982ca29012beca2","size":159,"data":"","first_seen":"2026-07-02T21:42:52.238228Z","last_seen":"2026-07-22T10:26:10.441831Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.easytrading.exchange/","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:25:34.648Z","timestamp":1784715934648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nset-cookie: __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a; Path=/; Max-Age=86400; SameSite=Lax; Secure\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be002a288be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59573,"size_decoded":9115,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"af2a92a101b45c80f9269c379408c3b6","sha1":"8b8a46c301560adf8d1f699af837ebcb0380d265","sha256":"fd41d391a50a0d8eacbac7ac2356f8d090db3d307b7e6777a2d61e042b954787","sha512":"12d4d294a80578bbbc67d9951ae9491f00b225c213051813236a2aca4af965d064be9402adf882684c38f280927b177354902282d75d234c34a8785f023be28a","ssdeep":"1536:UoQAzY5dK7HMPqOSoQAzY5dK7HMPqO4nkKp:HaSS","tlshash":"6443a53151942e3da47bc7f0f6e4773520ba9245d25f805cfabc0275a78bde9b823688","first_seen":"2026-07-22T10:26:10.417104Z","last_seen":"2026-07-22T10:26:10.417104Z","times_seen":1,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":0,"dns":90,"connect":1,"send":0,"wait":511,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/useStore-JOSBexNl.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.491Z","timestamp":1784715935491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/useStore-JOSBexNl.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04ca468be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28156,"size_decoded":10302,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28156), with no line terminators","md5":"3e574e70b37e84844f55d9e005241b30","sha1":"e787888af124ac83675a11ebf0c1c6b9ac0a854e","sha256":"11c23a5bc46b86bce194c7c31b9c8e8439af0d1922b763b854d563f58207c9fa","sha512":"5f256f0d5adaa9e68c8794532c76b9a50ab8ac4d44ea06f8368a5e5dd44c2729d8dcc87422ba2cacd446884fc97df22f12d260e8acfcd4a7691a74ee590534f1","ssdeep":"384:XvlLy/iblAolrIX1Ew02QdgFxtkbybDbts3tpdeB9Oe7Os6rv2pw27DcfrCihMdY:/lLJb9cGgFxSBeB9OaOs6EMnMdaN","tlshash":"abc2e6e532d2f0a647cb31a200bf5069f37d0991280c1524f2b1d9da38b5a59d6fbf6b","first_seen":"2026-06-18T20:07:27.537614Z","last_seen":"2026-07-22T10:26:10.420442Z","times_seen":10,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/link-4Pwm58SW.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.493Z","timestamp":1784715935493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/link-4Pwm58SW.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04ca548be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7783,"size_decoded":3753,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7779), with no line terminators","md5":"bb2b4851dab80f71606b1987fa91d9f7","sha1":"a75694562e02603fc07258063077690e954a1bd0","sha256":"840ab7225b440f4d2ab959a0cd35c602e9a36467a1775d0e92059cc340caaef7","sha512":"2305cb019e0e467d613bb7581993a7ef780062d75f46976607d638e1559aa63acbe5c7ff0e34305d60dd50e537de10e6463979d4738c5ef4c42b82525492c551","ssdeep":"96:NWeuPc7e6vBkvsLJoMRa3OPWwWww67SNmK1glvVVYSOcm4Zth7SSs+1sk6NFCkrF:Ae5OEFoA+bvNmU2NVYXcHSy36+c","tlshash":"79f1099ff140b0524ee3855241abd952f7a03bb12c7f8170a3b1e9746a87a086377f59","first_seen":"2026-07-22T10:21:12.491054Z","last_seen":"2026-07-22T10:26:10.423376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/card-32_CT5ME.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.504Z","timestamp":1784715935504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/card-32_CT5ME.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04ea9f8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32560,"size_decoded":11087,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32560), with no line terminators","md5":"7977298c05f61f3ecd16aab66fde3a6d","sha1":"920495485ef050d46e065ea3376810e9fbdb3c8b","sha256":"f6ef1707c801e5bd96be0409daa4607cc844005579f0a9dcfd5ada072a70a270","sha512":"adead19725b4284202be2228c5b616117527e9f03c9cc4d615012f65b70c304f5169b1938e6c407a8942b43ebfdf1ee47752f6b07feca3d9da598157cae901bd","ssdeep":"384:VJVtHHsv3qMP7wvr/3/HOMfEl6aUNW91UKJwitivX7Pe3tG4h8TJJHYWy4+aq+xf:TXM/37wvz3/H6FvJhB8XYWycrOI","tlshash":"57e208537042267e22bfc267d31cea9dd6366781ca0e8b08f3420b319779be45696f1d","first_seen":"2026-07-22T10:21:12.492069Z","last_seen":"2026-07-22T10:26:10.425886Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/~flock.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.512Z","timestamp":1784715935512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04ead98be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-22T16:21:58.886619Z","times_seen":14125,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/icon-512.png","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.743Z","timestamp":1784715935743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /icon-512.png HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2478063\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nserver: cloudflare\r\ncf-ray: a1f1be06587a8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2478063,"size_decoded":2478487,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit/color RGB, non-interlaced","md5":"2dd3032f25ead2d526cfb481cd68425a","sha1":"0a9c064ede9d93c5bfd3a4b1e200cdd9b3d2aec3","sha256":"678dbdd08162dd180c0fd4bc34091d9059aca4c5090da23e844e3bb7b3f35021","sha512":"085dd2c2b5052e40c3c51ffcc049388e5ff7db6f78b397ebf5f0467d6842647ec3c8f6d589e7557d168872a0f7f427c812ceb674c451ff37c5c6727024404b6d","ssdeep":"24576:fG1SfONEEB7p74a076FHP60Aep5W+ylKF05ft:as85GK3rPylFt","tlshash":"c7250272e026ce0fc8d774bc1d5da6121b98972891622094cab7e77e43b9f78871cec1","first_seen":"2026-07-22T10:21:12.487036Z","last_seen":"2026-07-22T10:26:10.42926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/styles-KLGVdVjT.css","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.488Z","timestamp":1784715935488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/styles-KLGVdVjT.css HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04ca308be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139478,"size_decoded":20445,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"f60c4896c0051232ef2e26b211efb7bd","sha1":"2b2093eeaaf5baab163547a9bba10c16504b932d","sha256":"de59aff953d830aa5e51e0cab8fd182cdc85b96c3155c11c427c4b9f84808049","sha512":"0b4c49dc251998362ce06a670270c47d1478693fe8c5bdbb0217ef20cafba3c2e51f822eababbf21913bc47ca7e4329b1594381d99b6490e96a858211ce0955d","ssdeep":"3072:ULXNMbh+VTkONzQDy2wAo/KLgyU1FKYNUUBMq+WDhYTXz:UXNMbh+VTkONzQDy2wf/KLfYNUUBMq+n","tlshash":"d9d381a0b125d53f7c23b5f9979cb48c750a70d1ec2a83e9fe56620267d37f25ca6a00","first_seen":"2026-07-22T10:21:12.488719Z","last_seen":"2026-07-22T10:26:10.430724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/TickerBar-CV3lUzxf.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.507Z","timestamp":1784715935507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/TickerBar-CV3lUzxf.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04eab48be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3341,"size_decoded":2039,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3341), with no line terminators","md5":"b68f34073672fdf32904ccebb1b73705","sha1":"0e5aa7e25e98b08f666500667e54924da1eedd3d","sha256":"2509f79f7bc2b8f9b5b3cee498c74b83264b68476727d0825d301aca146a6b8b","sha512":"747a8e0697652643be870bc530f90f3e894f91f09f554d156f3a7502ce272c2ce955ac7d8ef4a1b54b20c08bc53867718b29576d02a08915b0fac94ac3481a46","ssdeep":"","tlshash":"c361820f6bca2efc400a4364644fb0156b8f087cf26b4a17b47d202a1a918e4fd6ef59","first_seen":"2026-07-22T10:21:12.496713Z","last_seen":"2026-07-22T10:26:10.432162Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/promo-rendimenti.jpg.asset-CdTXI9QO.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.510Z","timestamp":1784715935510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/promo-rendimenti.jpg.asset-CdTXI9QO.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04eacf8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434,"size_decoded":725,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (434), with no line terminators","md5":"7d056c7b0895475a722862ec3b6316e5","sha1":"7d40d30b94bc7777d77de6f4247afab3915b9298","sha256":"8f30242aad991c891c99aa66079eb6dd98eb5d31c58bb03682e17922185a28b4","sha512":"11c38d7f2789ceb0a2f4e142f90a15f3984e8593a27478a9a0e13f6bf163cce6e2dd92c7634fa8371c69244e5ee6a6d8bb2ffc11b2a6e9c6928d95504e13911a","ssdeep":"","tlshash":"10e02797d6cdd22e46d82380876588ec4e07f22389299dfad32206c7dfd0921008456d","first_seen":"2026-07-22T10:21:12.498567Z","last_seen":"2026-07-22T10:26:10.433568Z","times_seen":2,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/~api/analytics","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.998Z","timestamp":1784715935998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nContent-Type: application/json\r\nContent-Length: 345\r\nOrigin: https://www.easytrading.exchange\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a; session-id=07ea6f98-98f1-4616-869e-dc9270af17d5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":345,"data":"{\"timestamp\":\"2026-07-22T10:25:35.996Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"07ea6f98-98f1-4616-869e-dc9270af17d5\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://www.easytrading.exchange/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Wed, 22 Jul 2026 10:25:36 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a1f1be07feca8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-07-22T16:00:00.348483Z","times_seen":3719,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/index-NRk0Fz0s.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.489Z","timestamp":1784715935489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/index-NRk0Fz0s.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04ca368be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":573572,"size_decoded":165210,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54156)","md5":"2a05994ff74d7ebe79b6e7ce44fa32ed","sha1":"c0f8c519d254207aa83a8c38138b12c0d9b4d2b4","sha256":"21d989844aeeded8aa372fab7269b4813b2f771bed8985b8bba5a4f6aa4a2442","sha512":"76510c70ecca9561e40468026e49787d4bf9f7de465633f90aa3cbc32bf1865eb2c32ef2fcde353e679ec92ee442072c262e8d238c04cbb6698f0dbc612f8667","ssdeep":"6144:bUewdxjw1qLLdd34EJi4tei6G26+gkt/ezDCFcrxBBHqtMPJz+pBQJ3nCPrEffMq:gaR0CEBKtMxgEmBqFOwuyrD","tlshash":"b4c46ee433a6b1320bd75272907b1502f33964567c0d0428b628eddf76e5885e6bbfb8","first_seen":"2026-07-22T10:21:12.49415Z","last_seen":"2026-07-22T10:26:10.435792Z","times_seen":2,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/routes-CeMzDpFS.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.502Z","timestamp":1784715935502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/routes-CeMzDpFS.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04da888be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19626,"size_decoded":6257,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (16221)","md5":"bf2d7c4442d17db9e7d39c7a844845dd","sha1":"319fe55dfb0b4137d1f370bda8ca42015a6e0050","sha256":"a85125585a5ff63975c2129540a206a723212d81ea841d32becff8082ee291d8","sha512":"1e1a95d4a6f05d5eb35850378eaad51e2a5b303523c6d336dc574e37a5f0f5138bffb59cf71ac0dda217f0d3fc36eaefa76fa787a138e40001dbadd8251d82d0","ssdeep":"192:bmldRzZj4YGWzqxBqdmFV4RV2qAZPUJtTGq8FiYkqeMIQqqDgbcLlD3YrXhPia1R:bm112FG/2qCUXWFIQsud4FFt","tlshash":"5892941a70917eec74e70ae0f9dfe85da12ec548c69b4478fabc341517814ecaa43bc5","first_seen":"2026-07-22T10:21:12.501495Z","last_seen":"2026-07-22T10:26:10.437151Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/arrow-up-right-CAYkux7n.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.506Z","timestamp":1784715935506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/arrow-up-right-CAYkux7n.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04eaaf8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271,"size_decoded":671,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8d29b6843a695ece5348494e7ee222e8","sha1":"c5ab3bbb1f3ce6ca82dde3c09ba29773d6bd2f94","sha256":"8572157024531fdd75d0a3260cf76d7cd20f8eb20c38354c8865bbca0bed6424","sha512":"554bae4022a132d01d1a3dcaf41b7acf30bce01cb4f73c9767d8d8b853d4b6e1c940fb721330b3bcb3ac1c81c84569111f5926419b2fc3d4bd1774e243d2bb69","ssdeep":"","tlshash":"5fd0172f7dc60a70814417a2540fbc088e46aaec62b3060672893a7a07c18963e6df39","first_seen":"2026-07-22T10:21:12.495737Z","last_seen":"2026-07-22T10:26:10.43855Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/trader5.jpg.asset-TRmUBsQy.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.509Z","timestamp":1784715935509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/trader5.jpg.asset-TRmUBsQy.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04eac38be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2286,"size_decoded":1139,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2286), with no line terminators","md5":"61e8cbc162c5fdabc03228400d2c3bd4","sha1":"ebfde36b22f47208a5927907c2c1ce08c84d92bc","sha256":"274605105d0f776237bf5da9fab15adbc7541886cde4d4b8ff06f03852c11387","sha512":"ae7b1b3053874c092c57690a0e80324b6bebb7b6a8401cb4a54df082afbba9022057fda3f5843b3539045946f1bd0e852d2dcbe8f8fcaf8b3a0f188edb058c35","ssdeep":"","tlshash":"4e4111a7e3dce33057ae0381a24bac9c8941e131057ba4a4b23c52addef0d17918663c","first_seen":"2026-07-22T10:21:12.497637Z","last_seen":"2026-07-22T10:26:10.439762Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/icon-512.png","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.741Z","timestamp":1784715935741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /icon-512.png HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2478063\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nserver: cloudflare\r\ncf-ray: a1f1be0658748be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2478063,"size_decoded":2478487,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit/color RGB, non-interlaced","md5":"2dd3032f25ead2d526cfb481cd68425a","sha1":"0a9c064ede9d93c5bfd3a4b1e200cdd9b3d2aec3","sha256":"678dbdd08162dd180c0fd4bc34091d9059aca4c5090da23e844e3bb7b3f35021","sha512":"085dd2c2b5052e40c3c51ffcc049388e5ff7db6f78b397ebf5f0467d6842647ec3c8f6d589e7557d168872a0f7f427c812ceb674c451ff37c5c6727024404b6d","ssdeep":"24576:fG1SfONEEB7p74a076FHP60Aep5W+ylKF05ft:as85GK3rPylFt","tlshash":"c7250272e026ce0fc8d774bc1d5da6121b98972891622094cab7e77e43b9f78871cec1","first_seen":"2026-07-22T10:21:12.487036Z","last_seen":"2026-07-22T10:26:10.42926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easytrading.exchange/","fqdn":"easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:25:34.423Z","timestamp":1784715934423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:59:49 GMT","end":"Sat, 26 Sep 2026 14:59:38 GMT"},"fingerprint":{"sha1":"84:21:D5:27:A8:AC:0B:A6:68:D7:0D:21:4D:52:EB:B3:3A:0F:A1:01","sha256":"E0:C6:1D:F4:B4:96:02:9C:19:CE:F6:8E:D8:D9:66:88:3C:0F:3B:40:E3:6B:D8:A5:E8:32:73:45:E2:61:C9:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 22 Jul 2026 10:25:34 GMT\r\ncontent-length: 0\r\nlocation: https://www.easytrading.exchange/\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=easytrading.exchange; Expires=Wed, 22 Jul 2026 10:55:34 GMT\r\nserver: cloudflare\r\ncf-ray: a1f1bdfe6f065697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T16:24:31.07099Z","times_seen":17454526,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":18,"connect":1,"send":0,"wait":174,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/matchContext-abQDiW17.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.499Z","timestamp":1784715935499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/matchContext-abQDiW17.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04da798be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":159,"size_decoded":615,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2ee59b70ce011414e9c863fd0156f849","sha1":"81789b3c2964c1d4348409f5dbceefad9c3d1797","sha256":"173f66307f15facbcf7c58428c591c01213908bb307ef3dbc51d47cd459dc716","sha512":"f6a5369e836575a086c6656fef3e01202cf4d4fd8d3f89c88234afc27083e2b1a9d2aadaaeb3011033ddcc34b8bbb825c0e7081c1b85b110dc55825c70b646af","ssdeep":"","tlshash":"1ec08c0de98006b06a2308d7c022d2b3837070a907ac8aa40003498982ca29012beca2","first_seen":"2026-07-02T21:42:52.238228Z","last_seen":"2026-07-22T10:26:10.441831Z","times_seen":3,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/assets/redirect-C-eRQtnH.js","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.500Z","timestamp":1784715935500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /assets/redirect-C-eRQtnH.js HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f1be04da7e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":557,"size_decoded":809,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (557), with no line terminators","md5":"ff005654f3c00945bf69e2136c16ab5d","sha1":"5d695d4fac0520bd34407a5f3fad3d96804070d4","sha256":"db1baefc3e1ef2b80c0b395b7107bd093b9f2453461f0dbcb723701041cab9ac","sha512":"0cccb4355b67c6f4c997f5b3a6ed97cabe490c35d53251c5c7c4bae4b26178d8f1958e6bbf73293d0972d256e110d5e2fe80ad62a691204b449e6c81661e44a9","ssdeep":"","tlshash":"95f0e7de79cfb35413d70451c0d7689df0e749da149c42207454ac7299e46ecc707d0b","first_seen":"2026-05-17T23:26:57.077817Z","last_seen":"2026-07-22T10:26:10.442675Z","times_seen":73,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.easytrading.exchange/__l5e/assets-v1/14755ca8-08fa-4066-9493-975c0bd57f6b/promo-rendimenti.jpg","fqdn":"www.easytrading.exchange","domain":"easytrading.exchange","tld":"exchange"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.easytrading.exchange/","date":"2026-07-22T10:25:35.516Z","timestamp":1784715935516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.easytrading.exchange","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:51:49 GMT","end":"Sat, 26 Sep 2026 14:51:38 GMT"},"fingerprint":{"sha1":"98:86:B0:87:01:AA:1F:B0:0F:3F:B2:80:C2:3E:57:F4:E9:01:39:60","sha256":"E3:A8:C0:1B:6B:25:69:9D:9A:4F:59:8A:DE:67:84:37:42:19:FD:11:03:F5:6C:B6:7C:62:FB:21:1F:DF:3A:68"}}},"request":{"raw":"GET /__l5e/assets-v1/14755ca8-08fa-4066-9493-975c0bd57f6b/promo-rendimenti.jpg HTTP/1.1\r\nHost: www.easytrading.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.easytrading.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=8fQHL8GZxH0qccB05EbEsTT7aW4oWGSrWNd053YI2Vk-1784715934.4636052-1.0.1.1-pG_VLkas1mgELpUSwAhNfrMl2Zsv5201ovP4MyjvqS0Tw2Bi2GjDdIOY.IVNE4Frk.gbE1Sq.jk_CaAOGrdpmAPVtybt3il9q4spCW3DG5WI2JdQJapcigZR5RCRJfhQ; __dpl=97fea43b62d03ee2097ec23d2b151356f2aec7cab36d9dbdbe690bc6d034612a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:25:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 298009\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"a2aed6d0ffd43902eef1b71ddbbfdd9b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a1f1be04fafa8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298009,"size_decoded":298576,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1536, components 3","md5":"a2aed6d0ffd43902eef1b71ddbbfdd9b","sha1":"fea0c518a557ac8c1fc10b478d646a45ec278326","sha256":"fb6148c98c99a608469e5d9a2d317c703abc5dd80a9893df77475b9107f96cb6","sha512":"01e80e40ca7f4c464b92389d1c962b9524fd9be462d997a051cc1436170244867313f6543a6cf5027decbefd0afb661b8eace1c77354fa5e68c6617c21fcfdc3","ssdeep":"6144:LKMimA82+HJRlrqtPUirDnjFArdXdinjPofd7PLiKOLY:LKMHAp+AtvrDpWdQjgfUY","tlshash":"e05423159d4c3a6ad06a06f7ce78ff35e19687ec7be6d49170b04f18248297e228e1c7","first_seen":"2026-07-22T10:21:12.485689Z","last_seen":"2026-07-22T10:26:10.443572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.easytrading.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}